Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13ad0e0bffa139566366b7eb0bc778c996d8fc38.cer
File:                     13ad0e0bffa139566366b7eb0bc778c996d8fc38.cer (raw, json)
Hash identifier:          czCqA3zl8e1f0Y1po1dkVWCqV6dyVC5ZtlT1IWBb9/I=
Subject key identifier:   44:24:91:D9:6F:EB:85:2F:B0:2D:2E:7A:E1:3B:09:66:CD:51:C5:A0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD3352
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/13ad0e0bffa139566366b7eb0bc778c996d8fc38.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:11 +0000
Certificate not after:    Sat 05 Jul 2025 21:23:30 +0000
Subordinate resources:    AS: 265815
                          IP: 201.182.148.0/22
                          IP: 2803:b820::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16593746 (0xfd3352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:11 2017 GMT
            Not After : Jul  5 21:23:30 2025 GMT
        Subject: CN=13ad0e0bffa139566366b7eb0bc778c996d8fc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3d:4f:bc:4a:e6:f1:4c:33:1f:c7:d7:c4:e6:
                    e5:5e:3e:90:d7:4d:11:60:79:35:3d:47:00:38:73:
                    6b:3e:a0:dc:46:84:b7:d3:f2:b7:93:83:35:04:43:
                    dc:27:35:79:3f:af:0b:ff:fa:0b:6a:07:b0:7e:cc:
                    cc:7c:c4:09:dd:c6:36:d5:0b:bf:c6:d6:1f:de:7e:
                    fd:ed:af:e3:1e:91:a2:04:3e:c2:57:b0:ca:36:ef:
                    34:b0:54:4a:bc:29:89:f4:f1:9f:de:3d:97:bc:4a:
                    15:64:98:1e:47:11:d2:d1:90:70:bc:bc:70:e5:b5:
                    05:d8:3f:23:d3:03:a4:a3:f0:b5:fe:3e:4b:73:05:
                    90:7a:5b:33:c3:d2:47:77:6d:e9:92:98:f4:00:6a:
                    eb:80:78:ea:d5:4d:b2:59:c5:2b:f4:d7:74:52:3a:
                    91:ea:ad:f2:52:d9:d5:dd:68:50:63:c8:ac:48:4f:
                    b0:86:fe:91:82:d4:b6:31:82:2b:e5:5a:4e:ca:20:
                    a1:1a:d8:33:1b:86:c3:96:65:77:77:36:32:e3:59:
                    62:f6:b4:52:a0:93:f5:40:5e:c2:a8:00:96:0b:ac:
                    fa:68:d0:20:da:3d:50:ce:af:13:69:95:74:29:5e:
                    d9:90:a4:a6:65:a9:fd:02:55:90:86:01:c8:14:40:
                    1a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:24:91:D9:6F:EB:85:2F:B0:2D:2E:7A:E1:3B:09:66:CD:51:C5:A0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/13ad0e0bffa139566366b7eb0bc778c996d8fc38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.148.0/22
                IPv6:
                  2803:b820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265815

    Signature Algorithm: sha256WithRSAEncryption
         6c:7b:b1:d3:dc:14:55:5f:ee:9b:e5:27:60:f4:21:1b:87:73:
         e1:f5:6d:91:92:c9:a4:8d:0a:58:e0:8c:04:e6:42:f3:04:4f:
         8c:48:53:33:38:7d:ea:3a:12:a5:7c:3d:4c:ca:f2:2d:ae:e9:
         ae:59:c3:bf:31:24:ef:86:d1:57:1f:e7:88:ce:19:44:c7:9f:
         25:64:b7:6d:ae:00:1d:36:cb:e3:94:fa:30:e3:f6:68:34:94:
         32:a3:be:8a:6b:3a:d8:f8:bb:6e:40:9e:43:62:64:8a:52:31:
         65:ff:f1:61:ad:96:dd:52:13:42:85:f2:58:e1:f5:2a:11:32:
         b1:ef:bd:a2:3b:ae:ca:8f:ba:8a:c9:9b:0a:4b:b9:ec:59:20:
         ff:52:ca:1d:a9:f2:0a:77:94:e2:cb:56:8d:8c:cb:f6:37:62:
         d8:f0:6e:58:cd:fc:a1:28:34:a5:04:f9:73:7c:83:e0:1b:f1:
         b7:1a:80:2b:dd:87:e7:30:f7:92:6d:2d:71:cc:81:86:87:c6:
         25:0b:d5:1d:85:5a:77:65:2b:28:18:6b:a3:98:0d:6c:c2:d7:
         02:ee:65:a2:b6:84:98:da:de:56:22:70:62:03:ac:f2:f2:6c:
         98:4d:34:39:16:ae:17:3b:d1:09:8d:c9:37:b3:b8:2a:3f:85:
         3a:ed:50:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----