Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer
File:                     2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer (raw, json)
Hash identifier:          RzWJ59R0mHfka1iwNyFyrNjiESXq1JRY6N19QtDCd2M=
Subject key identifier:   81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E95A0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:38 +0000
Certificate not after:    Mon 10 Jun 2024 21:57:27 +0000
Subordinate resources:    AS: 61508
                          IP: 138.219.60.0/22
                          IP: 2803:f240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15292938 (0xe95a0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:38 2017 GMT
            Not After : Jun 10 21:57:27 2024 GMT
        Subject: CN=2dd8701adfa698cf087d5033d6ab2b23bbe67c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:10:ad:4a:5f:3d:cf:e7:1d:4d:0b:4f:31:
                    38:23:b8:56:63:b2:ff:21:dc:22:e4:e0:49:2a:a3:
                    3e:51:ca:e2:c5:0d:7d:98:2a:3e:fb:37:7f:d5:45:
                    8a:ff:35:ea:c8:3c:ff:02:6d:60:e8:3d:e9:20:cb:
                    eb:61:c5:19:6b:e0:16:67:e2:f5:69:dd:68:23:04:
                    13:dc:e6:a4:9f:fa:35:85:98:71:4d:29:f0:57:a8:
                    2c:6c:36:eb:20:3d:ee:eb:f4:33:5a:53:a5:40:ae:
                    5d:78:ab:12:2c:36:16:b9:21:59:1e:e9:9c:d6:25:
                    55:a1:f4:71:47:68:dd:ce:72:a0:d1:83:5c:7c:27:
                    a1:4c:ab:2e:94:8b:bc:a2:bc:bb:bb:ac:4c:00:a2:
                    66:5a:be:fa:46:90:4b:7d:20:e7:63:60:f0:37:65:
                    f0:c1:d1:94:b6:5c:11:0d:a5:ec:2d:9e:79:94:59:
                    f8:88:a9:5e:8e:2c:b2:2f:fa:b5:56:d9:e3:20:e3:
                    d3:ea:fb:6d:5c:7e:95:9b:b2:03:ba:1f:37:3a:e3:
                    b5:f2:fe:52:a3:35:7b:de:07:bc:31:98:85:56:39:
                    6a:a5:c0:35:be:1e:98:d7:cd:65:91:76:67:e6:b1:
                    4a:29:97:60:c7:00:2f:aa:67:3c:4a:35:b8:9b:26:
                    d7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.60.0/22
                IPv6:
                  2803:f240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61508

    Signature Algorithm: sha256WithRSAEncryption
         c3:dd:b9:4e:fa:52:fe:a2:33:24:e9:c1:90:45:39:ae:e9:78:
         54:12:6d:7f:f4:c6:62:5a:a1:20:69:29:14:ee:29:d8:ad:de:
         b8:51:36:2f:47:bd:b0:8b:e5:7a:4c:43:6e:62:3e:76:9e:b2:
         0c:5f:a0:04:f9:6a:97:72:61:33:23:48:2a:c6:4f:21:68:e4:
         42:f6:14:31:dc:d2:bb:68:ae:37:6f:41:7b:16:81:ec:3a:c4:
         f7:44:a7:c3:bc:ae:43:43:fd:3a:78:a0:cc:c6:bf:9c:40:17:
         59:8b:0a:1b:34:4f:18:04:1e:35:2a:8c:4c:3d:c9:b7:1d:88:
         a2:49:8a:12:32:d3:9d:7e:a3:ee:96:da:77:ae:46:49:39:6a:
         c1:6d:3e:94:aa:bc:1a:e9:18:75:ef:d1:b3:e9:74:2e:99:7b:
         5d:3a:e3:cc:69:78:39:94:4b:29:6e:33:0e:4d:5c:98:cf:f4:
         f0:d3:7d:bd:b1:da:cf:28:06:6b:31:bf:ac:8c:f7:f1:ca:90:
         aa:61:7b:d4:b1:01:6f:f5:07:77:29:3a:8d:31:ce:fd:06:59:
         a5:d0:12:29:e6:74:7b:1c:75:63:e0:98:2a:22:ae:bd:ff:b9:
         a2:7c:6f:c2:d0:ac:1b:b2:29:db:8d:a3:c3:9a:fe:94:b6:92:
         51:d0:7a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----