Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fe522831a6a9d7d5f746b14f259a0f8a24782ac.cer
File:                     0fe522831a6a9d7d5f746b14f259a0f8a24782ac.cer (raw, json)
Hash identifier:          /b0vO6QJk7n/q9LAuz52HqBctQZ6ZZNQVQvwiQGA1SY=
Subject key identifier:   BE:9F:E2:00:87:97:DA:B5:BF:3D:83:4B:72:D2:C7:E8:F0:8E:6D:59
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D81E9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/0fe522831a6a9d7d5f746b14f259a0f8a24782ac.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:34 +0000
Certificate not after:    Mon 25 Dec 2023 20:09:52 +0000
Subordinate resources:    AS: 272114
                          IP: 168.205.0.0/22
                          IP: 170.247.120.0/22
                          IP: 2803:6d40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14163613 (0xd81e9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:34 2017 GMT
            Not After : Dec 25 20:09:52 2023 GMT
        Subject: CN=0fe522831a6a9d7d5f746b14f259a0f8a24782ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:d9:41:81:22:46:4b:07:ae:4c:36:26:b3:
                    d5:9f:aa:d4:3c:65:fd:85:31:eb:03:00:cd:a4:94:
                    e8:bb:6f:9c:bd:6d:0e:4a:7e:88:8f:f6:43:b7:07:
                    43:54:30:29:94:d8:de:c8:26:89:30:a1:cd:7d:1d:
                    49:02:0b:ee:03:75:65:eb:f1:e8:84:15:c3:fd:60:
                    cc:3a:d0:3d:7a:b3:c5:83:f1:8d:bf:41:59:8c:97:
                    8e:e1:c5:17:78:12:e3:dc:a3:ba:f7:1e:10:16:92:
                    62:8b:61:62:89:0e:f7:63:43:0f:03:ba:e9:41:89:
                    15:62:62:e6:d8:20:09:2a:25:bb:4c:b9:6b:b7:3e:
                    0a:cf:03:e7:5e:84:d1:f1:4b:d5:93:87:9f:b0:48:
                    b2:40:72:d2:f7:40:06:cf:a4:ea:df:cb:21:b9:14:
                    fb:d5:3d:e4:c5:4f:6c:fd:ee:43:f1:aa:33:89:ee:
                    b0:82:d4:45:03:65:03:0d:06:aa:fa:d4:ec:17:3e:
                    c6:41:74:b3:60:3e:e5:f3:34:b7:f3:f3:43:b2:77:
                    18:18:cc:f0:53:47:2d:b2:7a:00:29:f3:0e:16:88:
                    4a:da:dc:8b:05:b3:54:23:87:f5:8d:d5:0f:d9:2b:
                    6a:00:e3:e4:3a:24:d7:19:ee:58:01:0a:b9:62:61:
                    43:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9F:E2:00:87:97:DA:B5:BF:3D:83:4B:72:D2:C7:E8:F0:8E:6D:59
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/0fe522831a6a9d7d5f746b14f259a0f8a24782ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.0.0/22
                  170.247.120.0/22
                IPv6:
                  2803:6d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272114

    Signature Algorithm: sha256WithRSAEncryption
         7c:c3:14:42:22:eb:d8:2e:b4:6e:49:1c:8a:56:f9:a8:05:28:
         08:d2:28:1c:77:91:32:00:91:8a:d2:08:d1:99:17:8d:1b:ea:
         b2:3d:ff:7e:7d:a8:47:85:54:e8:a1:6d:82:74:31:fa:f2:23:
         93:0e:44:7e:bb:40:e7:f7:5a:a4:f0:d5:2b:4f:d9:0d:fd:be:
         d2:df:9b:8f:ba:22:3c:88:26:b6:d4:69:c1:f4:04:ec:2d:8a:
         28:1d:dd:49:11:17:cf:01:de:d6:17:a3:62:f3:ad:8a:83:20:
         51:62:85:08:a7:ef:77:93:c0:bb:45:84:ed:90:96:36:3c:a7:
         c3:ec:fd:37:70:50:fa:fb:65:e0:0f:a9:93:e1:a4:21:4d:bf:
         2e:64:3c:c9:35:5c:35:43:8d:9e:25:4a:fb:49:ec:1c:f4:aa:
         9a:2b:73:98:7d:a4:4c:43:4d:cf:ca:4a:c4:4e:87:f9:8b:f1:
         4d:c7:57:ad:58:12:3d:72:53:5c:87:2f:54:3e:b6:59:b4:df:
         dc:d0:d9:96:e5:54:30:8e:d2:79:9b:f4:af:38:7b:22:0b:f3:
         48:67:d5:a6:d5:09:af:3e:d1:33:4c:62:3a:36:1a:7f:97:78:
         56:2d:45:5c:88:ee:cf:a2:34:80:b0:07:47:1c:15:e2:2f:90:
         94:0f:d2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----