Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08cedb2eaffe507cdf663780e18981d24340f5d1.cer
File:                     08cedb2eaffe507cdf663780e18981d24340f5d1.cer (raw, json)
Hash identifier:          foynlxIYgZLUPjXofnC5stiqVcc9dQ8uIqUp9WkUfl8=
Subject key identifier:   88:0E:F5:A5:E3:05:8D:1E:2F:CA:C1:F5:29:6F:6E:4B:0F:E7:78:AF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D9E413
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/72d0877a-a507-4515-8ff5-d8eb3c925099/08cedb2eaffe507cdf663780e18981d24340f5d1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/72d0877a-a507-4515-8ff5-d8eb3c925099/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:31 +0000
Certificate not after:    Thu 18 Jan 2024 21:48:18 +0000
Subordinate resources:    AS: 264687
                          IP: 200.10.201.0/24
                          IP: 2801:12:9000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14279699 (0xd9e413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:31 2017 GMT
            Not After : Jan 18 21:48:18 2024 GMT
        Subject: CN=08cedb2eaffe507cdf663780e18981d24340f5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ee:5d:fa:e8:2e:c6:21:45:5f:bb:5a:ef:eb:
                    b3:bc:fa:2b:4f:22:ca:9e:07:57:e6:95:fa:8f:bb:
                    24:b1:d3:3e:04:05:0c:f8:48:e6:a1:34:61:03:a9:
                    75:0e:87:28:37:b0:d5:82:b1:f6:db:81:55:fc:4e:
                    78:35:5f:24:5c:0a:32:ef:4c:0a:4d:d8:b6:4d:76:
                    15:90:cc:f6:b6:63:93:e3:4c:86:18:99:91:b1:da:
                    6f:d8:30:9c:83:67:f5:03:37:53:63:68:f9:45:94:
                    bd:a8:ab:45:61:7a:61:03:e5:6e:3f:99:98:e3:bc:
                    8d:a1:c7:de:ab:8e:03:6e:be:50:57:eb:6e:81:bf:
                    d3:bd:32:8f:78:9c:ac:2d:01:2e:62:d7:9e:aa:fb:
                    81:7a:ef:7c:af:7b:00:d7:ff:5f:65:48:7d:3d:43:
                    e9:93:a0:95:a7:6c:ab:12:f2:12:6b:36:a1:0a:96:
                    12:f7:51:01:60:63:d4:af:99:1b:71:27:f3:26:3b:
                    fe:d3:5f:07:87:50:9e:09:f2:bf:08:f9:e0:27:a0:
                    49:6f:61:06:27:83:ef:cb:18:d5:99:79:a2:3b:cd:
                    05:d0:a5:c7:65:6b:38:06:59:ac:2f:15:e0:ed:57:
                    8b:da:68:9a:db:77:77:5d:55:28:e3:62:d7:a8:0d:
                    78:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0E:F5:A5:E3:05:8D:1E:2F:CA:C1:F5:29:6F:6E:4B:0F:E7:78:AF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72d0877a-a507-4515-8ff5-d8eb3c925099/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72d0877a-a507-4515-8ff5-d8eb3c925099/08cedb2eaffe507cdf663780e18981d24340f5d1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.201.0/24
                IPv6:
                  2801:12:9000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264687

    Signature Algorithm: sha256WithRSAEncryption
         be:54:1d:fa:e8:da:1a:8b:ef:0d:1f:f5:7d:8c:a2:3b:bc:27:
         8b:ee:fe:c5:21:f9:fa:7b:9a:0d:42:57:44:12:d3:82:20:c4:
         43:bf:5a:e1:0c:bb:bc:ad:54:5f:58:31:0a:60:8b:4d:86:59:
         ab:aa:f7:40:35:64:5f:6c:86:3f:03:eb:9e:c3:87:25:ad:3d:
         d3:e3:aa:db:b9:d9:b7:c7:97:97:69:3e:6c:8f:6b:0a:a5:b4:
         52:6a:b6:7d:76:4b:0d:66:b9:5a:20:40:7c:87:be:24:fa:8d:
         77:a4:30:73:0c:88:cd:05:81:18:79:9c:5b:d0:a9:4f:da:7a:
         8a:41:41:97:a6:81:cc:07:64:01:b6:2b:4c:38:0f:76:d8:ee:
         f7:74:39:1b:25:ba:11:f6:87:88:a2:92:21:0b:19:f6:af:5f:
         be:f2:79:88:57:3b:d6:ba:dc:76:45:14:e1:af:3f:7e:b6:d6:
         c2:db:5a:41:25:06:25:ba:1b:94:6d:1e:89:6e:f1:28:8c:6c:
         ea:7a:7d:ea:1d:8c:33:83:4b:cf:ca:3a:55:35:48:5e:cc:45:
         4a:27:f3:f3:8a:ca:46:be:96:ed:4b:6c:35:e0:13:8e:f0:77:
         65:2d:29:26:dd:4a:da:b9:33:84:f7:40:90:a0:6d:10:b6:81:
         8d:e8:c5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----