Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c60b92d12a2585c94ee20632fda5daecd76aa9d.cer
File:                     2c60b92d12a2585c94ee20632fda5daecd76aa9d.cer (raw, json)
Hash identifier:          uMfa+vnML5g25BHgacFRikV4kThPROT+5ESWjAOMC1Q=
Subject key identifier:   AF:61:7B:19:BE:00:78:FB:2C:3C:FE:28:52:F7:6F:51:11:2C:8B:76
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1A2A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/39afde0c-49dd-414e-8cf7-72e7c7e67dfe/2c60b92d12a2585c94ee20632fda5daecd76aa9d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/39afde0c-49dd-414e-8cf7-72e7c7e67dfe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:58 +0000
Certificate not after:    Tue 13 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 5722
                          IP: 168.176.0.0/16
                          IP: 2800:8a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15835813 (0xf1a2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:58 2017 GMT
            Not After : Aug 13 06:00:00 2024 GMT
        Subject: CN=2c60b92d12a2585c94ee20632fda5daecd76aa9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4e:0e:29:11:27:6f:df:b6:10:7e:03:77:84:
                    2f:1a:fe:72:60:85:43:72:77:93:f9:b5:46:17:76:
                    02:f4:39:e2:16:3e:0d:de:01:75:e2:e1:9d:e0:1d:
                    5b:37:3a:0d:39:3d:56:33:86:00:26:4e:8a:0f:00:
                    a8:1e:1e:33:97:05:b1:59:b8:b0:db:99:04:ed:ac:
                    f2:0d:54:d9:fb:7c:5a:a9:b4:9b:af:9e:8d:d5:d4:
                    a5:26:9c:c4:52:b2:e3:f9:69:33:11:dd:ff:e0:58:
                    6c:20:25:1a:ab:76:60:d3:a1:a4:a8:0f:fa:88:8d:
                    d9:17:cd:2d:a7:c3:9d:c5:ad:52:e2:67:ef:95:13:
                    c9:5c:e2:04:88:30:f6:6e:69:b5:91:fc:77:98:e8:
                    7e:9d:d5:2a:66:15:a3:41:8c:5d:86:e8:34:f8:b8:
                    c1:1c:9f:09:db:c8:4b:b8:6f:0b:13:e2:9b:e1:a5:
                    54:a8:27:af:10:8b:de:62:43:0e:f1:f1:4d:7f:ae:
                    15:f4:f9:08:ab:67:f5:ad:95:93:de:b6:08:71:ce:
                    8c:e0:13:c0:45:90:98:93:b0:9d:a6:a7:81:ef:1b:
                    54:45:13:4b:04:73:2f:5a:81:46:b2:bf:ac:51:d0:
                    1d:1f:7c:4c:9e:bc:c8:73:19:70:c4:a3:36:b9:85:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:61:7B:19:BE:00:78:FB:2C:3C:FE:28:52:F7:6F:51:11:2C:8B:76
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/39afde0c-49dd-414e-8cf7-72e7c7e67dfe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/39afde0c-49dd-414e-8cf7-72e7c7e67dfe/2c60b92d12a2585c94ee20632fda5daecd76aa9d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.0.0/16
                IPv6:
                  2800:8a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5722

    Signature Algorithm: sha256WithRSAEncryption
         94:41:fe:1b:64:57:56:ba:0d:f3:6d:1c:fd:8f:23:35:2a:3f:
         56:35:d8:32:00:44:fc:60:3a:8e:18:c0:da:9b:04:69:f1:94:
         8e:01:3c:70:6a:7e:a4:c6:a9:8b:32:1c:fd:58:04:c4:45:ab:
         72:fb:bd:46:10:e3:eb:1d:3a:86:68:1b:8d:96:70:11:43:f4:
         8f:4d:60:35:7b:c4:ac:60:d0:7b:9f:c4:e0:bb:34:69:c3:16:
         03:9a:d9:84:cd:46:e6:7b:13:07:ec:aa:2b:16:71:32:ab:ad:
         0b:42:d5:65:6d:a3:3d:b9:09:2b:62:d0:2a:1a:a0:d4:0a:e8:
         0f:7f:26:46:75:46:2a:d0:84:04:fa:e3:fd:07:e2:d8:d1:67:
         05:0c:cb:2e:70:56:74:49:d3:39:a7:1f:b6:c5:68:5d:14:47:
         13:8b:24:80:18:5a:92:59:38:93:6c:86:12:55:41:ea:0d:b1:
         d3:bb:ad:1f:d9:84:2c:76:ef:2b:c1:dd:21:6f:4a:df:58:52:
         fa:ac:f0:11:d9:bc:04:4b:f4:6e:36:06:51:2f:bb:0a:27:06:
         be:d3:f2:06:5d:ae:95:1d:2d:a6:a0:13:e7:26:ce:60:30:4f:
         99:de:9b:96:6f:3f:ac:67:f8:d4:8f:8b:6b:5d:b8:ba:87:62:
         40:a9:52:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----