Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer
File:                     0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer (raw, json)
Hash identifier:          kJoy3wc1C3LFn7pZjadsnB/8d5kAEWWo49ac3/2ae40=
Subject key identifier:   C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED7CAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:22 +0000
Certificate not after:    Sat 13 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 264773
                          IP: 168.197.172.0/22
                          IP: 2803:f0c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15563946 (0xed7caa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:22 2017 GMT
            Not After : Jul 13 06:00:00 2024 GMT
        Subject: CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:32:fe:62:ec:1b:e6:d7:1b:06:f9:a9:e2:bb:
                    d8:68:dd:89:6e:95:c9:08:c2:b7:d3:b8:80:ad:29:
                    25:0a:bc:fb:86:e7:5a:68:05:ba:a2:54:cd:77:3e:
                    eb:52:2b:b0:70:39:0e:9b:00:d7:a4:f1:91:c4:ad:
                    e9:ba:d2:4a:4c:0f:9d:16:3c:ee:83:03:1f:2c:46:
                    ee:43:21:5f:85:37:fb:f9:13:ee:38:5d:f7:00:6d:
                    d7:db:19:6e:04:03:72:89:e6:b2:58:aa:18:c3:e5:
                    6b:06:06:9e:06:d8:91:02:be:b6:e8:6c:fa:06:e6:
                    e4:df:79:56:c6:e0:79:ed:4b:d4:d5:fc:65:32:f2:
                    1a:b6:ee:cc:eb:a6:36:6e:fc:5c:9a:9f:e5:90:01:
                    86:aa:e7:df:d0:99:4f:98:d4:61:f0:9a:96:58:de:
                    37:4b:60:99:09:a3:4e:08:3b:20:3f:c4:31:81:b5:
                    bb:55:34:4d:0d:7b:59:16:08:76:50:08:37:c2:4c:
                    0f:04:a6:5f:d2:3f:e5:52:5b:8a:c7:1c:3e:b1:fe:
                    3e:f5:ad:50:4d:9d:f7:c2:72:51:50:6a:82:85:05:
                    13:4c:75:6d:e9:25:d5:03:57:70:56:5c:6b:ec:41:
                    8a:5d:47:0d:45:2c:d2:ba:a9:b4:c0:62:6d:2f:90:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.172.0/22
                IPv6:
                  2803:f0c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264773

    Signature Algorithm: sha256WithRSAEncryption
         a2:fa:cf:d3:db:e1:ab:99:ec:14:7d:07:05:75:ae:bf:74:67:
         b0:bc:a8:8a:71:7c:80:2e:30:1b:2c:d3:a8:c3:8d:c8:8d:bf:
         73:9a:2d:8c:b4:fe:55:8d:8e:61:48:ef:15:fd:c8:4e:e4:1b:
         ff:45:53:a5:ee:03:f3:53:43:4f:18:9c:74:8a:74:19:41:77:
         12:4d:83:5b:a6:da:72:38:ce:22:e4:10:35:c0:45:b8:50:fc:
         80:cf:be:04:fb:8d:16:4c:e5:c9:68:2a:90:64:12:b2:18:82:
         9d:d8:85:1a:85:0c:fe:f6:16:b7:d6:cf:2f:57:c8:4a:6a:04:
         e9:9f:38:9e:5d:78:4e:df:33:7d:de:3b:ba:5f:4f:7b:05:9b:
         69:39:19:a3:e6:55:60:1e:e8:ea:e8:8a:7a:3a:4b:ea:97:63:
         71:90:6b:73:28:0b:3f:9f:c0:de:33:8a:8d:84:81:8c:87:42:
         0a:b2:82:79:0c:ce:b8:78:19:1c:f6:65:17:46:75:1a:f9:24:
         6b:69:56:fb:5f:ca:51:8b:2e:4d:7b:11:3f:3e:28:87:a2:fe:
         40:9a:8e:5e:9e:8d:d8:dc:c0:fb:df:c3:57:bb:54:34:12:33:
         e0:ad:b5:8c:a1:4f:de:7a:82:d3:86:6c:f7:5d:f2:1f:e8:a6:
         10:17:5d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----