Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff19a587cf1d895ff1421bb064598306e517ca7.cer
File:                     1ff19a587cf1d895ff1421bb064598306e517ca7.cer (raw, json)
Hash identifier:          IaSku5eLwb6Cb4XwZV6zFDqqadFY/PAIOxGfGVxE9J0=
Subject key identifier:   6D:6C:45:63:97:90:99:6E:7E:BD:65:5E:FB:C5:4A:F2:88:44:C5:DB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E16D86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3a248da5-4683-41b0-9277-62033a8691f9/1ff19a587cf1d895ff1421bb064598306e517ca7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3a248da5-4683-41b0-9277-62033a8691f9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Jun 2018 16:23:42 +0000
Certificate not after:    Sat 13 Apr 2024 15:58:16 +0000
Subordinate resources:    AS: 266828
                          IP: 45.237.184.0/22
                          IP: 2803:34a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14773638 (0xe16d86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 13 16:23:42 2018 GMT
            Not After : Apr 13 15:58:16 2024 GMT
        Subject: CN=1ff19a587cf1d895ff1421bb064598306e517ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f1:34:0a:31:c6:0d:ce:97:1a:25:d0:cd:12:
                    f9:82:11:ae:3c:4b:ec:14:fa:84:70:ff:f4:6f:0d:
                    46:3f:93:f5:ae:da:4c:ab:24:49:70:a9:70:d3:63:
                    47:00:0b:83:f7:32:26:a1:2e:f6:08:f0:84:b5:f0:
                    97:a9:c2:e2:b2:fd:68:9d:d4:b1:35:31:51:db:13:
                    3f:37:86:2b:53:54:b6:12:cc:77:d0:d7:8e:7c:40:
                    70:c4:bb:f0:44:5b:94:b8:ff:f4:7e:57:e9:7e:90:
                    f5:24:b4:cb:df:15:c8:74:90:10:45:d3:03:9a:05:
                    ae:4f:b9:8c:3e:b5:79:64:10:b0:be:d2:05:5a:62:
                    3e:7a:77:09:a6:7e:10:44:20:a8:77:1e:be:e2:a8:
                    e8:8b:e3:c9:62:2f:9e:dc:15:f9:4d:cf:0a:7d:88:
                    4d:76:12:0b:cb:c9:99:56:5a:98:33:a9:42:02:89:
                    15:1c:68:1a:c3:bd:5e:ae:80:76:78:6f:51:90:f2:
                    f0:94:91:41:f3:77:fb:9c:de:ca:e9:3b:e0:94:99:
                    f9:5c:4b:40:dc:8c:b3:69:e6:b2:9a:e2:0c:95:5f:
                    53:c6:d6:bd:11:91:e1:65:0c:bf:2a:6a:b2:a3:ed:
                    5f:f9:56:ec:67:52:6e:fe:5d:e9:8c:0e:6b:d6:32:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6C:45:63:97:90:99:6E:7E:BD:65:5E:FB:C5:4A:F2:88:44:C5:DB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3a248da5-4683-41b0-9277-62033a8691f9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3a248da5-4683-41b0-9277-62033a8691f9/1ff19a587cf1d895ff1421bb064598306e517ca7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.184.0/22
                IPv6:
                  2803:34a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266828

    Signature Algorithm: sha256WithRSAEncryption
         b5:17:55:dd:c4:9c:5e:7d:d4:3e:9b:22:66:43:54:e0:2b:ce:
         5d:55:df:97:07:3c:df:29:4c:d6:22:26:0a:b4:63:9e:e7:eb:
         62:6e:93:e0:93:e2:52:8b:59:9a:4b:b1:4a:3f:0b:69:9c:a9:
         0b:97:95:b5:73:0c:6c:d7:a4:ef:9b:8d:4a:02:05:82:70:4c:
         24:50:70:d8:85:ad:e4:15:1d:7d:54:94:9f:bd:4e:5c:cf:7f:
         11:7c:29:b4:cd:d1:bf:3d:09:2b:25:60:10:fe:61:17:95:72:
         28:46:b2:9e:00:18:bd:8b:e1:23:93:5a:67:be:a8:77:ec:7d:
         88:fa:cb:1b:1a:81:55:60:e2:93:b5:73:54:8b:04:ee:6e:c8:
         88:60:ff:c0:33:17:cd:a9:c2:8a:ec:c4:b2:e4:ed:cc:1a:ad:
         a4:c3:3a:6c:0d:2e:59:0a:25:94:c5:37:5a:65:0e:96:43:2b:
         ae:52:c5:5c:64:3f:76:2b:f0:4c:8e:ba:a5:61:7f:c7:32:3b:
         de:35:a0:b2:9b:1d:5a:93:51:1f:52:9b:53:af:e9:8b:64:d9:
         ac:03:16:1e:b4:75:7b:a9:3f:3d:48:01:da:dc:e0:7a:da:10:
         0a:31:22:b5:46:51:23:80:bf:59:4e:7f:70:ca:f1:e3:3a:26:
         e9:6e:43:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----