Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d043298a0fcd1f8b112ec1b800dc8a364b399816.cer
File:                     d043298a0fcd1f8b112ec1b800dc8a364b399816.cer (raw, json)
Hash identifier:          WG+u6AOyRcjKsyUyO42ZqY1ipZ2NGBuj7rPVwkfvoao=
Subject key identifier:   B8:82:CF:DA:A3:68:FD:86:C9:C5:2F:80:1D:87:57:B2:C1:88:DE:44
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01020A9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3797a057-8caa-4256-b01a-f727f25dfea6/d043298a0fcd1f8b112ec1b800dc8a364b399816.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3797a057-8caa-4256-b01a-f727f25dfea6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:28 +0000
Certificate not after:    Mon 23 Dec 2024 18:32:05 +0000
Subordinate resources:    AS: 52469
                          IP: 181.174.164.0/22
                          IP: 190.14.36.0/22
                          IP: 2803:8c80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16911006 (0x1020a9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:28 2017 GMT
            Not After : Dec 23 18:32:05 2024 GMT
        Subject: CN=d043298a0fcd1f8b112ec1b800dc8a364b399816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:13:e1:86:e1:fb:3f:32:e2:ed:3a:cf:c9:
                    dd:32:c4:e5:eb:9a:b6:71:c5:29:46:7e:5f:74:20:
                    82:69:93:a7:40:34:64:0a:40:b5:8b:73:a8:ea:92:
                    ef:44:32:3b:0c:1f:c3:ce:90:19:4f:90:b8:33:b8:
                    e6:43:32:7c:5f:45:5f:97:62:be:f6:5f:e5:e0:2b:
                    f3:6c:4a:60:03:f3:ff:b8:18:cc:11:4a:2f:64:5e:
                    52:13:21:69:03:40:1c:ab:90:f8:76:36:ea:bd:91:
                    a2:62:64:09:83:15:4a:c6:79:fc:94:6b:53:48:37:
                    d9:5b:e9:e8:fb:da:5e:6c:cd:f5:35:49:a9:67:45:
                    fb:31:e0:3e:24:ac:01:13:f2:54:7c:81:50:f7:e3:
                    da:d4:0e:7a:67:5e:89:ca:a5:80:a8:35:13:43:2f:
                    16:4b:27:68:cd:75:2a:7d:0e:50:87:9c:39:8e:b2:
                    22:81:f9:83:c3:84:28:5a:a4:35:46:79:23:dd:69:
                    89:0e:0b:a0:0b:77:d1:2d:f5:c2:f6:66:fb:98:85:
                    1d:5d:fb:4a:ea:43:ca:cf:d8:99:fa:c1:97:0f:3b:
                    1e:ac:82:c8:df:6c:a7:1b:55:df:61:00:97:9e:62:
                    8c:4d:6c:2e:91:a9:4f:02:9b:b8:86:4e:82:c5:fa:
                    ce:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:82:CF:DA:A3:68:FD:86:C9:C5:2F:80:1D:87:57:B2:C1:88:DE:44
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3797a057-8caa-4256-b01a-f727f25dfea6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3797a057-8caa-4256-b01a-f727f25dfea6/d043298a0fcd1f8b112ec1b800dc8a364b399816.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.164.0/22
                  190.14.36.0/22
                IPv6:
                  2803:8c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52469

    Signature Algorithm: sha256WithRSAEncryption
         5f:bd:bb:08:9d:82:28:21:bd:7e:2e:ed:0c:ae:98:ca:26:5a:
         27:45:f6:c9:d7:04:b5:7c:a4:d9:a7:73:b5:ba:52:87:49:3a:
         20:f7:05:58:21:33:f8:1d:0d:d8:bc:07:86:12:f7:b2:da:e7:
         9a:ff:1c:a8:92:b9:0d:62:48:1a:ce:3e:ee:e7:13:53:35:8b:
         47:a1:fc:89:3e:7f:cf:5b:7a:7f:69:e2:42:47:ac:6c:84:78:
         10:da:d2:8f:f9:eb:f3:b3:da:33:22:99:2a:44:3f:ec:4a:9b:
         de:44:9a:32:4e:3f:c4:e9:c9:b9:d3:d5:db:ff:06:5f:6e:91:
         3d:0f:4a:72:2b:e8:8c:e2:e4:8c:5d:2b:c8:db:d6:94:11:51:
         4b:ca:75:a3:4a:ea:9e:6a:2b:3d:9a:fa:87:86:76:2d:f0:e4:
         22:4b:db:f0:92:70:d1:ae:ca:1a:24:aa:bf:b6:ad:44:56:69:
         95:36:25:ed:46:82:63:97:ee:a8:9e:f5:c1:cf:36:85:59:f9:
         ea:e4:78:cd:93:b0:92:32:e4:8d:a9:1c:c7:ce:f9:84:60:d1:
         57:f7:05:e2:2d:22:ab:6e:bd:cf:ce:93:63:58:fd:ce:32:b9:
         23:96:69:e2:48:4f:d5:b8:79:c9:f0:ca:36:a1:2b:62:11:b0:
         62:e4:c3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----