Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c46581e11951c191f06e1ce048950d90422a76fe.cer
File:                     c46581e11951c191f06e1ce048950d90422a76fe.cer (raw, json)
Hash identifier:          dXAEDbIQxJtsQzYrmw3Jr+jR3orrtlbt9xuVAzcMisQ=
Subject key identifier:   8D:17:EC:E5:13:38:A0:B4:34:D5:E2:4D:FA:89:CF:39:B2:9F:A6:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01010300
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2975f884-f55a-4b19-a3c4-167dac967bff/c46581e11951c191f06e1ce048950d90422a76fe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2975f884-f55a-4b19-a3c4-167dac967bff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:22 +0000
Certificate not after:    Fri 13 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 28088
                          IP: 181.199.176.0/20
                          IP: 200.59.24.0/21
                          IP: 2803:3f00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16843520 (0x1010300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:22 2017 GMT
            Not After : Dec 13 04:00:00 2024 GMT
        Subject: CN=c46581e11951c191f06e1ce048950d90422a76fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:eb:9d:bf:c4:97:3c:2a:93:5c:e7:81:9a:
                    e6:28:6e:23:95:9d:69:34:03:28:ed:23:07:ee:f0:
                    d7:35:6d:53:71:16:07:6b:34:f6:8d:68:ae:23:e5:
                    0b:f9:60:94:8e:ed:79:db:84:b2:6d:69:d7:16:42:
                    86:bc:cd:b5:c6:cc:e1:67:48:63:0b:40:83:57:72:
                    0c:4d:95:90:a3:1a:d7:33:c8:2c:f1:ca:1d:09:3c:
                    3a:d4:ce:6a:17:dd:80:a8:d6:85:9c:dd:3d:cf:9a:
                    de:c0:60:c7:17:b3:2f:81:2d:8f:01:b5:3f:cd:f1:
                    35:89:64:50:0f:8f:3e:b2:c1:59:43:b5:95:95:a8:
                    9b:6a:da:ac:c7:0c:8f:4d:b1:48:bf:ce:2b:33:8c:
                    a5:fe:36:e0:89:ef:41:3a:78:95:91:3b:36:3f:e4:
                    c1:86:1d:83:83:6b:18:a7:b9:c8:f6:65:ba:6d:76:
                    db:f2:de:65:74:77:46:ae:7f:8f:ed:3c:25:fa:4f:
                    b5:7e:f6:6b:3b:35:c4:92:f8:17:70:ac:9d:a9:51:
                    f6:3d:80:58:b6:d8:44:dd:ce:b3:6a:4a:28:7c:1a:
                    83:5e:1d:00:3e:1c:ea:d2:3b:c9:e4:31:52:b9:e6:
                    b5:19:19:60:63:56:12:d0:65:57:5c:56:45:12:f2:
                    49:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:17:EC:E5:13:38:A0:B4:34:D5:E2:4D:FA:89:CF:39:B2:9F:A6:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2975f884-f55a-4b19-a3c4-167dac967bff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2975f884-f55a-4b19-a3c4-167dac967bff/c46581e11951c191f06e1ce048950d90422a76fe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.176.0/20
                  200.59.24.0/21
                IPv6:
                  2803:3f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28088

    Signature Algorithm: sha256WithRSAEncryption
         a5:41:69:9a:b1:44:f2:85:37:b2:02:55:9c:c2:ba:e7:92:1c:
         31:19:1c:7f:e3:b7:cb:40:88:2e:5d:b8:67:ef:4f:a3:5c:9c:
         96:71:51:2a:0a:8c:9d:97:7f:9c:4d:ee:8c:1a:96:ac:0e:d8:
         3e:f4:2f:7a:c9:8c:e1:95:96:c7:dc:70:9e:18:a5:48:7a:ef:
         eb:b0:9a:2f:89:8e:06:51:e9:81:6c:f7:8c:3d:ad:48:92:c1:
         11:bb:e0:c3:53:4e:9d:49:fb:81:80:e9:8b:d9:cf:6a:da:f4:
         5c:67:dd:04:7f:23:ac:57:ee:70:c0:9b:67:31:84:12:67:de:
         11:5a:42:82:9a:c8:a7:db:f0:49:6f:f2:19:41:99:83:41:a9:
         2e:cb:a5:78:fc:46:ef:6b:60:fc:27:ea:dc:80:8e:5a:a7:8c:
         e9:c1:cd:43:42:8b:c6:e4:36:8f:be:1f:7b:a5:bf:ed:e4:ae:
         38:1a:0f:d2:54:3e:14:95:33:a1:9c:95:25:79:5b:17:90:03:
         43:8c:e2:0e:fc:ea:a0:82:89:ba:d5:1c:43:85:ad:02:e5:4d:
         1a:1d:01:c8:9b:07:0b:cf:31:c9:3a:8a:2c:b5:27:e8:51:46:
         79:59:1a:19:0e:dd:a9:48:a1:35:1e:4a:55:7e:8e:9f:e7:fa:
         f5:3c:07:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----