Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d5340d79102b793331c752f0dbbe0ddca1e18f6.cer
File:                     0d5340d79102b793331c752f0dbbe0ddca1e18f6.cer (raw, json)
Hash identifier:          TVn2iaXF4sNnlTDQ86qw06r450nZynGEYqVe10GZ/SI=
Subject key identifier:   F6:86:EF:12:82:2D:FC:94:82:86:B4:5C:22:31:32:55:C1:75:E2:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F260CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/0d5340d79102b793331c752f0dbbe0ddca1e18f6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:28 +0000
Certificate not after:    Tue 20 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 28009
                          IP: 190.93.192.0/19
                          IP: 200.85.176.0/21
                          IP: 2803:4440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15884491 (0xf260cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:28 2017 GMT
            Not After : Aug 20 05:00:00 2024 GMT
        Subject: CN=0d5340d79102b793331c752f0dbbe0ddca1e18f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:58:21:ce:6d:18:ae:62:cf:39:c8:dd:76:b9:
                    36:09:40:e0:56:d2:97:3c:3d:cd:1a:51:39:d8:d4:
                    ed:65:09:c6:03:d8:9b:bc:1a:f0:74:91:ab:c8:d4:
                    22:7a:0e:9d:9e:be:46:7c:60:09:6c:92:53:f2:d2:
                    95:2a:f2:6a:14:ad:2d:6a:98:ec:31:c1:e0:07:76:
                    1d:b5:52:96:6e:ae:cf:64:7c:2e:de:9e:be:df:3d:
                    13:34:58:f4:b9:da:3c:5e:3f:6e:93:80:2c:f6:95:
                    21:be:79:74:56:48:8b:26:7f:61:2b:88:59:2e:66:
                    11:29:cc:a4:8f:68:30:47:39:be:75:20:9d:ef:92:
                    0c:28:06:84:5f:70:46:12:c1:d0:c3:df:06:79:c5:
                    f0:13:05:0f:7e:d5:db:2d:b0:84:0d:95:fd:14:a6:
                    95:23:ed:74:11:b5:9b:eb:d1:ce:c6:cc:b4:80:a9:
                    c7:b5:89:a8:80:03:a7:8c:19:b9:f9:16:a6:fb:7a:
                    4b:db:ff:d7:86:58:f7:7c:bb:20:d1:d8:67:34:06:
                    5d:28:85:c1:dd:d8:6b:45:9e:01:da:af:5c:eb:0c:
                    ec:da:28:a0:f9:3c:fb:98:38:8a:42:93:18:2a:e2:
                    91:d4:ae:65:d0:b2:96:4b:be:40:11:4d:45:d1:54:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:86:EF:12:82:2D:FC:94:82:86:B4:5C:22:31:32:55:C1:75:E2:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/0d5340d79102b793331c752f0dbbe0ddca1e18f6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.192.0/19
                  200.85.176.0/21
                IPv6:
                  2803:4440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28009

    Signature Algorithm: sha256WithRSAEncryption
         c4:56:9a:ac:f0:98:4f:34:72:cc:50:bb:cb:73:37:a5:d3:a9:
         ca:7c:ab:c7:eb:3b:8a:0b:99:db:e3:57:04:f7:ad:f2:28:89:
         e5:47:31:99:3e:a8:b3:35:33:87:56:ff:ec:9f:df:8a:0e:61:
         0c:29:6e:6d:b3:6b:72:9a:7d:c6:23:1e:80:54:81:d2:85:ba:
         1e:7c:1d:b9:cb:02:b7:20:da:8d:b1:1d:a2:67:95:56:3d:05:
         96:dc:38:15:c2:18:80:83:eb:f6:73:62:56:9d:a8:be:e9:b1:
         89:f9:ec:8e:ec:56:ae:b7:a3:a6:a2:f0:fd:15:b2:25:9b:17:
         37:67:28:9c:4a:be:5e:84:8b:65:66:30:52:fc:f7:dd:ff:64:
         77:06:48:7d:86:52:63:59:dd:29:f3:31:21:e1:5c:37:58:0f:
         86:96:65:16:0f:1e:fa:96:bd:d4:ee:01:03:a0:44:25:a4:6b:
         1c:1a:3a:d1:53:a9:69:e2:85:7e:06:a6:81:79:9e:c5:0a:8e:
         d6:bc:61:c5:af:da:2b:32:de:ea:68:f0:40:ed:17:74:86:bd:
         26:84:51:18:a3:b3:80:9a:31:51:c8:b9:7a:d4:6c:e9:0b:17:
         9c:78:3e:40:03:70:80:77:15:c8:93:81:cc:ec:ac:6e:4a:66:
         21:c5:5b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----