Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f857a3da5081b9530c1290241ecfae5fb8eb0e2b.cer
File:                     f857a3da5081b9530c1290241ecfae5fb8eb0e2b.cer (raw, json)
Hash identifier:          YI0MbDmSUqbIJQbLaDV2V/qIKtPkMMSW8BH70GoelcY=
Subject key identifier:   E6:E8:91:D7:EC:02:7D:22:5D:97:AF:0D:5F:22:2C:F1:88:D7:04:C0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4B009
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/25cf3ba5-0abd-4389-a796-c4a374933ac5/f857a3da5081b9530c1290241ecfae5fb8eb0e2b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/25cf3ba5-0abd-4389-a796-c4a374933ac5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 24 Jul 2018 13:19:11 +0000
Certificate not after:    Sat 11 May 2024 18:19:47 +0000
Subordinate resources:    IP: 45.238.60.0/22
                          IP: 2803:7ca0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14987273 (0xe4b009)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 24 13:19:11 2018 GMT
            Not After : May 11 18:19:47 2024 GMT
        Subject: CN=f857a3da5081b9530c1290241ecfae5fb8eb0e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ab:b9:07:bc:08:a7:df:56:93:f5:6b:b5:0a:
                    43:a5:83:77:45:a5:37:c4:26:ba:71:aa:13:ab:0d:
                    12:d5:56:11:ea:84:f8:ee:11:86:c3:23:66:bc:ac:
                    47:d6:1c:b6:08:cd:3a:d9:e3:db:08:b1:3f:88:a4:
                    48:93:bf:85:9d:69:9c:30:60:ef:19:42:2b:6e:05:
                    f3:72:f7:d7:e8:59:b4:a5:52:3a:ad:14:ea:9d:99:
                    7e:2e:ba:1b:75:d8:f6:73:ad:4f:a3:94:d2:80:41:
                    c7:d4:25:c0:aa:49:ed:a3:eb:7a:5c:1f:67:28:8e:
                    25:36:b0:9c:2a:0a:0f:f2:f5:85:55:2d:8a:c1:6e:
                    6e:4f:92:d4:67:bd:c4:2c:81:2d:6a:75:53:34:a2:
                    c2:d3:41:2b:c0:0e:c2:d1:63:64:ae:a6:ba:c8:c2:
                    64:c4:64:27:f9:02:8c:ac:ba:06:de:64:e7:26:c5:
                    ac:47:cb:d8:3e:6c:a0:e8:ca:85:36:75:b3:38:97:
                    a8:5a:40:be:d8:73:f1:db:49:0f:88:fe:21:58:d0:
                    7e:5d:e4:00:0e:7d:e1:5b:1b:37:17:4d:29:6c:a2:
                    4e:c8:b9:32:6f:fa:f8:fa:dd:28:72:44:a9:fa:8c:
                    c0:41:7b:a9:2d:14:b5:15:ee:79:9f:96:8c:7c:4a:
                    e9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E8:91:D7:EC:02:7D:22:5D:97:AF:0D:5F:22:2C:F1:88:D7:04:C0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/25cf3ba5-0abd-4389-a796-c4a374933ac5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/25cf3ba5-0abd-4389-a796-c4a374933ac5/f857a3da5081b9530c1290241ecfae5fb8eb0e2b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.60.0/22
                IPv6:
                  2803:7ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:a4:34:10:75:c8:84:74:87:55:47:44:b2:ae:f2:2b:ec:80:
         e4:7a:72:5a:31:6b:94:8f:9c:5a:3e:cf:7c:68:8f:2b:ab:4d:
         c7:38:d0:9e:b7:15:8a:38:fb:36:79:ae:e7:7f:f9:7b:29:88:
         f9:a0:bc:3d:73:6b:ba:c9:34:b3:9b:ef:48:05:07:83:00:50:
         98:97:d1:19:fa:36:49:c7:d3:66:51:71:d4:15:02:da:7e:33:
         1f:b3:1d:d8:79:93:6c:3f:be:f2:2c:49:12:ed:e3:f8:a6:18:
         2c:be:76:9e:c3:98:b7:38:30:ab:1b:ed:6a:3b:96:9c:03:40:
         91:92:ab:49:fa:f4:14:ac:3c:9d:0a:8a:6d:70:a2:fe:20:2d:
         8a:6b:1c:88:aa:c8:2c:04:36:53:58:a1:2f:68:4d:54:69:78:
         ec:4c:3e:d3:1c:4a:b0:ba:7c:df:56:2b:74:40:97:23:e8:7b:
         48:dc:04:f5:d4:a0:ae:c3:44:98:2c:3d:23:94:7c:8d:d6:2b:
         35:6c:cc:b1:c4:0d:66:3e:db:ca:d4:62:8b:5c:f2:4e:71:8b:
         a8:98:c5:59:fb:e9:7c:92:f7:03:95:7f:be:db:7a:5a:9a:2c:
         69:40:2e:db:5c:f1:13:fc:e8:9d:35:a9:f9:4c:92:b4:db:ba:
         1a:11:64:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----