Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bba00c9e212b68aac90a0d26d072a417cd9bbab.cer
File:                     0bba00c9e212b68aac90a0d26d072a417cd9bbab.cer (raw, json)
Hash identifier:          /w3Ej7Y8w1LLVDCXu7OiD7rE9FsJTycC7J/CXQVUsrI=
Subject key identifier:   BD:89:59:86:22:5C:5F:7F:D7:F1:AB:31:56:D0:93:42:4D:9B:52:6A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D946B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/0bba00c9e212b68aac90a0d26d072a417cd9bbab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:02 +0000
Certificate not after:    Wed 10 Jan 2024 17:50:10 +0000
Subordinate resources:    AS: 262184
                          IP: 45.5.60.0/22
                          IP: 187.49.248.0/21
                          IP: 190.5.212.0/22
                          IP: 190.211.92.0/22
                          IP: 2803:9ec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14239412 (0xd946b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:02 2017 GMT
            Not After : Jan 10 17:50:10 2024 GMT
        Subject: CN=0bba00c9e212b68aac90a0d26d072a417cd9bbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:bd:23:20:d4:e6:96:36:22:c6:4d:cf:1c:
                    3d:88:ba:d9:dc:2c:28:ce:78:01:b5:e2:b9:4f:68:
                    21:75:49:13:c5:0a:cb:88:cb:ff:72:34:e7:5e:3e:
                    58:c7:34:df:d4:81:8e:f8:d4:66:eb:1d:cb:16:a8:
                    28:0e:12:46:c3:b6:ad:71:6f:74:b8:5b:e3:1e:e7:
                    22:86:c8:f5:90:53:7b:2d:cd:2c:be:b1:5c:f2:0c:
                    f8:41:69:53:03:a6:4e:97:db:ea:87:7d:82:05:9a:
                    b4:d0:40:ea:71:c0:d2:7b:5e:33:ab:69:06:24:1c:
                    43:c3:47:05:28:59:33:43:19:a2:3e:32:3c:2b:af:
                    dc:80:a8:7d:76:f9:5a:d9:79:c4:df:fe:45:91:b7:
                    ae:e8:3d:1d:79:da:41:58:11:cd:8c:df:86:58:f2:
                    bd:41:10:6e:96:47:5e:e0:b7:42:b2:c0:e7:7a:ee:
                    91:7c:c7:a5:62:90:b0:77:ae:25:82:09:be:92:a6:
                    b8:f3:d5:8e:9c:c1:a7:c3:83:0c:e8:28:da:e3:1a:
                    b3:24:93:62:e4:4f:0e:de:b9:08:c9:3c:5d:03:92:
                    19:7b:50:e0:26:59:89:2a:ce:05:3f:94:28:78:2b:
                    aa:4c:7b:bd:1c:c5:a7:3f:7b:4d:c8:03:2a:32:8b:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:89:59:86:22:5C:5F:7F:D7:F1:AB:31:56:D0:93:42:4D:9B:52:6A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/0bba00c9e212b68aac90a0d26d072a417cd9bbab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.60.0/22
                  187.49.248.0/21
                  190.5.212.0/22
                  190.211.92.0/22
                IPv6:
                  2803:9ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262184

    Signature Algorithm: sha256WithRSAEncryption
         95:60:b2:4e:db:2c:ae:03:a2:2d:65:77:fb:f5:35:f2:4d:88:
         fc:a2:26:96:62:4c:8a:d5:91:00:ca:20:98:bb:b2:27:0d:83:
         a5:8e:df:44:0b:68:85:2b:69:75:53:b1:35:01:23:db:7e:7a:
         3d:c6:63:05:5f:c5:76:c3:2c:09:b4:c1:2d:62:f8:1b:a2:1b:
         88:3b:a2:7d:ee:62:a3:bd:66:1d:e0:48:97:c4:15:e2:83:7c:
         6d:66:69:65:a8:d2:28:e0:82:5a:5d:65:87:27:05:db:65:0a:
         35:18:a5:68:63:42:02:74:7b:6d:62:f5:68:6f:2b:f2:ff:3d:
         8a:92:c2:34:fe:5a:22:8b:20:1d:6a:23:73:3d:fd:0d:91:28:
         cc:62:ca:0b:7a:3d:04:8e:27:5a:0b:26:4e:c2:91:79:60:51:
         31:75:61:ae:fd:90:ba:e2:7e:54:73:4c:be:cf:00:db:bb:67:
         22:fd:e8:71:23:78:dc:b3:71:96:9c:7b:61:64:c9:47:c8:75:
         c2:40:02:f4:1e:7e:4f:df:95:a8:fb:f9:e1:0b:39:66:a3:24:
         21:2c:04:ba:10:90:57:12:25:71:c4:d8:4d:aa:11:ca:cf:22:
         5b:97:a1:bd:6f:b8:6c:1c:d7:51:fc:29:a9:6b:6f:74:5d:ee:
         00:67:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----