Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/254bebd96f7e069ee36566fd9821930de6b2d7ad.cer
File:                     254bebd96f7e069ee36566fd9821930de6b2d7ad.cer (raw, json)
Hash identifier:          9rQggGsD94jQYMqEWI5xnkxnK6ktDZgNW25xCnUtS7A=
Subject key identifier:   03:01:12:9D:7B:CF:62:23:9E:7F:58:1D:D6:C9:E5:76:F2:0F:6F:5A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD7D7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:33 +0000
Certificate not after:    Sat 02 Mar 2024 15:00:00 +0000
Subordinate resources:    AS: 17401
                          IP: 200.81.0.0/19
                          IP: 200.81.192.0/18
                          IP: 209.99.224.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14515583 (0xdd7d7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:33 2017 GMT
            Not After : Mar  2 15:00:00 2024 GMT
        Subject: CN=254bebd96f7e069ee36566fd9821930de6b2d7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:84:6b:b1:a3:85:6a:15:66:a4:71:74:d2:
                    b9:42:1a:f0:53:a7:c7:22:fc:73:22:92:23:b0:33:
                    8b:f9:bd:77:82:60:86:e6:33:3d:ad:8f:af:78:ea:
                    50:d0:45:08:5f:3f:f3:af:95:6d:73:e3:44:6f:22:
                    fe:22:56:a0:ce:35:03:65:64:f9:4d:19:ab:f5:fd:
                    26:10:36:3c:b8:fe:19:76:d4:80:4b:3c:25:52:a2:
                    dd:02:bb:64:a1:60:f8:9d:fe:95:eb:1a:78:a1:ee:
                    6b:81:f6:47:6f:e4:47:57:6b:36:de:5e:f9:72:a0:
                    c6:17:3a:af:2e:df:82:ef:cc:ad:fe:24:0c:60:a5:
                    6c:fc:f6:c0:f6:47:d0:c9:a0:61:8e:a0:95:1f:f0:
                    7b:74:44:14:58:75:a4:77:0e:b2:2b:59:b6:36:30:
                    34:4a:10:d0:83:12:bc:a4:d4:c8:0f:51:ef:57:50:
                    a3:83:ee:44:24:8a:a3:dd:03:f8:52:70:69:9c:d8:
                    49:5a:71:ca:d1:23:24:ef:26:98:44:2c:e3:f1:4d:
                    d0:06:53:1b:41:26:a4:84:3d:88:e5:40:d9:fa:bc:
                    e2:01:75:a9:00:d4:f8:1e:fd:a5:d1:de:da:c1:3d:
                    f0:bf:48:e7:5a:75:df:f0:09:89:47:3a:60:0a:33:
                    21:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:01:12:9D:7B:CF:62:23:9E:7F:58:1D:D6:C9:E5:76:F2:0F:6F:5A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.0.0/19
                  200.81.192.0/18
                  209.99.224.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17401

    Signature Algorithm: sha256WithRSAEncryption
         c5:3d:8e:39:94:1b:f9:3f:2b:e3:13:da:8b:40:c0:77:05:91:
         7a:f5:1a:1c:75:d9:e9:de:80:b2:f5:02:0a:bd:7f:34:f4:1e:
         1d:2a:83:a2:bd:40:7f:40:6a:46:b4:74:65:dd:75:2a:2a:70:
         d5:4c:6a:8e:fd:c2:b7:c8:ce:d2:a7:57:b2:08:c2:70:d8:d0:
         ea:cf:d8:c1:fe:ab:f9:bc:e0:44:6f:a8:5b:f0:87:d6:36:f1:
         07:21:e0:a4:da:d1:e7:f5:e1:e2:a8:64:c9:1f:e5:70:a6:2d:
         f9:c0:18:15:2c:f5:dc:80:7e:f9:b0:98:14:03:3a:07:24:75:
         bd:52:ae:51:8e:98:72:ad:a8:32:ba:e7:ae:75:1f:b6:50:26:
         f5:15:8e:53:ee:7a:3d:19:7a:19:6b:38:59:79:6c:17:4d:e1:
         79:ee:21:c3:70:8e:c8:97:b5:55:7e:02:f8:87:bd:34:40:b5:
         96:d7:63:27:8f:e5:f1:58:19:ff:e1:29:99:77:a0:82:50:8a:
         26:d7:13:61:97:8b:f8:48:00:a8:7e:b0:69:ad:3e:2e:fb:c5:
         00:29:49:dd:fa:61:dc:c3:af:cb:bb:61:9b:56:13:33:4c:82:
         ae:3c:53:96:b9:fc:cc:10:1b:60:d0:41:a7:7e:33:2c:f1:2a:
         b9:f9:9e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----