Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.cer
File:                     3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.cer (raw, json)
Hash identifier:          AUiranTnTfoYFTmVBmsn7x6X3GiudulhQVcLeYY4l7c=
Subject key identifier:   A1:88:2D:3E:B4:49:04:90:10:F8:26:C3:E9:34:C6:82:9C:EA:91:81
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8BC93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/81c0ed88-23aa-434c-ab96-0650ae7fd486/3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/81c0ed88-23aa-434c-ab96-0650ae7fd486/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 03 May 2018 23:39:07 +0000
Certificate not after:    Tue 08 Oct 2024 22:03:47 +0000
Subordinate resources:    AS: 266667
                          IP: 45.228.172.0/22
                          IP: 2803:2920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16301203 (0xf8bc93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 23:39:07 2018 GMT
            Not After : Oct  8 22:03:47 2024 GMT
        Subject: CN=3bac802a13d8e3e1c4a05f9a396fca3ff0817e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:73:d4:90:03:c0:e3:00:27:28:7b:fe:89:99:
                    65:37:17:77:a5:97:d0:e9:4a:8e:72:0a:46:6d:85:
                    2a:11:60:cb:c0:53:8a:9e:bb:0a:d7:1a:5e:c1:93:
                    bd:18:49:f1:72:1e:51:21:28:e4:00:3c:c3:ef:a0:
                    8c:f2:f8:35:7f:0d:3c:cd:4c:09:1e:2b:82:9c:69:
                    c3:5c:f7:0a:6d:50:1e:d6:47:96:15:ec:09:d0:19:
                    53:6d:cd:b2:b2:c4:45:04:f6:2b:62:2c:29:c3:69:
                    e9:19:43:b0:a5:53:9f:21:a4:74:f7:42:55:33:7b:
                    4e:4e:c8:88:5b:e6:6d:af:18:fb:3c:ba:e7:a1:6e:
                    f8:2a:53:b5:81:a0:d5:d2:69:76:b5:f8:d4:0a:67:
                    ed:b5:e1:4e:95:25:2a:04:1a:d4:e3:8f:1d:30:bc:
                    3a:e0:0a:b0:3f:55:0f:ca:d7:a4:9e:a0:4e:3d:b9:
                    82:4c:26:2c:44:43:4c:41:ec:da:d2:03:ed:2f:2c:
                    d7:d2:18:9e:49:37:61:83:c0:f8:42:d9:b3:a7:03:
                    2d:76:02:ce:ed:b6:f4:c9:3a:2d:04:37:09:8a:c2:
                    7c:d1:e5:ac:ad:44:11:81:0e:68:bb:95:64:d0:72:
                    02:74:0c:15:04:d5:ea:43:0f:76:ac:f6:5e:03:dd:
                    37:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:88:2D:3E:B4:49:04:90:10:F8:26:C3:E9:34:C6:82:9C:EA:91:81
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/81c0ed88-23aa-434c-ab96-0650ae7fd486/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/81c0ed88-23aa-434c-ab96-0650ae7fd486/3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.172.0/22
                IPv6:
                  2803:2920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266667

    Signature Algorithm: sha256WithRSAEncryption
         c5:84:80:16:20:62:7c:22:f6:35:ad:49:80:6c:ef:df:39:a8:
         6e:6d:a0:b2:26:96:30:b0:5a:fb:c9:b2:0a:23:f6:45:b0:4c:
         40:9f:5a:f8:77:f2:f9:55:3e:73:5f:f1:49:a8:10:93:e0:89:
         3e:3c:15:97:e7:2f:bc:dd:23:8b:aa:86:24:25:99:a7:b1:9e:
         2d:b6:ab:48:f5:5d:59:0a:c7:51:61:16:bb:13:29:e6:34:fc:
         7a:4d:00:e5:11:42:72:94:c5:79:3b:96:37:23:e9:ff:ea:15:
         32:1a:ac:07:1f:99:37:c8:e3:f5:e2:2e:23:ab:b5:d1:f3:e3:
         fa:8b:33:8c:1d:ea:8f:1d:0d:80:32:6a:48:c8:08:a2:69:c4:
         4a:b9:66:f7:a4:0c:e4:c1:b8:94:54:15:71:3b:27:5a:af:a5:
         77:42:c1:f9:95:82:53:ab:34:00:2b:f6:25:c2:cf:ec:30:6d:
         72:ac:93:26:3c:4a:be:db:c3:17:01:da:a0:26:3c:f6:01:66:
         5b:8d:00:07:2f:50:2e:3e:53:3d:6a:11:09:38:84:39:d0:78:
         a0:07:e6:e5:ab:da:2f:0d:5d:60:7c:f0:fa:97:54:09:51:46:
         47:3b:77:f6:92:77:9e:b3:d4:c6:41:f5:a5:40:f0:a9:b7:79:
         3b:cb:e8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----