Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer
File:                     26f72b79edb0cf7a212cac55ffae543643472e0d.cer (raw, json)
Hash identifier:          Zc3D8QMCo3dKudjBp7BkWNUHFQn7i9wCbdDRAmNBYes=
Subject key identifier:   DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E32E05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/26f72b79edb0cf7a212cac55ffae543643472e0d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:28 +0000
Certificate not after:    Sat 07 Sep 2024 17:59:24 +0000
Subordinate resources:    AS: 264740
                          IP: 170.239.180.0/22
                          IP: 2803:f4c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14888453 (0xe32e05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:28 2017 GMT
            Not After : Sep  7 17:59:24 2024 GMT
        Subject: CN=26f72b79edb0cf7a212cac55ffae543643472e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:32:0e:b5:fd:36:38:bf:d7:21:f5:50:bb:
                    a2:72:f6:de:19:8a:2c:0f:bc:8e:a8:00:08:52:b3:
                    7a:ca:5f:82:db:fa:f1:6a:9b:d2:48:a5:f0:be:a7:
                    b9:18:65:99:e5:6c:eb:32:3a:bc:f1:bb:f3:91:fd:
                    43:b0:dc:0d:d4:f4:9f:d0:98:c3:db:63:47:8f:11:
                    bd:49:03:16:ff:44:c7:d0:0b:d1:2c:2e:74:ab:a5:
                    2c:b9:26:87:6c:b4:d6:84:15:e8:39:f6:c1:d2:69:
                    96:60:f3:6c:73:89:c8:da:dc:0e:89:45:81:f1:b1:
                    63:10:7a:83:97:80:06:eb:b9:dc:46:d7:c3:6a:1b:
                    69:10:b4:06:e2:42:a8:4f:7f:9f:83:1e:d3:66:31:
                    78:c2:a3:8d:e2:ef:66:cc:21:e2:9b:b2:38:09:89:
                    18:78:b2:f1:41:a1:a3:9a:a3:db:45:3a:af:20:fc:
                    b0:ad:32:c7:2e:a2:dc:0c:93:a6:27:13:e5:2b:09:
                    b0:c6:74:b3:f9:75:16:db:57:63:e1:aa:aa:be:9e:
                    7e:20:41:b9:f6:b4:0b:f4:ba:a8:52:31:36:b4:e0:
                    43:58:bd:08:97:2d:15:20:52:1d:05:25:23:cf:fe:
                    72:81:63:85:c3:cf:b1:0d:93:4a:98:72:eb:9a:2f:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/26f72b79edb0cf7a212cac55ffae543643472e0d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.180.0/22
                IPv6:
                  2803:f4c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264740

    Signature Algorithm: sha256WithRSAEncryption
         17:df:26:15:b1:40:88:37:69:cf:8e:44:e1:45:78:d2:5c:e0:
         50:a9:20:57:c6:a6:fe:28:0f:18:fc:20:06:f4:aa:14:71:2c:
         9b:cb:a1:26:3f:24:fb:76:e8:02:85:c6:b5:40:74:6b:b4:ed:
         fa:2f:8b:b8:7b:66:ea:d0:aa:e7:e1:b1:e7:f7:43:fc:0d:5e:
         21:b6:f5:ac:da:8c:57:18:63:85:4b:1a:39:dc:53:39:e0:95:
         76:a1:ec:87:c2:c8:6f:8b:fb:84:80:39:0e:98:ce:15:60:b4:
         22:64:a5:e3:cb:34:e5:52:43:ee:97:99:eb:05:0a:12:1c:91:
         fb:ed:91:6e:65:e2:4e:17:38:ce:f5:a3:48:ae:c3:c1:d8:2e:
         50:2c:55:6b:65:96:36:f8:8b:06:73:de:e8:3a:8a:ae:41:3a:
         fe:04:e9:c7:e9:5e:87:b6:28:cf:a3:11:a3:43:4c:7d:6b:c0:
         1d:2a:6b:e0:1c:d2:d7:e2:85:eb:c6:58:f8:e0:42:7e:25:60:
         b1:8c:2d:9c:28:d2:d3:7c:d4:4d:38:3f:5f:03:b5:68:a3:9d:
         c2:00:6e:49:83:d5:96:41:fe:f2:5a:cf:e2:dd:f0:a0:2e:4e:
         f4:d1:68:03:e0:e4:8f:4c:10:ac:ba:3b:72:c4:e4:46:ba:72:
         14:d8:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----