Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17ccd74c1e85364d261d260b4add3a1b8ce32fc4.cer
File:                     17ccd74c1e85364d261d260b4add3a1b8ce32fc4.cer (raw, json)
Hash identifier:          ZpwnKisYqF4Q+2lPuRdAfOpM/4sGfYeXqz1Gz8pvouI=
Subject key identifier:   55:B7:1D:38:1E:72:3A:F0:E7:67:83:A9:DD:EC:7A:4D:B4:AE:3B:95
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB0C98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9c99fce9-cd50-4f90-a95b-5750e80ebd31/17ccd74c1e85364d261d260b4add3a1b8ce32fc4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9c99fce9-cd50-4f90-a95b-5750e80ebd31/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 13 Nov 2018 21:20:29 +0000
Certificate not after:    Sun 23 Jun 2024 20:35:24 +0000
Subordinate resources:    AS: 52345
                          IP: 200.16.94.0/24
                          IP: 2801:19:8000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15404184 (0xeb0c98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 13 21:20:29 2018 GMT
            Not After : Jun 23 20:35:24 2024 GMT
        Subject: CN=17ccd74c1e85364d261d260b4add3a1b8ce32fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:46:b4:48:ee:e8:f5:3b:2b:31:d8:5e:7d:
                    c3:c5:00:51:3d:a8:15:53:4e:bf:f6:c5:c4:fc:60:
                    cf:51:98:01:1d:60:26:19:43:af:ee:20:52:f0:f6:
                    fe:b8:64:f7:fe:72:7d:ea:83:8f:15:9e:a6:03:9f:
                    3e:46:6e:ea:fc:24:ac:76:5c:57:0b:4f:54:26:a0:
                    d4:b6:00:fb:3c:b1:fe:2a:62:1c:0f:53:02:0c:c7:
                    d7:10:0f:d4:35:8c:57:14:de:69:94:33:26:39:76:
                    0f:4f:19:8c:2e:e6:6f:64:54:7c:6d:04:17:35:43:
                    7f:6d:d0:92:5c:a8:59:04:2b:2e:af:3e:01:07:34:
                    80:e1:f0:02:f0:b4:9c:43:ea:b8:72:0e:4e:2f:73:
                    53:cc:59:c8:37:68:06:7f:69:a3:69:f0:9f:76:76:
                    f1:c9:5e:14:9e:5e:34:b4:06:4a:57:d7:83:b3:af:
                    13:cc:c0:66:f7:ad:18:d6:15:cf:0c:e1:37:3c:e7:
                    4c:e1:02:09:8d:23:b4:d8:e2:6f:14:39:a7:21:b2:
                    cd:98:ae:e2:09:54:57:cd:37:46:74:6c:cd:f5:3a:
                    84:f3:0f:44:f4:c5:00:36:e0:d9:f0:cf:01:0d:3c:
                    c0:61:25:a9:01:06:93:23:86:ac:03:c7:c2:68:cb:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B7:1D:38:1E:72:3A:F0:E7:67:83:A9:DD:EC:7A:4D:B4:AE:3B:95
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9c99fce9-cd50-4f90-a95b-5750e80ebd31/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9c99fce9-cd50-4f90-a95b-5750e80ebd31/17ccd74c1e85364d261d260b4add3a1b8ce32fc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.94.0/24
                IPv6:
                  2801:19:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52345

    Signature Algorithm: sha256WithRSAEncryption
         1b:10:11:f5:24:42:5f:2b:00:12:e3:e1:01:02:28:d7:e2:f5:
         ca:ef:c0:66:31:db:13:41:ae:a3:63:7d:af:e5:7c:9e:86:b9:
         bb:8b:72:3a:c7:74:1d:0b:d1:3a:49:36:3e:ed:2b:d4:b9:0e:
         39:51:3b:26:10:70:0a:61:8c:2a:03:68:b4:19:57:91:60:93:
         a3:9c:e0:0b:a3:26:0f:08:07:8e:2a:d3:3f:f1:1f:0f:b9:e5:
         c3:32:32:d7:6b:98:ef:f5:8c:28:79:6e:13:ec:8f:8c:d2:90:
         7c:ae:30:5b:f9:75:25:ad:17:d3:6e:4a:a7:9f:e2:42:4e:89:
         f6:2e:3f:fa:67:8a:cf:36:46:c9:24:21:13:05:f6:af:00:d8:
         5f:8c:ef:45:c3:9a:65:be:34:26:e6:90:81:df:86:f9:9e:78:
         4c:6d:57:7c:60:7e:58:9d:0d:5b:8e:5f:5a:39:f0:de:33:31:
         08:39:2e:b3:4e:bb:1b:85:8d:d9:85:fc:79:5c:4b:42:93:18:
         75:f7:72:0f:34:02:4c:39:d0:72:aa:4f:0a:f4:19:4f:82:4b:
         32:be:a7:f8:bf:b6:9b:97:ae:6e:fb:58:36:a5:49:08:af:27:
         30:60:1f:6d:0d:09:aa:cc:21:b9:a2:c9:3b:d8:fc:e0:47:53:
         58:b9:0c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----