Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28887717a8e1f32108301ee3e38a142b28faa4de.cer
File:                     28887717a8e1f32108301ee3e38a142b28faa4de.cer (raw, json)
Hash identifier:          E/WttyYB0XpHZoGRmh6/jJcqUKq01fGBNCxcA7EnvVg=
Subject key identifier:   5E:9D:C3:C6:08:5E:E3:72:2B:21:37:D7:EF:73:AA:E6:2D:DA:00:76
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCFA2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/28887717a8e1f32108301ee3e38a142b28faa4de.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:00 +0000
Certificate not after:    Sat 24 Feb 2024 17:23:25 +0000
Subordinate resources:    AS: 52463
                          IP: 201.220.29.0/24
                          IP: 2801:1e:8000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14481967 (0xdcfa2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:00 2017 GMT
            Not After : Feb 24 17:23:25 2024 GMT
        Subject: CN=28887717a8e1f32108301ee3e38a142b28faa4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:e6:7e:c4:33:cb:d7:79:da:77:e9:5c:bb:
                    12:3b:50:6b:bd:28:42:a0:29:03:b0:39:16:21:53:
                    50:19:f2:ba:b6:4d:57:4d:e4:0c:8d:1e:a8:ea:7f:
                    5f:5c:ab:06:82:30:89:8d:f3:30:44:e6:50:67:0f:
                    45:14:0d:c3:89:cf:d4:4f:8a:ff:31:9d:5a:21:69:
                    af:ee:bf:ae:2b:0d:36:d5:05:c7:57:6f:11:3c:d2:
                    a1:54:7d:bd:bb:a8:48:c0:b6:8a:88:ef:49:a8:3e:
                    bd:41:4c:72:02:22:89:ad:b6:70:7d:0c:54:ed:fd:
                    7a:bd:2f:20:9d:81:31:2f:10:0f:45:12:de:77:4d:
                    84:85:9d:80:68:c9:48:af:a7:a4:ea:f8:de:c6:ca:
                    28:fd:f2:cc:f5:70:0d:af:69:d0:c7:c5:a7:52:c0:
                    20:38:38:6d:0f:b2:d9:04:b7:07:80:9c:2d:41:32:
                    e3:74:f4:cb:b1:2d:72:ca:6a:af:72:ce:bf:e4:1b:
                    3f:29:6a:bf:68:47:64:b7:70:d6:3a:3f:3e:33:da:
                    06:db:b6:67:aa:c5:a8:84:aa:f7:05:79:96:cb:8c:
                    1d:68:8f:d5:60:32:76:9d:41:37:fa:66:b9:95:d5:
                    a4:af:ce:dd:cc:fe:ff:67:d7:52:5a:df:ba:98:8e:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9D:C3:C6:08:5E:E3:72:2B:21:37:D7:EF:73:AA:E6:2D:DA:00:76
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/28887717a8e1f32108301ee3e38a142b28faa4de.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.29.0/24
                IPv6:
                  2801:1e:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52463

    Signature Algorithm: sha256WithRSAEncryption
         5a:bb:e0:92:57:90:89:71:97:e4:1d:6c:0a:31:05:cb:3b:32:
         22:0a:6b:63:5f:87:26:30:7a:58:a0:ac:60:b6:37:6c:e2:e3:
         f1:c3:e2:a6:c8:83:a9:dc:fa:95:33:99:25:8a:60:8e:34:f6:
         cd:2b:aa:d7:72:82:ed:1e:12:20:b8:66:41:ac:4e:02:8d:9b:
         46:63:6b:fd:0e:00:20:51:01:f2:d1:44:f3:12:44:15:93:dd:
         61:45:a6:25:c5:86:e5:1d:e6:44:11:96:be:d0:58:68:3a:fc:
         c3:3a:a1:82:86:2b:b3:18:a6:f6:d5:26:3f:f6:d6:bd:77:76:
         85:c6:d1:b1:ec:db:8e:74:2e:7a:30:37:e5:28:ed:0c:ff:14:
         7d:f3:0e:17:3d:06:2b:bb:ab:3b:10:4e:36:fe:98:ad:94:9b:
         65:8e:21:44:72:60:e6:53:30:0c:47:9b:34:75:a2:78:2e:41:
         58:d7:56:ad:b6:e7:d6:f4:1b:b3:f9:79:2d:df:88:06:f3:85:
         ef:c9:04:7c:11:ed:36:cb:33:cf:4c:79:b8:f8:62:69:7d:2b:
         72:d4:99:31:61:46:8e:00:6e:ec:c0:ce:f6:c5:4d:30:61:db:
         02:c8:19:53:28:36:60:82:2b:83:91:f9:50:8d:03:42:5c:f2:
         fb:af:da:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----