Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.cer
File:                     bef02a6151d23f223914a8f6eed9802b4dfd2a0b.cer (raw, json)
Hash identifier:          5BQM6SznpVNP8Y4u7OwU/D74XfzeRaIGBZJPw6l1iKE=
Subject key identifier:   9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102C13F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:21 +0000
Certificate not after:    Thu 02 Jan 2025 18:13:03 +0000
Subordinate resources:    AS: 52253
                          IP: 190.108.196.0 -- 190.108.215.255
                          IP: 190.124.220.0/22
                          IP: 2803:da00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16957759 (0x102c13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:21 2017 GMT
            Not After : Jan  2 18:13:03 2025 GMT
        Subject: CN=bef02a6151d23f223914a8f6eed9802b4dfd2a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:73:8e:b6:67:20:68:fe:41:5d:ee:9e:e2:
                    a6:99:cf:c2:a2:36:93:aa:7b:07:ce:d7:a8:61:10:
                    fa:56:ee:64:62:e7:e7:75:0a:fc:6b:7c:50:ed:2d:
                    40:c7:77:85:18:dc:43:9e:da:ad:63:77:86:c3:eb:
                    8a:ed:f8:bc:9b:08:a7:d5:d5:b8:9f:8e:5d:c5:fc:
                    12:62:57:f7:f6:5d:5b:e5:e2:b8:23:98:16:e2:0d:
                    0b:0b:91:a9:4d:5b:6b:1d:58:8a:89:4c:65:6b:38:
                    79:cd:7c:60:e6:78:ae:e7:d1:88:cc:3b:ad:ff:93:
                    5d:73:6a:a9:75:bf:e5:06:84:58:ac:23:84:ce:0f:
                    b3:6e:2b:99:02:63:a7:d2:e5:8a:b2:00:99:ed:4c:
                    18:d1:d5:3b:b4:37:39:22:2c:22:98:f7:50:ae:61:
                    89:6c:c3:1f:35:16:7e:e1:e9:c7:c8:19:c4:cf:47:
                    da:80:fe:a2:1e:02:0f:67:27:30:bc:ed:c6:97:ef:
                    b8:67:a7:da:50:3a:38:2a:bc:cc:e6:69:4f:17:6d:
                    2d:80:c2:0f:3b:20:f2:0d:aa:96:15:16:c4:d1:8b:
                    ca:20:d8:a5:6a:a0:f1:23:61:15:50:89:bb:bf:49:
                    b6:ee:24:35:85:c1:9b:85:d8:35:33:bb:06:1c:24:
                    a8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.196.0-190.108.215.255
                  190.124.220.0/22
                IPv6:
                  2803:da00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52253

    Signature Algorithm: sha256WithRSAEncryption
         2d:00:3a:f2:c7:bc:ca:f5:f2:0c:4b:61:cf:ad:c4:08:fb:a0:
         24:10:95:2f:20:ba:19:fe:87:01:28:2f:1c:96:fb:8e:aa:4c:
         16:8e:f6:47:f4:96:5f:35:01:e1:66:24:29:44:5d:d8:fc:86:
         c0:79:a6:fd:cd:92:2a:7a:a2:79:28:40:f2:aa:0a:ac:45:ae:
         dc:05:22:95:3e:9d:80:ca:1d:3b:38:be:24:68:db:b9:87:c2:
         61:c6:59:d7:a5:96:ac:1a:7f:02:69:f5:4e:bc:77:4f:46:5a:
         ab:f5:c2:af:c4:a6:85:4b:ac:04:17:66:8f:33:6a:2d:42:07:
         19:8d:5d:ea:c1:7c:8f:4c:f7:1a:00:2f:a6:df:e7:ff:bb:67:
         91:19:7a:7e:87:d4:b3:fa:2b:33:58:e1:2c:c7:fb:f3:8c:3d:
         4e:e9:23:8a:e4:75:0c:47:7b:3b:90:c7:16:2f:b1:8d:bc:90:
         5e:a6:c4:eb:18:02:62:a8:df:a1:b0:e0:d5:f8:ad:e6:dc:38:
         92:45:67:13:f5:a0:20:a8:94:c5:ff:83:a9:5e:8f:a0:a7:54:
         4e:e2:d5:47:c8:e7:d4:d3:3c:7b:65:58:4f:2f:86:43:61:5a:
         a4:7f:34:f2:ce:21:2a:74:47:f1:3d:02:8f:4d:f4:4a:74:a8:
         31:11:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----