Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09b2a7b6b46cbb78506dc54450c78418cb35731c.cer
File:                     09b2a7b6b46cbb78506dc54450c78418cb35731c.cer (raw, json)
Hash identifier:          iLzDtLpDT0n3sMeOJ3KyeKX6WtQ6l9ScXVdTPJxOTEI=
Subject key identifier:   AF:10:E7:81:94:4F:6C:AC:21:57:BD:23:FF:77:26:B5:C3:DA:E2:D9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0FCE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/41150e2a-9bfb-4f43-aa53-21152f1ac84e/09b2a7b6b46cbb78506dc54450c78418cb35731c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/41150e2a-9bfb-4f43-aa53-21152f1ac84e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:50 +0000
Certificate not after:    Wed 07 Aug 2024 00:04:09 +0000
Subordinate resources:    AS: 264664
                          IP: 200.9.234.0/24
                          IP: 2801:1a:1000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15793381 (0xf0fce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:50 2017 GMT
            Not After : Aug  7 00:04:09 2024 GMT
        Subject: CN=09b2a7b6b46cbb78506dc54450c78418cb35731c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:74:08:27:65:ad:86:cc:e9:be:af:ce:cd:
                    f5:42:28:95:31:68:af:dc:47:10:03:d9:f2:c1:79:
                    cb:fb:75:4a:08:3b:5a:4b:10:7c:7e:e0:84:1a:cf:
                    75:41:40:6e:38:20:9b:1c:1f:5e:36:cd:bf:c1:05:
                    d6:bb:3b:4c:76:70:9a:fa:e6:78:d0:dc:31:a6:3b:
                    6b:3b:54:be:7c:1e:ad:ad:01:6a:69:c9:02:d6:7a:
                    ff:bc:ed:57:f7:40:36:80:05:c3:04:dc:48:f4:1e:
                    b1:e0:10:23:d2:df:2f:c9:ad:43:68:20:a4:f1:00:
                    7f:39:3d:f9:31:9a:4a:ae:8e:3d:bf:f2:46:c3:ed:
                    60:98:3b:58:f8:35:a1:a8:d2:60:18:8c:ca:6a:fd:
                    20:f5:5a:e3:42:43:9b:86:9c:27:f0:58:25:67:04:
                    a4:dd:b8:29:e2:93:63:b2:8e:3a:8e:ac:1f:a0:de:
                    41:19:8f:8a:5d:54:aa:d3:79:33:67:ce:44:9c:04:
                    c3:f4:66:98:14:03:b1:90:e5:4c:ae:fa:6b:55:fa:
                    25:7e:f8:64:fa:49:c1:da:44:72:8e:a1:65:9d:dd:
                    7b:18:f0:7a:b1:bc:5b:6d:c1:ac:38:a5:72:b8:11:
                    26:f3:39:f5:32:25:73:fc:68:92:a0:4a:89:1f:cc:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:10:E7:81:94:4F:6C:AC:21:57:BD:23:FF:77:26:B5:C3:DA:E2:D9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/41150e2a-9bfb-4f43-aa53-21152f1ac84e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/41150e2a-9bfb-4f43-aa53-21152f1ac84e/09b2a7b6b46cbb78506dc54450c78418cb35731c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.234.0/24
                IPv6:
                  2801:1a:1000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264664

    Signature Algorithm: sha256WithRSAEncryption
         bc:04:da:1d:00:67:db:cb:f6:f8:df:70:3c:77:65:c7:13:73:
         3d:90:d2:b8:37:91:95:bb:7f:a5:00:67:ed:18:ee:ae:74:1c:
         66:b4:9e:c4:e8:e3:e5:bb:78:02:17:b1:f2:9a:63:39:0f:fa:
         b0:7f:4b:e6:23:75:4d:59:bb:f3:f9:35:fc:a3:5a:db:8e:b1:
         84:62:cd:44:16:03:e7:41:d6:84:c7:fe:50:b0:69:05:fa:4c:
         81:16:59:da:8d:46:2c:1a:37:dc:c2:8d:73:60:71:27:a0:fb:
         fe:40:35:db:40:9f:98:47:99:d3:6d:2a:2d:e1:16:34:ab:09:
         b9:a1:8e:89:48:96:6d:9d:1e:79:e7:bd:4c:30:fc:1e:8d:0b:
         27:2f:0e:a9:3e:06:a5:ab:3e:04:c5:8c:ef:f2:a5:a4:d1:80:
         41:b8:5f:6e:4f:f7:5e:bb:c5:61:87:bc:fe:53:2b:37:3b:7d:
         65:2b:a8:43:cd:84:f0:1c:d9:e8:02:ea:1d:37:6d:bf:49:5f:
         d0:ac:1e:e2:cc:78:d0:3c:b0:d9:17:16:27:a9:37:0c:a2:ba:
         b3:cb:70:23:1a:62:6e:a0:65:ba:58:3e:20:76:c5:33:e3:16:
         c7:73:22:64:cb:ef:45:65:52:83:91:e7:8a:29:5b:ea:ff:dc:
         31:e9:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----