Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb177be6b76d82ba1ff6275ec50fecb39b73b104.cer
File:                     cb177be6b76d82ba1ff6275ec50fecb39b73b104.cer (raw, json)
Hash identifier:          HcEYiDX0GzGEkMpein8AHaBYhly9Y1/WRVQZLfEsF5g=
Subject key identifier:   E1:E2:4B:6D:C9:FB:C2:50:72:EC:C0:34:9A:10:6B:E1:94:45:C2:07
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01040397
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/cb177be6b76d82ba1ff6275ec50fecb39b73b104.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 27 Oct 2018 20:01:54 +0000
Certificate not after:    Wed 15 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 266755
                          IP: 45.233.64.0/22
                          IP: 2803:8720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17040279 (0x1040397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:01:54 2018 GMT
            Not After : Jan 15 05:00:00 2025 GMT
        Subject: CN=cb177be6b76d82ba1ff6275ec50fecb39b73b104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:98:51:28:8a:a8:91:a1:91:a6:18:f5:87:
                    8e:b3:d4:b1:6a:b3:f5:81:04:e8:20:6f:d5:c3:1d:
                    45:b0:c6:e1:09:f6:bd:ff:12:db:6e:c6:9b:81:66:
                    d3:12:98:25:7d:1c:56:35:c8:be:c8:ca:fb:ac:5f:
                    10:2a:98:85:df:97:39:f1:80:0d:d0:e8:a9:35:c4:
                    20:8b:d7:71:1b:27:d9:9d:57:2a:69:92:37:4d:c2:
                    69:99:19:7c:5d:ba:5a:5c:4e:f2:63:e6:b4:0c:a5:
                    af:44:bf:7d:6b:51:cb:95:46:83:8f:14:29:e0:cb:
                    46:30:af:ad:57:0c:89:be:46:dc:5c:64:fd:1a:20:
                    ce:1a:8f:2a:60:b5:b7:71:69:d2:48:a3:24:9e:9e:
                    9f:16:b3:ee:36:ab:10:e1:2a:e2:a7:86:28:fd:6c:
                    1e:79:35:e9:4c:39:b0:17:4e:67:cb:40:c5:6f:9e:
                    11:72:56:b5:ad:f7:d2:0f:c3:8f:23:d7:5b:3a:aa:
                    4b:8b:58:6a:3b:58:26:da:80:74:05:d1:8b:6d:52:
                    67:c6:aa:c7:96:d4:c0:d5:ea:48:99:24:f0:e9:e3:
                    10:c7:19:8f:c0:d5:21:f8:97:d8:40:c3:cc:a6:1b:
                    ab:4d:e7:46:34:61:79:c1:90:c7:17:c2:3b:94:e2:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E2:4B:6D:C9:FB:C2:50:72:EC:C0:34:9A:10:6B:E1:94:45:C2:07
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/cb177be6b76d82ba1ff6275ec50fecb39b73b104.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.64.0/22
                IPv6:
                  2803:8720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266755

    Signature Algorithm: sha256WithRSAEncryption
         57:ce:88:97:88:ad:0d:fa:c6:2f:aa:e7:e7:a8:d8:b2:f9:43:
         fc:fa:d4:74:29:3b:4d:7a:a2:f9:93:fd:90:7a:e4:ef:90:7a:
         d8:d1:e4:d4:b3:26:bf:33:ab:83:2f:ad:d1:7f:da:19:aa:57:
         52:42:ad:b8:53:4d:44:16:cc:ae:6c:60:82:c6:e6:c5:5b:0d:
         cc:78:ac:7a:1f:a4:b7:7f:0f:0d:1a:96:e9:18:d5:03:77:0a:
         77:d3:95:25:70:3c:b4:df:2f:9b:a0:22:bf:e6:84:7a:97:4c:
         77:49:bc:02:6b:9f:b2:33:c2:56:0f:27:f1:96:9b:a8:05:f3:
         37:94:33:b1:be:00:46:72:e7:81:6e:26:47:b4:0f:d6:da:04:
         b1:0a:29:72:82:9e:61:20:f8:85:0d:f5:04:68:9a:8a:40:2e:
         cc:b5:76:c1:01:92:48:a6:29:17:76:9e:91:73:79:9f:e3:ea:
         0c:26:da:8c:31:51:8d:2a:84:37:bc:42:01:ac:76:39:9b:6e:
         b0:c1:65:b6:56:ad:99:44:d1:a9:ad:b4:ff:ae:ca:da:b4:83:
         a6:82:14:20:d0:73:dc:1f:aa:5e:8b:ff:d4:71:c6:a3:3b:78:
         27:7d:a8:22:28:ea:2c:a9:7a:2c:b9:54:10:a1:6f:1f:20:62:
         d9:78:89:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----