Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
File:                     239ac677d20da31c1af262c7528bd5cc25d5e101.cer (raw, json)
Hash identifier:          U3aBuK1bZ2VVzY/IODHNy6Khk5jRz6pZhmMXKjZwYtE=
Subject key identifier:   BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F38C5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/239ac677d20da31c1af262c7528bd5cc25d5e101.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Sep 2018 17:47:52 +0000
Certificate not after:    Sat 31 Aug 2024 19:57:11 +0000
Subordinate resources:    AS: 265862
                          IP: 45.224.188.0/22
                          IP: 2803:a620::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15961180 (0xf38c5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 24 17:47:52 2018 GMT
            Not After : Aug 31 19:57:11 2024 GMT
        Subject: CN=239ac677d20da31c1af262c7528bd5cc25d5e101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:c9:c9:f4:e7:b8:3e:50:f8:f8:77:54:c7:
                    26:34:62:d0:cb:36:f1:7e:c2:d9:09:ad:5c:11:46:
                    75:c4:24:f6:a1:5e:09:8b:91:df:bf:0f:31:d1:b6:
                    b3:52:4e:78:ac:0f:2b:55:0a:04:6a:80:36:67:fb:
                    1f:52:a2:b3:50:1b:1a:9d:ed:4f:cf:86:5c:50:69:
                    7e:48:f7:47:d1:0e:92:f7:9f:11:ee:8c:05:c0:27:
                    c6:4a:70:f7:e4:a8:e4:ea:ee:e1:42:4d:94:36:11:
                    19:b6:16:16:16:d6:05:4f:7c:ab:40:e8:a5:fc:29:
                    c8:a3:34:b6:8d:e6:5c:00:3a:19:73:1f:2f:ec:7e:
                    7a:21:a4:ac:3c:32:c4:70:9c:04:8e:87:35:8e:b6:
                    ae:12:25:6f:4e:55:86:a4:bf:9b:f1:9a:0b:37:67:
                    e4:08:92:b6:a3:b2:de:c0:59:fe:82:c9:72:74:0a:
                    41:bb:fb:41:a9:4c:ad:1b:d4:d2:8c:86:c8:38:75:
                    9f:14:db:61:1d:e7:82:dd:c4:b2:74:90:f6:40:c5:
                    f2:56:e5:18:1d:94:3a:24:d9:3e:8f:72:f0:d8:21:
                    14:97:02:52:8d:d5:b8:dd:05:74:66:d5:47:be:11:
                    b0:fb:ad:df:5c:a8:67:f3:86:b3:15:75:63:04:c7:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/239ac677d20da31c1af262c7528bd5cc25d5e101.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.188.0/22
                IPv6:
                  2803:a620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265862

    Signature Algorithm: sha256WithRSAEncryption
         05:de:71:37:88:b7:e5:40:61:fd:77:c1:18:af:68:8b:4d:5f:
         df:f7:c2:2e:4b:b7:5b:05:fd:6a:0d:73:1c:32:ae:3f:aa:1f:
         7e:fd:58:3d:a8:c4:37:a8:bd:b8:f6:68:37:96:3e:d4:03:06:
         b6:5c:64:cd:0b:ef:fe:46:41:71:3b:d4:2c:3a:3f:cb:c5:18:
         76:03:10:01:b7:21:0f:39:3a:76:f1:b0:d5:69:c0:5a:35:db:
         5c:f3:93:0a:c9:cd:c3:4c:35:00:5e:a6:e4:07:2c:c9:c5:7b:
         e9:9c:f0:a5:66:0d:f8:9b:62:e2:d0:69:57:d9:ae:89:7b:d7:
         e3:d7:e6:68:de:c2:34:85:17:b9:29:ce:de:a3:fb:3a:15:6d:
         40:2d:cd:4c:86:0c:29:25:08:5b:72:c5:c0:31:ae:41:3b:0c:
         d7:55:d3:b7:e5:7f:87:62:70:7a:43:cb:5f:62:f4:f9:12:cb:
         6b:b4:27:c9:38:e3:28:79:95:cb:9d:f5:97:31:f1:22:fd:c5:
         a7:2c:3a:00:8f:0d:10:be:8e:9a:7b:01:84:38:87:f0:38:88:
         c5:eb:f9:0e:89:21:e0:2a:74:2b:d0:90:a7:af:0c:2b:f8:d9:
         11:66:01:2b:1f:20:b5:57:18:ed:b6:60:cf:93:f2:4c:8a:4d:
         a1:d7:26:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----