Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1e4693d764704e80a683f2020193ad8c102cda.cer
File:                     0d1e4693d764704e80a683f2020193ad8c102cda.cer (raw, json)
Hash identifier:          sfTl0zt9eq415vRTzz1SF6fg+8W9F6ZwBTNsDO6tW1s=
Subject key identifier:   3D:E6:09:A7:C1:88:8C:93:26:06:9A:E6:A0:B3:06:CC:BB:F1:DD:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100CA4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/0d1e4693d764704e80a683f2020193ad8c102cda.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:06 +0000
Certificate not after:    Mon 17 Mar 2025 21:25:05 +0000
Subordinate resources:    AS: 64156
                          AS: 265721
                          IP: 45.65.244.0/22
                          IP: 200.58.240.0/21
                          IP: 2803:4dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16829002 (0x100ca4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:06 2017 GMT
            Not After : Mar 17 21:25:05 2025 GMT
        Subject: CN=0d1e4693d764704e80a683f2020193ad8c102cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:6c:b2:06:fe:a2:a7:c1:45:59:66:1d:85:
                    bc:05:5f:26:2c:61:f4:fe:80:62:d5:2c:5d:90:4d:
                    03:e2:ec:32:70:2f:86:b8:43:c7:83:c9:f5:f8:e3:
                    6e:7b:c7:e9:f5:5c:a9:b8:16:29:93:64:95:57:e3:
                    4f:7e:43:cd:8f:c8:1f:69:e6:e3:bb:b0:6c:17:63:
                    25:f7:be:e9:5b:51:90:f9:42:24:b1:9a:1e:c0:a6:
                    84:bc:01:33:9c:ee:b5:ff:80:6b:82:cd:95:30:24:
                    73:5b:93:37:e5:89:ec:69:bc:27:ae:60:65:24:32:
                    ec:5e:98:18:7e:ab:11:7f:0b:4c:58:2d:d1:73:25:
                    2c:30:d5:e3:ff:29:3e:ed:b1:b4:47:bf:f6:9c:f0:
                    2e:56:be:b1:ef:d3:40:6c:fa:01:48:6d:e3:36:23:
                    73:e4:95:bc:6d:8c:c6:5a:20:b1:4d:22:84:2a:cc:
                    d4:19:b5:04:4c:4e:76:80:a2:2b:10:b6:51:6d:81:
                    ef:40:bb:d5:b0:9d:be:c2:b9:f8:80:50:c1:de:5f:
                    8e:9c:48:a1:c2:a8:54:6d:6c:13:16:6d:7b:bb:0c:
                    1f:0f:ef:d2:09:c2:36:53:05:c9:c2:ed:c5:1f:30:
                    90:e7:7e:da:5d:45:8a:e8:74:7a:99:2a:82:40:b8:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E6:09:A7:C1:88:8C:93:26:06:9A:E6:A0:B3:06:CC:BB:F1:DD:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/0d1e4693d764704e80a683f2020193ad8c102cda.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.244.0/22
                  200.58.240.0/21
                IPv6:
                  2803:4dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64156
                  265721

    Signature Algorithm: sha256WithRSAEncryption
         04:52:13:ad:ed:ee:88:8b:c6:2c:4e:8b:7d:f3:3e:13:89:77:
         20:59:b9:b5:7d:db:c7:01:53:f2:a7:03:66:d2:88:d5:5e:0f:
         1f:4a:f1:ed:5e:fb:87:c4:e9:86:f5:b7:6f:ac:95:94:53:10:
         3a:07:0f:a7:98:4d:72:73:f8:88:4c:f6:17:9e:48:c6:b2:d6:
         1c:69:f8:0b:97:73:f6:37:79:fb:79:a6:35:71:e7:5d:72:26:
         95:63:a3:ba:56:1d:17:52:5b:d9:31:b0:3a:8b:50:ce:8e:87:
         29:2b:1e:18:2b:53:e3:59:4d:17:65:32:1d:70:2b:52:34:67:
         46:e4:bf:c8:78:0c:97:19:34:f5:83:c5:60:37:7a:b6:96:9a:
         82:6c:dc:96:3e:1e:cf:bd:10:77:b7:d8:d3:cb:29:74:b9:7e:
         7c:9f:d3:bd:cd:b5:f6:35:96:f3:1c:7f:78:dc:c3:f9:12:80:
         49:ed:92:e2:f2:a8:66:82:1b:6d:bd:66:19:23:df:61:f0:e1:
         d9:cf:8a:1d:33:81:46:59:1e:d1:1b:c2:e2:cf:71:3f:f1:44:
         9b:38:9e:f9:cc:29:bb:94:1f:1b:f8:b2:44:ed:c6:3e:3c:de:
         eb:f5:0c:65:5e:86:39:ba:2d:d0:55:bc:b9:b9:e9:ea:b6:56:
         c0:05:ec:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----