Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.cer
File:                     24dd0c2e45ab4767cf1938370eb67d9303fc8de7.cer (raw, json)
Hash identifier:          S3RFDf9d3p71xeyZtXTQgJSeN3BJHGYCGrGEnaLHExE=
Subject key identifier:   05:5C:71:4F:E8:BB:2C:EA:C2:68:08:CF:5A:5C:91:A6:D9:E8:ED:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBA5DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 31 May 2018 03:40:53 +0000
Certificate not after:    Fri 08 Mar 2024 15:00:00 +0000
Subordinate resources:    AS: 28053
                          IP: 190.52.224.0/19
                          IP: 200.89.88.0/21
                          IP: 2803:6190::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14394842 (0xdba5da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 31 03:40:53 2018 GMT
            Not After : Mar  8 15:00:00 2024 GMT
        Subject: CN=24dd0c2e45ab4767cf1938370eb67d9303fc8de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:3b:c1:4f:a9:ff:d3:62:cd:ff:15:c3:83:
                    a7:4f:fa:dc:af:ed:4a:58:22:cc:36:7c:1a:e6:e6:
                    1a:32:33:82:32:bf:1b:c5:42:c4:b8:a2:df:3c:4b:
                    a8:52:d7:94:27:2b:d9:11:08:4b:83:9e:b3:e2:5e:
                    a5:63:be:51:0c:41:e8:26:9c:79:3a:74:31:57:2c:
                    00:72:3c:19:bd:d7:92:51:c6:c8:48:25:3f:dc:40:
                    3a:48:c0:29:15:2c:d2:6c:0d:9f:c5:c2:16:58:75:
                    c7:cf:69:2b:29:e0:24:ac:1b:04:52:f1:ba:f6:71:
                    c7:70:4a:85:50:fb:0b:98:c8:36:95:82:f9:a4:39:
                    88:5c:c7:9c:57:0e:4a:b2:4a:f2:34:f6:68:99:17:
                    f2:1b:16:10:ac:a7:c7:90:5e:1f:db:57:09:3b:0f:
                    46:49:1c:62:23:2a:62:c0:1a:c5:3f:d8:0e:65:38:
                    e6:c2:a3:cb:ae:8e:d3:04:8c:96:4e:3b:b8:6e:73:
                    22:cb:9c:36:f3:84:9c:16:a3:ab:2d:cb:32:5a:ec:
                    21:e1:13:c6:fc:69:30:c4:67:92:33:a3:63:b2:d2:
                    b1:63:9c:21:24:57:e9:cc:5b:c9:0a:1e:92:c3:23:
                    f0:b8:db:c6:c7:63:07:17:f8:d7:7b:18:35:c5:9e:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5C:71:4F:E8:BB:2C:EA:C2:68:08:CF:5A:5C:91:A6:D9:E8:ED:A8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.224.0/19
                  200.89.88.0/21
                IPv6:
                  2803:6190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28053

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:58:a6:24:51:9b:88:45:51:31:b9:2b:15:66:eb:6c:fa:
         57:55:8c:ea:74:2d:52:62:57:fa:8b:c3:75:06:bf:f3:52:0e:
         bb:e6:20:4b:35:a8:12:a8:2a:bb:94:98:fc:dd:b9:be:66:eb:
         c1:72:a7:4f:ac:2e:26:b8:60:42:04:9b:8e:d8:92:ed:ce:33:
         ca:30:77:25:76:4c:63:a5:03:43:6e:05:18:d9:1c:e4:78:be:
         02:a2:f1:bc:8a:16:d5:ce:48:dc:ef:f5:c3:2d:65:df:82:e4:
         04:c9:17:b5:96:53:e8:66:a6:81:e1:f4:2e:b2:a5:a3:23:4a:
         bc:e2:fc:2c:17:23:84:aa:6e:9e:23:ed:b7:b8:13:14:45:54:
         11:cf:62:d1:1d:19:8f:c9:b0:0b:98:8f:cb:8a:00:50:ac:85:
         7b:b4:27:6c:e1:86:51:9d:4a:7a:03:2f:80:52:01:7c:48:9e:
         a2:7b:61:77:24:13:9e:d3:ef:97:6a:6f:f4:51:49:1b:a7:e6:
         d6:3c:a1:94:1e:52:b2:56:11:0b:eb:cd:72:8f:12:72:ca:59:
         fa:86:8e:51:98:1a:bb:7f:a4:4a:d8:c7:f7:2a:80:6b:d7:f9:
         73:f4:27:f3:59:a9:9f:37:5b:74:38:ba:58:60:c9:2a:05:68:
         23:68:6d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----