Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40b526ba23ca7ed535f9753dc1684d3cd0025f33.cer
File:                     40b526ba23ca7ed535f9753dc1684d3cd0025f33.cer (raw, json)
Hash identifier:          hohHt31HzD3RfZXttiC9tc9PD5XHnkdc+Ys8Wv7r4Ds=
Subject key identifier:   B5:7D:57:4A:A5:E8:B9:E2:28:CB:A8:2D:EC:2F:00:CC:24:B6:F9:7E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6568F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a07b6e82-eb51-4893-93ac-7fc54b968d12/40b526ba23ca7ed535f9753dc1684d3cd0025f33.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a07b6e82-eb51-4893-93ac-7fc54b968d12/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Nov 2017 21:17:11 +0000
Certificate not after:    Mon 23 Sep 2024 20:25:57 +0000
Subordinate resources:    IP: 2801:164::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16144015 (0xf6568f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 30 21:17:11 2017 GMT
            Not After : Sep 23 20:25:57 2024 GMT
        Subject: CN=40b526ba23ca7ed535f9753dc1684d3cd0025f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:f0:7f:e7:b3:8f:3c:5e:38:3c:31:f9:fe:
                    d7:d0:ec:94:6a:94:f3:9e:f7:36:c5:4d:b3:8b:a6:
                    49:33:eb:3f:96:92:c4:15:bd:d6:79:4c:c8:57:fc:
                    ac:ba:e9:f0:2d:dc:4e:4b:cb:6c:53:2b:4c:8c:69:
                    12:13:01:59:a4:c8:4c:3a:96:f6:76:49:1e:5b:d1:
                    f9:ac:c4:50:f3:74:70:97:cf:23:ac:d7:d8:f0:6e:
                    0e:3a:2b:01:67:00:5c:d5:5a:5a:16:23:cc:5e:8c:
                    91:72:c3:dc:31:c7:8f:0d:ae:f4:9c:8a:8f:21:4e:
                    3c:4b:63:c6:87:15:cf:dc:9c:62:cd:8c:bd:31:ea:
                    2c:10:ba:39:c4:31:e6:dc:74:d6:75:8b:d5:1f:61:
                    5c:a6:e5:e0:2e:55:6d:43:51:c0:a2:20:c0:9f:d5:
                    56:1e:c4:e0:af:64:47:6b:c9:82:6e:fa:19:bd:40:
                    2b:9b:9a:20:f3:8f:18:99:09:c6:70:a6:c9:60:73:
                    92:3c:3d:fa:30:e3:9a:10:80:e6:98:b7:d9:65:98:
                    fb:11:dd:56:45:c7:ee:19:14:38:bb:43:76:6d:9c:
                    ac:b3:d7:d7:1e:38:d8:8a:b5:fa:a2:b0:ee:9d:54:
                    05:51:5a:db:f6:ef:e7:d3:84:07:7b:7e:47:83:77:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7D:57:4A:A5:E8:B9:E2:28:CB:A8:2D:EC:2F:00:CC:24:B6:F9:7E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a07b6e82-eb51-4893-93ac-7fc54b968d12/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a07b6e82-eb51-4893-93ac-7fc54b968d12/40b526ba23ca7ed535f9753dc1684d3cd0025f33.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:164::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:dd:45:fa:b4:28:be:7e:8a:d1:c3:10:4c:b8:66:d5:ce:f7:
         23:a6:99:92:f9:52:e4:96:e4:1c:4b:ce:33:99:8b:4e:11:b2:
         cf:1c:75:f4:47:d7:2f:66:a0:cd:22:32:e8:89:aa:41:f7:49:
         b4:f6:98:26:9b:16:a6:a7:04:aa:85:92:27:70:86:26:59:ab:
         50:fc:ff:d7:c9:de:9f:1c:20:50:b4:ce:c3:ef:2d:f9:84:5e:
         d5:22:cc:dc:49:df:63:da:d2:cc:88:17:7d:81:15:81:09:bc:
         b6:50:24:c5:d0:17:fe:39:39:42:c6:8e:f7:7c:1b:a6:06:2d:
         fb:15:a3:62:8b:5b:51:9b:12:79:1f:d6:3d:90:1a:42:50:4b:
         7c:1e:ad:7c:e7:7f:d7:cc:c1:e8:dc:07:78:38:99:12:92:54:
         b4:cb:ad:70:37:12:95:7c:84:ee:ba:e2:ab:2d:85:48:15:2d:
         d9:ad:7a:5e:54:5b:cf:9b:80:11:c7:90:84:19:0f:6b:ac:a6:
         0b:f0:24:72:1d:d3:0b:95:d3:e8:41:cd:58:55:9d:84:36:32:
         6d:8d:0f:65:42:53:ff:37:ee:1d:83:10:db:66:df:84:65:32:
         23:c9:1f:6b:49:23:61:68:a2:0b:7e:8c:31:a4:e3:df:3a:d3:
         b4:04:ac:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----