Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37043f262df2eb062b3237cb4f189b08823ce138.cer
File:                     37043f262df2eb062b3237cb4f189b08823ce138.cer (raw, json)
Hash identifier:          qCpU1JXjCCllKvTESjCuO9HqrD1+sOGzyjUVScOs7wU=
Subject key identifier:   34:D4:85:26:6C:78:F8:0C:9F:41:63:82:5F:3F:15:7B:E5:86:2A:EC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5D850
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/37043f262df2eb062b3237cb4f189b08823ce138.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:45 +0000
Certificate not after:    Wed 18 Sep 2024 21:20:08 +0000
Subordinate resources:    AS: 264814
                          IP: 170.238.200.0/22
                          IP: 2803:ecc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16111696 (0xf5d850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:45 2017 GMT
            Not After : Sep 18 21:20:08 2024 GMT
        Subject: CN=37043f262df2eb062b3237cb4f189b08823ce138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c0:6e:d1:fe:80:70:5c:82:c2:54:3f:2b:8e:
                    26:9d:d0:b9:9a:89:cf:f2:d1:7d:09:68:3d:1b:fa:
                    5e:59:46:f4:6e:86:2b:40:d9:68:01:a6:97:0f:00:
                    85:4a:3e:04:01:72:2d:20:22:f2:e7:5a:34:eb:c1:
                    17:3f:d8:a2:9d:60:61:34:22:da:46:dd:3f:4e:85:
                    0f:96:69:29:b1:1c:1c:80:96:f5:3d:58:b5:30:fc:
                    f1:96:ba:40:ee:1b:cd:c9:a2:27:0a:e3:69:52:cf:
                    20:ca:c5:28:63:40:6c:ca:d9:a6:f4:3c:cf:d8:49:
                    d2:23:7a:4e:21:96:97:60:b2:63:3a:78:c6:5a:f5:
                    8b:37:69:fd:34:c5:c0:2d:d4:f1:ab:e0:35:b7:28:
                    8d:96:0b:38:99:d8:74:21:bb:92:b8:28:cd:d1:6d:
                    ae:a8:02:54:5f:2f:b3:5a:73:6e:0e:b5:5c:cb:61:
                    d6:5b:9a:83:fa:3a:aa:4d:53:53:92:21:3b:f4:9a:
                    e4:8e:9a:3c:cd:02:bd:05:f0:f9:f9:b3:4d:6a:45:
                    74:5d:a2:d3:46:27:f8:f2:32:5b:0f:11:9b:5f:7b:
                    fc:ff:f0:aa:d6:9c:12:bc:7e:26:1d:da:6b:33:2c:
                    1f:04:48:7d:06:36:e1:e0:50:ef:ab:aa:2f:95:ed:
                    e5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D4:85:26:6C:78:F8:0C:9F:41:63:82:5F:3F:15:7B:E5:86:2A:EC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/37043f262df2eb062b3237cb4f189b08823ce138.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.200.0/22
                IPv6:
                  2803:ecc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264814

    Signature Algorithm: sha256WithRSAEncryption
         4d:87:2a:02:e3:da:c1:ed:ac:9c:9b:55:b4:a5:d3:68:8a:65:
         3e:6e:85:27:6a:22:db:77:c4:6c:2e:90:2c:0c:f7:38:62:39:
         41:fc:62:3d:38:96:bc:69:30:b8:4b:33:75:b6:d0:f4:ed:f0:
         6e:2f:db:7a:a5:3f:f9:61:4d:e3:99:36:a6:47:f7:5d:df:e7:
         6e:74:2d:70:f5:b1:eb:19:64:01:ea:de:89:59:ab:f6:25:77:
         1a:be:6d:a4:74:2a:61:d3:a8:34:84:5c:d5:9f:42:1f:f4:bf:
         17:33:f0:3a:93:7a:94:45:a0:99:4d:f1:c5:4a:33:bb:3c:fb:
         9c:ad:f2:92:78:68:84:bc:29:f1:8c:db:0e:bc:c3:fb:58:d2:
         6b:f7:15:ac:cf:41:0e:01:e4:12:f7:95:d2:4e:5e:92:e2:7d:
         4d:b8:c6:1a:f5:78:74:35:af:3c:c5:67:1f:a6:33:ab:72:fa:
         52:5d:d6:42:6a:54:36:d0:61:0c:1c:8d:0d:8a:a1:f5:84:6f:
         b9:56:fb:70:57:33:13:de:8e:f9:86:a5:56:bb:7d:19:37:73:
         3f:f6:53:1e:ee:79:76:9d:19:8e:24:6e:b3:5b:e0:57:05:2a:
         8d:b6:55:02:6d:ef:f0:b5:12:0f:c4:09:5e:88:3d:fc:61:1b:
         60:67:60:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----