Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35dce422626a57eb82f943d8d37ec630e859534c.cer
File:                     35dce422626a57eb82f943d8d37ec630e859534c.cer (raw, json)
Hash identifier:          jxKe5AhPPiyefl81wIzTmIa7Xry/QctbXDxM1mojM8Y=
Subject key identifier:   D6:B0:BD:81:2B:25:D9:7F:0C:AB:8F:80:7E:5F:3E:85:75:19:0B:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA3180
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f088d18d-3efe-4604-864c-cb55834af003/35dce422626a57eb82f943d8d37ec630e859534c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f088d18d-3efe-4604-864c-cb55834af003/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:32 +0000
Certificate not after:    Mon 17 Jun 2024 18:33:07 +0000
Subordinate resources:    AS: 263823
                          IP: 138.219.216.0/22
                          IP: 2803:1a40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15348096 (0xea3180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:32 2017 GMT
            Not After : Jun 17 18:33:07 2024 GMT
        Subject: CN=35dce422626a57eb82f943d8d37ec630e859534c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:31:7d:1e:92:4c:3c:a5:90:59:e8:97:3f:
                    24:29:c0:aa:ed:54:5c:d0:17:4e:7c:56:b8:f2:1f:
                    a6:2c:a6:8b:61:f9:46:f8:e9:14:b8:92:75:8b:10:
                    fa:44:e1:0b:de:74:8e:bb:46:4b:4c:ce:ac:e9:f0:
                    b8:46:74:19:cc:a4:86:c5:53:5c:ad:e2:64:66:c7:
                    ee:05:f1:ba:9c:e0:12:73:28:61:8d:46:90:fa:ef:
                    14:d1:71:2f:b3:d1:21:70:1d:70:aa:94:e4:87:d4:
                    2b:0b:1f:6f:b1:3e:77:b7:71:a1:85:4e:89:aa:4b:
                    f9:79:c3:f2:2c:4e:f9:9d:3e:16:57:bd:78:23:f1:
                    61:46:08:ea:53:96:ba:c0:d3:75:33:30:9e:9a:24:
                    8a:d4:3d:c6:6d:56:53:43:05:01:57:fd:fa:9d:fe:
                    ea:53:6b:0d:c7:2c:10:9e:9c:81:a1:90:3b:75:ea:
                    73:c2:0d:3e:5e:92:d7:18:0e:32:99:b0:9b:b3:df:
                    b2:b7:3e:6c:61:bc:c6:0e:8e:ba:d4:18:0b:2b:d1:
                    1e:ae:7d:00:83:d7:8c:43:a0:5e:f3:7b:fd:53:cc:
                    42:a0:62:01:3a:6a:a6:93:04:ea:07:a5:f3:af:92:
                    cc:1a:0c:3e:70:03:09:66:ce:80:3c:37:7e:52:64:
                    89:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B0:BD:81:2B:25:D9:7F:0C:AB:8F:80:7E:5F:3E:85:75:19:0B:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f088d18d-3efe-4604-864c-cb55834af003/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f088d18d-3efe-4604-864c-cb55834af003/35dce422626a57eb82f943d8d37ec630e859534c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.216.0/22
                IPv6:
                  2803:1a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263823

    Signature Algorithm: sha256WithRSAEncryption
         49:9d:1e:92:47:77:9d:50:8a:f5:4c:31:01:42:76:71:b1:27:
         91:1d:92:04:f7:8b:9a:84:e7:9a:75:91:b0:61:37:9d:ea:90:
         b0:d7:aa:4e:5a:c7:17:64:7b:48:87:12:72:f0:c0:c0:7c:f5:
         3a:a4:e2:8a:04:f8:a4:fc:74:88:8a:96:4b:ef:48:68:17:a9:
         9b:a7:56:5b:db:9c:9e:bc:d8:f8:dc:6f:42:3e:7e:2c:b1:f4:
         07:49:86:19:3c:3a:b1:b5:18:be:04:7b:9f:62:e5:fb:53:31:
         06:4a:f1:bc:d1:bf:25:f9:0a:b0:6f:81:e0:df:18:ad:12:80:
         1d:fb:90:41:b9:b6:bd:f6:14:19:4b:bb:90:4a:b9:fd:b4:68:
         47:43:58:15:57:3a:d8:bf:ff:dd:45:0e:9e:4e:da:d3:cf:54:
         a7:42:10:f5:7d:bc:9d:a8:91:73:ce:bd:ea:33:b2:72:f9:42:
         47:20:f3:31:0f:73:e2:3e:85:ef:52:c7:72:ed:6a:46:bd:5e:
         01:a7:95:1c:d4:43:9b:5d:f8:ca:7c:1d:8b:0b:8d:1e:50:59:
         4a:67:86:e4:44:be:58:87:44:2b:eb:af:1f:bb:cd:f8:7a:29:
         3b:3e:49:00:70:91:c8:e0:ce:cc:22:dc:43:f7:ca:c1:70:ce:
         73:2a:c1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----