Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/303cea3a2341712978cfb48b0cbe2d579d6ddaf9.cer
File:                     303cea3a2341712978cfb48b0cbe2d579d6ddaf9.cer (raw, json)
Hash identifier:          MaRelEtEnC3AUM7cBhgy++YQVvKj9yDsiYJUOU4xvfY=
Subject key identifier:   4F:BC:E0:B2:97:43:AB:08:D6:78:39:8F:8D:75:63:4B:29:DD:41:D4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1FDCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ce61f03c-0468-4e7c-a018-9143ea47eb98/303cea3a2341712978cfb48b0cbe2d579d6ddaf9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ce61f03c-0468-4e7c-a018-9143ea47eb98/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:21 +0000
Certificate not after:    Sat 17 Aug 2024 17:50:19 +0000
Subordinate resources:    AS: 52350
                          IP: 186.148.200.0/21
                          IP: 2800:aa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15859149 (0xf1fdcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:21 2017 GMT
            Not After : Aug 17 17:50:19 2024 GMT
        Subject: CN=303cea3a2341712978cfb48b0cbe2d579d6ddaf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:de:85:f3:a2:9c:2c:2a:94:2c:b8:d7:8d:
                    62:3f:5b:e9:3e:05:59:c3:4f:ba:16:13:b3:83:a5:
                    e1:62:f9:9a:41:76:08:bf:ea:e7:1f:06:23:f0:1f:
                    3d:6f:49:c3:da:c8:ea:e7:a7:ad:56:b2:00:2e:7e:
                    cd:ac:a9:52:1b:2e:88:ac:fd:52:d0:7f:a8:14:38:
                    65:01:36:16:62:16:1b:5f:2b:c8:26:bd:20:a1:29:
                    06:ef:aa:30:8e:ef:f8:4f:27:fc:e8:56:1c:40:f2:
                    26:b9:33:74:90:5a:7e:23:41:e1:7a:97:cc:49:18:
                    b2:dc:17:ec:fa:be:e8:f9:52:eb:4a:64:2d:97:93:
                    47:07:78:bc:08:f2:af:c5:8d:0e:d8:a4:dc:07:a2:
                    54:fd:39:c4:41:bb:99:22:30:87:75:cc:81:27:fc:
                    b0:9e:c5:e6:3b:33:7c:6e:aa:7a:83:7f:9c:48:d2:
                    3a:49:82:c5:32:c2:6d:f0:56:3b:0d:7e:6a:3f:72:
                    72:9f:6f:51:41:b9:54:d8:42:17:95:97:e8:ea:c9:
                    f2:ce:f8:a6:53:52:53:14:da:57:ca:46:1f:f5:83:
                    bc:a9:0c:26:e9:2c:02:cf:e0:79:d0:a4:6c:4a:ae:
                    e2:2c:6a:25:4b:3c:58:9d:d2:de:6d:7a:5d:8f:77:
                    37:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BC:E0:B2:97:43:AB:08:D6:78:39:8F:8D:75:63:4B:29:DD:41:D4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ce61f03c-0468-4e7c-a018-9143ea47eb98/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ce61f03c-0468-4e7c-a018-9143ea47eb98/303cea3a2341712978cfb48b0cbe2d579d6ddaf9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.200.0/21
                IPv6:
                  2800:aa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52350

    Signature Algorithm: sha256WithRSAEncryption
         ae:c1:82:88:2d:69:af:20:7c:86:bc:32:10:04:1c:44:ec:8e:
         62:07:02:76:3a:67:63:59:70:d9:92:62:72:a7:83:a0:d6:a2:
         63:ac:9d:3a:b9:7e:07:09:be:a0:f4:8b:ed:28:b9:4a:50:a5:
         a1:cc:1a:0e:b2:5c:bd:ff:ed:72:24:b8:7b:b0:cb:56:91:4e:
         9a:f6:e2:38:a4:82:8a:4b:f9:47:67:18:77:4c:c0:fe:b8:c6:
         72:89:8f:e3:66:0d:af:d9:19:c2:b1:32:04:dc:c8:61:9a:8f:
         d3:0e:e5:da:b8:b7:a6:70:56:43:b0:02:58:41:f4:b5:4a:80:
         c5:24:2c:a3:f0:df:9e:e7:3c:0e:09:99:89:e3:e7:d3:cb:8b:
         95:5e:df:d9:3b:0e:5d:0d:11:9b:de:b6:de:89:32:27:5c:22:
         97:93:9e:8b:41:22:fd:11:98:3f:bc:44:51:36:67:92:60:1c:
         a4:93:36:6b:f8:ad:98:f8:c6:7d:53:d8:a8:65:61:a0:a2:5c:
         62:c3:ae:01:dc:0d:f6:86:86:e3:65:1a:90:cb:22:35:7b:9d:
         81:01:ec:a3:f1:48:3b:93:8b:ba:b6:bc:6c:ed:7e:6c:ba:0c:
         07:1e:16:35:ed:77:b0:c9:cd:cc:03:3c:d8:06:64:f2:25:90:
         52:0e:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----