Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c762e3663c49c6163cbc84c15751626392abf3fe.cer
File:                     c762e3663c49c6163cbc84c15751626392abf3fe.cer (raw, json)
Hash identifier:          dbDoXTvCp1ekHf2iBgbnOxb7rdLpuFb/OyzUzMMFONw=
Subject key identifier:   05:CC:B1:18:E6:98:F6:30:38:58:6F:E3:37:0A:D5:B1:91:43:99:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101EAFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/df6a3bfc-6158-44fd-bdbd-8c8fec861163/c762e3663c49c6163cbc84c15751626392abf3fe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/df6a3bfc-6158-44fd-bdbd-8c8fec861163/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:05 +0000
Certificate not after:    Sun 22 Dec 2024 17:53:20 +0000
Subordinate resources:    AS: 264686
                          IP: 168.181.160.0/22
                          IP: 2803:ad40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16902911 (0x101eaff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:05 2017 GMT
            Not After : Dec 22 17:53:20 2024 GMT
        Subject: CN=c762e3663c49c6163cbc84c15751626392abf3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8b:e3:dd:75:06:9d:4e:dd:a2:a6:2e:02:16:
                    1c:51:b1:be:d8:e6:ac:dd:5f:cb:8d:8c:d2:d6:74:
                    d3:2f:47:3e:03:fd:8b:cf:aa:bb:3a:7c:c1:d3:f4:
                    11:93:47:d0:c3:2b:ff:83:f5:4c:39:6c:bf:e2:da:
                    2d:ca:72:d6:15:aa:30:35:61:13:e4:43:27:61:0f:
                    10:6b:c8:40:e0:65:57:a6:e8:5d:4f:24:43:79:a9:
                    df:85:a3:f9:e0:ff:bc:69:7c:4b:1c:a6:54:0a:c0:
                    8d:46:49:d7:48:94:94:93:09:35:8c:4f:57:c8:90:
                    00:dc:e3:20:47:2d:65:a4:ba:cb:0f:0b:7b:7b:ff:
                    77:ff:b7:c3:13:9f:d5:23:96:54:82:0c:f5:b7:78:
                    80:91:9f:eb:5c:01:4c:fb:c4:b0:a7:60:1f:c2:cc:
                    41:58:53:d9:17:a6:15:bd:6b:a1:b0:8c:5a:87:cb:
                    e9:8c:fa:34:60:83:6d:1e:42:79:10:78:38:f9:26:
                    d3:31:11:ae:33:08:5d:d7:10:db:bf:53:41:32:c0:
                    71:83:28:17:9b:bf:89:f0:b1:1f:2f:e8:d7:91:72:
                    1a:d8:22:d2:31:08:bc:a9:01:fc:ad:7f:6b:f6:9d:
                    0b:31:8f:20:ab:ec:74:6a:3b:ee:31:e6:ef:f5:b9:
                    66:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CC:B1:18:E6:98:F6:30:38:58:6F:E3:37:0A:D5:B1:91:43:99:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/df6a3bfc-6158-44fd-bdbd-8c8fec861163/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/df6a3bfc-6158-44fd-bdbd-8c8fec861163/c762e3663c49c6163cbc84c15751626392abf3fe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.160.0/22
                IPv6:
                  2803:ad40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264686

    Signature Algorithm: sha256WithRSAEncryption
         3a:aa:0d:17:93:bd:d1:5a:f8:82:64:1b:9f:d9:d6:7d:bf:d4:
         fd:13:b2:aa:2a:13:a0:15:70:1f:52:8e:92:15:e2:74:f9:71:
         0d:c7:62:2c:95:25:a5:22:e7:d6:21:aa:af:a2:f0:08:af:c8:
         bf:18:fc:a9:dd:e7:41:89:78:d1:23:d0:de:4f:b6:a3:8c:10:
         a9:45:a9:34:f4:98:ea:7d:b7:5a:a5:bd:54:96:18:49:36:35:
         1e:81:7b:78:86:75:cf:ca:d1:71:d4:2e:c6:87:6d:14:8d:eb:
         f8:cf:f2:c4:77:c0:f2:24:59:15:4e:38:09:84:85:ef:6c:a8:
         ee:c1:63:34:15:82:33:24:42:68:dd:6e:bf:f0:3c:5a:11:81:
         6a:04:59:e7:75:bb:32:6f:c1:ac:54:19:7f:fc:ae:3b:d9:08:
         ec:6c:f9:24:45:3b:ab:34:b6:9a:53:f6:8d:52:7a:9f:54:77:
         bf:20:28:78:29:57:86:81:52:67:15:24:62:94:14:64:59:e1:
         81:f5:f6:4c:3a:95:3d:c6:4b:7a:45:3f:4c:d6:88:ab:f7:e2:
         7a:b0:90:d3:80:a5:fd:20:ec:8d:f9:7c:83:69:38:2b:33:d4:
         1a:f9:e6:df:85:0f:ff:f4:08:6c:f8:d8:02:d1:72:bf:b6:af:
         1e:0a:08:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----