Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer
File:                     296ae134c63fda98feba9ece79438406ecc84f03.cer (raw, json)
Hash identifier:          JiFIkI+Dz1JvmF0o40zpKr6HcRGxRBWG8rfpmKqOmCM=
Subject key identifier:   8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD04A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/296ae134c63fda98feba9ece79438406ecc84f03.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:35 +0000
Certificate not after:    Sun 17 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 17079
                          IP: 143.0.104.0/22
                          IP: 181.189.176.0/20
                          IP: 200.85.0.0/19
                          IP: 2803:5d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16581799 (0xfd04a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:35 2017 GMT
            Not After : Nov 17 04:00:00 2024 GMT
        Subject: CN=296ae134c63fda98feba9ece79438406ecc84f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:09:1c:64:c9:d4:71:67:5d:bf:a3:c9:4d:
                    0f:2d:c7:0c:d4:0f:b7:0f:a2:aa:1b:8b:62:54:6c:
                    92:79:f8:66:ec:41:17:c2:2c:81:41:4e:13:be:62:
                    51:3c:77:0c:80:10:76:15:72:d7:f0:8b:92:c3:ed:
                    be:5d:e2:4f:c0:45:0c:e9:30:f6:6a:34:84:e5:6b:
                    4d:35:ad:01:68:11:ee:7a:97:45:48:d7:73:4e:e2:
                    5c:94:71:cf:14:56:60:dc:eb:0e:a4:e7:87:98:96:
                    42:80:c2:b5:39:25:62:d9:56:32:e2:b1:3f:59:b1:
                    9b:9b:8a:de:0b:be:49:78:52:e9:98:ab:f5:7e:ac:
                    38:63:bc:02:7c:52:5e:f9:f7:61:b2:10:8e:34:15:
                    7f:c7:f4:e4:a9:73:86:00:36:22:98:04:47:06:d2:
                    55:a7:26:fd:70:c1:c4:d5:be:82:3d:d1:e1:a5:e7:
                    06:08:b1:c0:31:a8:50:ba:f8:32:8a:f7:8c:92:2d:
                    a1:b6:b4:f4:ab:6a:15:4c:62:1f:c6:45:f6:02:9f:
                    1f:47:6a:5b:a9:2b:20:27:fd:c4:61:b2:e1:1a:08:
                    57:d9:49:99:0b:6e:8a:75:e5:f6:ba:52:b8:d0:2d:
                    7c:84:07:43:f3:96:7c:5c:0c:22:59:e9:27:b7:0b:
                    f0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/296ae134c63fda98feba9ece79438406ecc84f03.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.104.0/22
                  181.189.176.0/20
                  200.85.0.0/19
                IPv6:
                  2803:5d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17079

    Signature Algorithm: sha256WithRSAEncryption
         a5:a8:d9:68:68:20:fe:b5:43:17:c6:d9:bd:8e:f2:1c:93:c1:
         d4:56:82:0b:f4:60:ce:ad:38:86:d0:c8:65:b0:d3:e5:fc:d3:
         e6:be:ba:ef:98:9f:7a:84:71:d5:e8:1a:af:a9:ef:86:92:46:
         9f:f7:6f:76:6a:36:68:97:35:b2:de:5e:18:60:4a:bb:b7:a6:
         e4:3c:b4:24:63:23:ff:90:06:bd:0a:ab:f4:eb:88:2e:8a:f0:
         2f:68:3a:69:b8:23:49:ec:9a:c8:a6:45:29:4a:3e:a7:a3:28:
         a6:82:0f:89:f5:d0:dc:18:98:ce:13:75:f8:60:f0:7b:4b:2c:
         1c:05:60:c9:ca:23:d4:e2:1b:5f:75:3b:a8:1e:e4:c5:74:ff:
         28:80:86:ef:09:51:bb:81:6d:a6:bd:8f:87:33:d3:72:d1:6f:
         90:fa:0d:31:33:a8:e9:e9:4f:f2:b6:d6:3a:38:65:c3:bd:64:
         94:72:cb:55:86:d8:ea:db:07:37:08:22:51:01:2d:f4:6a:fc:
         69:82:45:3f:9e:c1:f8:05:b1:62:f6:87:f7:f0:2f:e7:39:0b:
         56:27:c0:a2:da:92:23:09:d3:cf:f3:de:28:96:21:56:7b:2c:
         51:70:97:da:79:68:da:72:f3:3d:f9:89:93:54:7d:f8:0f:2f:
         af:de:e5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----