Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/204ad8fc6b3a56871d09ceb332c932ad175a605b.cer
File:                     204ad8fc6b3a56871d09ceb332c932ad175a605b.cer (raw, json)
Hash identifier:          ZOIF7HWcAnykDl2uk8iEPoX5/l1hM15PY59Dkd2KiiU=
Subject key identifier:   95:0A:A4:35:8F:E9:BD:E7:96:BF:B1:9E:6F:CD:4C:A4:46:A8:0F:EC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF22D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a133021f-9ef7-4081-bbaf-b430161f270f/204ad8fc6b3a56871d09ceb332c932ad175a605b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a133021f-9ef7-4081-bbaf-b430161f270f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:29 +0000
Certificate not after:    Tue 19 Mar 2024 18:24:25 +0000
Subordinate resources:    AS: 265692
                          IP: 45.7.124.0/22
                          IP: 2803:5dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14623448 (0xdf22d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:29 2017 GMT
            Not After : Mar 19 18:24:25 2024 GMT
        Subject: CN=204ad8fc6b3a56871d09ceb332c932ad175a605b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:65:98:e3:93:8a:cf:c7:b1:b0:f1:63:25:82:
                    88:5d:b9:a8:36:15:72:7c:ba:78:67:a5:f4:f3:b8:
                    2e:82:4a:e3:dd:0b:c1:53:19:7d:4b:e4:0f:03:8a:
                    e4:4c:b5:c9:9f:00:a2:af:3d:5d:13:14:5f:b3:89:
                    be:74:12:7f:0d:93:ec:74:05:fb:07:52:93:20:b3:
                    1c:0e:8a:d3:4b:d9:4c:21:70:b9:0d:c1:77:bd:43:
                    9a:f3:f7:b7:a4:a6:d5:a9:c0:92:74:bf:d9:e2:30:
                    89:81:44:8c:84:8b:17:30:43:f6:d0:a5:e6:d9:14:
                    bf:25:24:28:24:d7:5b:10:a6:2d:0c:2b:d5:b2:f6:
                    33:b3:b6:c6:3c:7e:25:6b:8c:79:23:7f:63:1a:9a:
                    23:47:b5:fa:ac:0b:0c:e4:58:a2:a2:a2:c0:6f:15:
                    b9:cd:f3:09:9d:44:1c:f1:e8:fd:7b:89:45:15:55:
                    5c:1a:6d:90:75:b0:3a:55:be:63:34:10:7e:0f:4e:
                    5c:47:f4:9e:26:3b:cf:70:0b:9f:85:e7:a7:f7:30:
                    0b:e0:ea:2b:68:33:7a:d9:be:d5:35:ba:77:d4:88:
                    db:00:ac:31:05:e0:b7:c1:4d:bd:f4:dc:b1:86:6b:
                    e9:f5:b1:03:32:5b:a5:bc:48:f9:9f:8e:6e:34:ab:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0A:A4:35:8F:E9:BD:E7:96:BF:B1:9E:6F:CD:4C:A4:46:A8:0F:EC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a133021f-9ef7-4081-bbaf-b430161f270f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a133021f-9ef7-4081-bbaf-b430161f270f/204ad8fc6b3a56871d09ceb332c932ad175a605b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.124.0/22
                IPv6:
                  2803:5dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265692

    Signature Algorithm: sha256WithRSAEncryption
         c3:8e:d6:b3:9a:47:8b:87:54:e8:31:ff:31:ee:87:4d:29:8f:
         5a:84:13:ae:5e:66:84:d7:76:7d:67:f6:7d:98:e9:10:65:00:
         bd:1e:b1:4e:1a:7b:47:3a:b0:b8:11:df:bd:51:a3:3b:b2:ce:
         a8:c1:8d:2f:a6:6a:db:74:66:21:3e:4b:d1:c3:83:93:73:0b:
         b6:69:43:00:c6:30:d9:31:c8:be:a7:de:92:85:65:48:6c:ea:
         51:c7:85:33:54:07:9a:44:43:83:a8:90:96:ca:2c:a9:30:20:
         9b:2e:20:c7:50:d6:8d:b4:c8:0f:b7:50:7c:c1:bd:7e:0f:33:
         14:0b:45:18:7c:b8:64:1c:49:0c:75:bc:ee:a0:a9:e9:6b:b7:
         62:71:16:f6:ea:83:00:c2:7e:b3:54:55:8e:b3:cb:12:f4:de:
         7a:12:01:d1:23:29:b2:a9:06:03:f0:28:f2:d9:a9:56:49:66:
         9f:5f:78:3a:56:01:f5:66:13:20:5f:72:b1:fc:1c:d4:a3:55:
         35:07:30:9f:2c:6a:00:c8:64:ac:13:65:6b:51:4b:55:15:62:
         dc:98:22:3f:65:b6:3f:10:ff:9d:3f:29:f5:82:f4:5f:ae:7f:
         27:0a:d1:3d:e8:4b:9c:d0:25:61:8b:6b:bf:b3:45:52:ca:ba:
         50:b8:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----