Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4074b7e3388f8bf410df9682225a591248c46279.cer
File:                     4074b7e3388f8bf410df9682225a591248c46279.cer (raw, json)
Hash identifier:          pFv80gqI/Pu4Si5euqrAubm0kco6egHR/esJ9dSEiow=
Subject key identifier:   94:44:94:C5:2D:2D:B7:95:30:D4:1B:8E:2F:02:FA:83:BD:44:E1:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E240B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ab3e62dd-7a3b-4dc8-a76e-74eaf2ec6bc0/4074b7e3388f8bf410df9682225a591248c46279.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ab3e62dd-7a3b-4dc8-a76e-74eaf2ec6bc0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:55 +0000
Certificate not after:    Mon 22 Apr 2024 22:36:34 +0000
Subordinate resources:    IP: 138.121.200.0/22
                          IP: 200.7.96.0/20
                          IP: 2803:c40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14827702 (0xe240b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:55 2017 GMT
            Not After : Apr 22 22:36:34 2024 GMT
        Subject: CN=4074b7e3388f8bf410df9682225a591248c46279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:4c:83:35:2a:e1:4d:98:6a:10:de:fe:cb:
                    0c:46:ab:c4:da:56:7a:ec:76:be:8b:f0:25:69:51:
                    ae:80:2d:76:02:78:ac:ca:09:87:63:eb:5d:c1:ce:
                    17:44:23:da:0b:21:2b:5e:08:dc:1d:01:d5:55:85:
                    61:7e:f5:71:e6:75:ec:2b:fc:90:ca:9f:f1:34:36:
                    04:de:f6:ef:fa:a4:c8:84:13:1f:c3:69:07:05:d8:
                    09:79:24:85:81:c2:ce:68:5f:6a:af:74:7d:4d:cb:
                    fb:ee:1b:19:d9:03:d9:d0:42:c6:be:dd:f7:71:82:
                    26:97:89:74:ae:d3:6c:24:be:62:2b:63:76:ea:c3:
                    ce:06:3c:cd:26:1f:7e:ca:59:06:9d:fb:85:61:5c:
                    dd:03:0f:a2:fa:ff:0d:ce:7e:84:0f:59:7b:48:67:
                    ca:9c:77:17:02:44:49:43:2e:f7:6a:78:5b:d8:1e:
                    ee:9b:55:b0:a0:86:cb:c2:66:9c:f6:67:a2:d1:c0:
                    cf:8a:7f:00:89:34:28:c5:98:54:b2:b7:b7:00:95:
                    b0:e7:0c:a8:cc:7f:08:c7:b7:31:c7:c1:13:38:60:
                    48:5d:fe:16:85:31:36:51:90:c1:f5:92:4c:1c:40:
                    e7:ba:45:e9:40:3b:ef:81:03:4e:a8:b5:70:73:78:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:44:94:C5:2D:2D:B7:95:30:D4:1B:8E:2F:02:FA:83:BD:44:E1:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ab3e62dd-7a3b-4dc8-a76e-74eaf2ec6bc0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ab3e62dd-7a3b-4dc8-a76e-74eaf2ec6bc0/4074b7e3388f8bf410df9682225a591248c46279.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.200.0/22
                  200.7.96.0/20
                IPv6:
                  2803:c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:84:69:65:55:2b:b7:d2:a3:cb:6b:db:0d:74:02:02:d4:38:
         13:b4:c9:d6:fd:48:44:19:80:38:1d:41:34:0e:f1:44:bd:55:
         6c:4e:9b:c3:67:53:d5:43:f6:5b:4f:b6:c5:f0:d2:fc:68:7c:
         5e:36:f5:4e:3e:20:d4:18:2c:95:51:95:ed:8f:22:9c:9e:17:
         4f:d5:5d:2c:9c:8f:1c:6d:63:6d:cf:f2:e2:b3:f6:26:8c:ac:
         0f:03:39:62:35:b1:af:78:57:56:9f:f6:e6:97:ba:43:ce:8d:
         a9:44:ff:85:46:52:6c:0e:28:c2:a9:7f:dc:ac:07:f2:d5:c7:
         15:a2:63:f7:00:06:f3:f8:06:f1:45:1f:e1:cb:42:e2:d8:b8:
         8c:7c:42:60:8a:3b:3d:19:16:d9:a8:62:69:27:07:d4:12:1a:
         ce:06:54:ea:1e:27:a3:ad:45:82:1f:08:b9:eb:66:99:48:d6:
         fd:dc:5f:ce:41:4e:c7:e4:59:e2:63:2b:74:26:81:55:17:ae:
         c4:ba:75:45:47:63:ad:8a:69:87:db:a8:fe:29:c5:a3:f0:ab:
         a0:84:19:4b:10:e3:80:23:03:d7:2e:c7:b6:38:fd:8f:0d:13:
         3c:5a:4e:27:1f:e1:44:c9:6f:ff:8f:64:02:47:49:94:87:4a:
         a3:64:8d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----