Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2216f730dc559b8b90421f5cdb654392e386eba6.cer
File:                     2216f730dc559b8b90421f5cdb654392e386eba6.cer (raw, json)
Hash identifier:          80hh/AZnEe/dJJS3vP6HB5dAaO8rLoaN/DV4P2cpwDg=
Subject key identifier:   AE:BC:B5:40:D1:C5:F4:BE:16:C1:8A:18:26:76:BA:46:E1:75:5A:0C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE350C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d2d008c8-a975-4fa4-89b2-393f4285797f/2216f730dc559b8b90421f5cdb654392e386eba6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d2d008c8-a975-4fa4-89b2-393f4285797f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:01 +0000
Certificate not after:    Sun 10 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 52470
                          IP: 179.0.20.0/22
                          IP: 2801:17:8000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14562572 (0xde350c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:01 2017 GMT
            Not After : Mar 10 06:00:00 2024 GMT
        Subject: CN=2216f730dc559b8b90421f5cdb654392e386eba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:03:1e:8d:16:22:e8:3b:38:c9:b4:88:30:
                    2b:12:d0:a8:37:58:47:96:cc:7b:06:b7:57:99:0d:
                    fb:dd:78:76:db:2a:26:e6:c0:f5:a3:03:8d:86:c2:
                    5b:be:51:6f:ef:73:05:38:28:76:3a:92:b3:ab:c7:
                    91:98:14:e3:73:f9:19:8c:b4:48:06:df:03:6b:e2:
                    83:eb:14:61:40:34:8c:f7:40:5a:fa:77:04:30:12:
                    62:b9:e6:b9:bc:d7:35:66:a4:f7:3d:2c:00:50:45:
                    3e:b1:0f:23:83:d4:b3:91:36:3f:4f:c8:4d:30:7e:
                    f0:8e:f6:7e:6e:f6:10:fb:0a:c6:c6:03:ef:3e:4d:
                    b9:1d:c8:63:a1:99:03:df:bd:97:e2:e3:b5:60:d6:
                    e9:63:ec:15:f7:06:69:09:b1:40:64:0f:52:16:bd:
                    7e:e5:7c:7f:14:49:a3:de:f4:19:55:1f:45:97:8f:
                    56:06:89:a6:6c:48:a6:4a:ea:06:9c:28:01:7e:1a:
                    36:42:3c:ac:07:64:f0:41:98:cc:ea:f4:a1:9c:cf:
                    25:59:ed:7c:be:d2:d4:b1:4f:7c:1a:96:f9:e0:b5:
                    41:d9:07:6d:80:ab:f5:06:1f:a8:3e:73:4f:40:35:
                    69:fc:0e:81:26:7b:f7:41:a8:a2:77:e7:8f:6d:90:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BC:B5:40:D1:C5:F4:BE:16:C1:8A:18:26:76:BA:46:E1:75:5A:0C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d008c8-a975-4fa4-89b2-393f4285797f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d008c8-a975-4fa4-89b2-393f4285797f/2216f730dc559b8b90421f5cdb654392e386eba6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.20.0/22
                IPv6:
                  2801:17:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52470

    Signature Algorithm: sha256WithRSAEncryption
         19:90:b9:af:e0:b1:ff:a9:4a:78:4d:14:1b:78:71:3b:f2:e8:
         76:91:3f:8d:01:30:88:ec:45:de:fe:0f:fd:61:58:e4:0e:d8:
         15:fc:de:98:b1:ed:16:9e:70:d1:30:df:00:1c:cd:0b:33:48:
         44:9e:64:34:e5:0f:7a:6d:02:09:74:57:2d:a2:5f:64:2e:9c:
         aa:e4:c7:10:d2:a3:6c:64:27:39:ed:5a:da:bf:1f:86:91:b9:
         a9:af:7d:ef:6a:e5:ad:d4:a5:b9:be:c6:98:76:b5:53:7b:10:
         96:9d:1e:dd:16:f2:d7:b0:db:6f:14:78:07:b7:fe:30:29:64:
         40:8b:53:87:7f:f1:b5:5d:73:18:ce:96:6c:fb:f1:82:67:c7:
         23:59:e5:ca:ce:fc:fe:f0:eb:09:1c:73:15:62:b4:7f:dc:40:
         04:16:d1:5a:11:ff:6a:81:48:e3:47:a7:2b:e6:17:57:18:b3:
         7f:3b:72:58:62:aa:83:47:19:24:d5:22:2a:e9:3e:73:25:37:
         82:78:1a:58:2b:e7:34:ac:fe:2c:22:14:f7:8f:92:ae:5e:b0:
         96:6b:e2:ac:e6:48:3a:35:66:6a:2e:f8:eb:8f:b9:90:c1:c1:
         58:3a:a9:b9:d6:ea:35:9e:76:06:ce:93:f1:38:6c:8a:b7:69:
         bf:56:d4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----