Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer
File:                     e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer (raw, json)
Hash identifier:          nEB04Dp2dWZUdre9DHSJc9IGawowt9tyGBf7APmQazc=
Subject key identifier:   AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104AF79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:29 +0000
Certificate not after:    Wed 22 Jan 2025 14:00:00 +0000
Subordinate resources:    AS: 20207
                          IP: 138.0.152.0/22
                          IP: 143.202.16.0/22
                          IP: 170.78.192.0/22
                          IP: 190.7.0.0/18
                          IP: 190.57.224.0/19
                          IP: 190.183.0.0/16
                          IP: 200.229.148.0/22
                          IP: 2800:6f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17084281 (0x104af79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:29 2017 GMT
            Not After : Jan 22 14:00:00 2025 GMT
        Subject: CN=e2edf50309c3c920eebef8b0ecf1643bb8c31a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:12:a4:ee:f8:70:6c:8d:b2:ef:88:c8:ae:
                    25:5f:29:cd:83:a1:c0:0d:12:79:b7:51:72:3d:7e:
                    20:8d:99:91:36:e2:87:eb:62:ef:46:1b:28:22:a0:
                    53:f2:ee:98:4d:15:6c:5d:fe:41:6e:2f:b6:a7:6c:
                    1d:dc:8e:62:52:56:7b:36:1c:d9:da:ef:26:85:dd:
                    57:2d:4e:53:92:47:29:9a:05:9a:92:38:f7:8f:19:
                    e5:ee:b8:64:fa:e5:a4:20:43:e6:c8:80:38:0a:73:
                    c1:b8:a9:2d:e1:23:c2:3b:92:f4:39:f2:70:c0:4d:
                    1d:d0:6f:3f:ab:2e:9d:00:ae:bc:96:cf:42:13:e6:
                    22:d6:90:64:b9:66:cd:c8:c4:b9:ba:ac:73:69:40:
                    bd:4b:9a:93:a5:a9:73:6a:43:e3:a3:c7:23:db:ae:
                    24:99:89:c1:f6:13:4f:a9:e2:f9:ae:bd:7e:c2:91:
                    ee:40:d4:02:de:3e:c5:0e:0b:9a:ee:26:a0:6b:1c:
                    2b:12:5f:bd:8c:34:e0:2c:bd:6d:70:9b:d7:7c:21:
                    1d:7e:17:2e:5e:ba:be:49:82:39:c1:26:18:8d:9a:
                    67:00:85:93:e8:06:7a:95:85:29:a5:38:70:4e:d0:
                    5a:1b:15:eb:99:00:1c:34:b7:38:1d:e9:aa:3b:24:
                    01:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.152.0/22
                  143.202.16.0/22
                  170.78.192.0/22
                  190.7.0.0/18
                  190.57.224.0/19
                  190.183.0.0/16
                  200.229.148.0/22
                IPv6:
                  2800:6f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20207

    Signature Algorithm: sha256WithRSAEncryption
         40:0d:4c:c2:5e:41:35:f2:b1:78:7f:91:7f:6d:b6:09:71:51:
         ff:37:49:c0:2d:e1:a3:a1:d1:f7:52:2c:93:7b:36:43:2e:e6:
         80:02:fb:9b:2e:da:90:2e:21:89:0a:22:bb:77:1d:ac:29:c5:
         5d:d5:8d:c8:aa:e8:f1:a0:da:3b:81:7b:74:de:47:54:2e:96:
         72:8e:2b:c2:b1:4a:45:fa:d0:9a:a3:b8:3c:43:9e:93:58:09:
         50:14:7c:83:d0:36:9d:81:0a:0e:e8:a8:ca:4b:75:a0:1e:27:
         85:fb:55:70:70:c3:96:1c:98:b7:44:5f:32:1f:d6:a4:d9:1d:
         e8:2e:fb:0b:15:07:5a:1f:36:e5:62:1c:bd:c0:ec:81:84:5b:
         5f:c8:35:f1:a1:ed:d0:25:37:fd:21:a3:5a:72:42:cc:9a:76:
         21:65:78:8f:fb:af:9f:4e:31:7e:55:40:ef:97:08:ef:81:44:
         f6:34:f6:a3:d4:b9:60:8f:69:a8:27:30:17:70:49:ef:6c:4d:
         d3:81:80:28:fd:1c:90:4e:47:9c:05:07:de:1f:6f:58:5d:f8:
         77:fe:50:4f:8e:e2:8b:86:17:ed:3f:19:e0:ba:42:01:5e:57:
         af:3c:56:15:0c:e1:ae:08:53:cf:48:d4:53:3c:8a:39:00:cb:
         ce:8c:8c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----