Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff848b15dee51562d265f09021aea1c638fc587.cer
File:                     1ff848b15dee51562d265f09021aea1c638fc587.cer (raw, json)
Hash identifier:          FjLX6fTdS5qRCSukdDDOynflKRrTjMgYPQ8Li7nam6w=
Subject key identifier:   3E:2E:19:BA:13:0E:CD:CB:10:DC:60:E6:DE:54:B2:61:57:12:BB:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0B25C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6fb351d8-ea27-4438-b957-d17fa89bb008/1ff848b15dee51562d265f09021aea1c638fc587.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6fb351d8-ea27-4438-b957-d17fa89bb008/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 21 Oct 2018 16:18:18 +0000
Certificate not after:    Sun 04 Aug 2024 22:23:01 +0000
Subordinate resources:    AS: 52353
                          IP: 200.14.82.0/24
                          IP: 2801:0:120::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15774300 (0xf0b25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 21 16:18:18 2018 GMT
            Not After : Aug  4 22:23:01 2024 GMT
        Subject: CN=1ff848b15dee51562d265f09021aea1c638fc587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:71:93:f1:03:8e:32:e4:93:d3:52:98:28:93:
                    a8:5e:82:56:50:38:c9:d1:a0:83:45:9f:34:70:0e:
                    77:56:a1:cd:3f:5b:a0:74:71:8d:fe:88:0f:6f:71:
                    c5:15:af:db:de:02:17:f0:2e:5a:ae:0e:3a:33:b4:
                    95:35:2b:44:8f:94:f2:b6:45:db:67:9c:cd:ab:b6:
                    f1:df:33:a1:cd:b1:d7:7a:89:7a:93:4a:c5:7c:7c:
                    1f:a3:ec:e5:7e:a7:b3:e0:63:36:d4:4a:e1:d5:98:
                    27:e0:c5:64:a4:4e:dc:45:d3:a6:39:c2:88:de:4c:
                    a7:92:ce:be:bf:55:a1:85:00:df:47:9b:0b:ac:71:
                    9c:a9:7c:8e:9e:84:ca:ba:43:ae:b9:f0:dd:fe:41:
                    c4:c3:03:b8:7c:b8:55:bd:63:90:73:47:00:db:88:
                    bb:fd:cd:6a:14:24:5d:97:b3:c9:2d:b6:a2:b4:5d:
                    33:5e:09:93:41:99:76:fe:92:69:a1:4b:c5:1e:54:
                    3b:78:04:bb:23:43:10:bf:60:dc:7e:bf:b1:04:f2:
                    2b:d4:cf:3b:20:15:7b:89:ef:8a:66:db:05:fd:7c:
                    0d:22:e8:78:ba:19:09:30:44:19:92:09:b4:91:89:
                    6b:5e:67:fa:a0:63:86:97:39:0b:3d:fc:b8:3f:6b:
                    ad:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2E:19:BA:13:0E:CD:CB:10:DC:60:E6:DE:54:B2:61:57:12:BB:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6fb351d8-ea27-4438-b957-d17fa89bb008/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6fb351d8-ea27-4438-b957-d17fa89bb008/1ff848b15dee51562d265f09021aea1c638fc587.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.82.0/24
                IPv6:
                  2801:0:120::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52353

    Signature Algorithm: sha256WithRSAEncryption
         05:fc:22:ea:11:fc:17:fb:01:e2:a0:69:8e:29:6c:78:8e:a8:
         b2:a6:f1:c3:3d:e6:99:50:0c:b1:8c:8d:6b:a5:7c:b6:16:e3:
         bd:e9:5d:5e:0a:88:85:a5:45:41:16:f7:fe:af:57:50:a7:cd:
         cd:aa:c9:af:87:42:de:48:cc:d2:48:34:25:72:12:e9:77:b1:
         7a:4e:2b:2a:eb:f4:b4:d5:08:9b:ae:ae:68:c2:11:2a:f0:25:
         fc:26:0a:c4:ed:ed:7d:78:20:0a:d8:4a:ef:22:df:f2:8f:9e:
         60:e5:4f:be:75:a1:b6:2f:d8:8c:2a:fc:55:84:0f:b5:5b:0d:
         61:fe:05:da:30:34:2b:97:6a:12:69:a4:41:68:9d:09:c7:55:
         cc:97:16:6a:09:b7:0d:27:e9:e5:79:54:6a:ad:24:e9:fe:7a:
         13:2a:07:8d:a9:ce:e8:20:ac:c3:c8:66:6f:ff:bb:52:45:9f:
         c1:f0:be:34:b3:3c:03:77:c3:b6:68:3f:3f:61:85:06:dd:7d:
         88:6d:f8:da:bb:42:d5:ab:f2:c6:c2:98:39:51:72:51:c6:30:
         ef:3d:21:0b:a8:6a:b7:d9:51:98:88:69:8e:94:cb:cf:4d:09:
         59:fb:dd:d4:be:88:08:bb:5a:ec:0b:e8:46:fe:47:54:d1:6b:
         5a:66:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----