Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43dce57cdffb676b89eeb458cc86d9a67fbdd104.cer
File:                     43dce57cdffb676b89eeb458cc86d9a67fbdd104.cer (raw, json)
Hash identifier:          ohL/luowQ9ceCLrEMQ+q3ma16r7VH4Am/Z6mV/0L0Dw=
Subject key identifier:   C6:3F:FA:90:62:DD:B5:47:59:52:B1:15:39:EE:64:BD:A9:B7:F9:D6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7C088
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 Aug 2018 20:46:45 +0000
Certificate not after:    Thu 30 May 2024 18:44:52 +0000
Subordinate resources:    AS: 266870
                          IP: 45.160.12.0/22
                          IP: 2803:2aa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15188104 (0xe7c088)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 23 20:46:45 2018 GMT
            Not After : May 30 18:44:52 2024 GMT
        Subject: CN=43dce57cdffb676b89eeb458cc86d9a67fbdd104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b4:bd:32:93:66:7c:ca:7b:dc:46:b2:4a:ff:
                    5c:10:65:38:69:15:c7:48:19:84:18:35:22:ef:84:
                    94:a0:ec:ea:73:71:cf:55:a8:75:24:79:ac:51:22:
                    3e:fa:f6:b6:57:4e:bb:50:21:1e:88:9e:eb:ef:39:
                    10:7d:46:fa:6b:a6:37:5f:0d:1c:5c:f7:de:bf:8f:
                    67:cf:e6:f5:80:4f:5a:af:c0:4c:d6:1c:7f:97:c0:
                    de:21:ea:99:49:b3:22:2d:39:68:c9:08:16:4b:27:
                    c0:c1:09:bb:2a:f6:44:99:2b:f3:49:4f:e4:d0:42:
                    ab:3b:71:29:5f:44:a9:36:0d:3d:68:72:01:6f:3e:
                    00:df:21:0b:d3:14:e0:d2:bd:5c:29:b1:6f:da:7c:
                    00:a7:1f:c6:9a:66:33:14:ab:b2:01:53:7b:1b:70:
                    fe:35:ef:fd:87:80:86:d7:44:30:f3:84:70:87:0c:
                    28:15:2e:32:6f:36:e1:30:9d:15:96:fa:6e:c7:ae:
                    a9:87:3c:80:61:36:13:17:25:0f:aa:df:f5:34:ab:
                    ff:65:38:73:4f:d7:2b:0b:74:27:28:fc:d9:03:f0:
                    e9:de:e2:c8:b6:69:e7:15:de:62:01:d3:eb:f7:20:
                    e9:3a:e8:32:e7:57:f4:d9:76:4e:d0:a7:a9:1e:56:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3F:FA:90:62:DD:B5:47:59:52:B1:15:39:EE:64:BD:A9:B7:F9:D6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.12.0/22
                IPv6:
                  2803:2aa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266870

    Signature Algorithm: sha256WithRSAEncryption
         67:bb:e7:cc:75:c1:77:1a:c7:92:61:7a:3e:ea:ed:33:73:ef:
         b5:bc:a2:06:3f:1d:29:bb:32:76:5f:db:6f:0f:57:07:52:d1:
         14:b4:93:c7:ab:41:87:ad:76:57:dd:bf:96:b0:5e:d4:21:d4:
         f6:e5:86:06:f3:be:e6:72:33:97:bc:4a:08:d7:b4:9a:b1:af:
         c4:dd:8a:42:b6:b1:5c:cd:a4:5f:38:d4:a0:b2:c3:1b:2f:ef:
         62:01:49:ac:c3:51:78:cb:2e:6a:c1:b3:8d:5a:94:8f:ef:94:
         dc:6e:3f:93:74:4b:08:61:35:38:c3:ae:b9:53:17:c4:69:1c:
         f5:a7:1e:c7:35:fe:56:af:3c:a7:a9:98:34:fb:06:3a:1d:57:
         54:e5:ae:10:cb:a2:64:87:72:fa:a4:44:24:e4:2f:95:a8:4b:
         be:e3:46:fc:65:73:85:22:78:54:19:83:13:e2:e6:9d:2b:50:
         0c:09:3c:05:36:5b:5e:3f:10:df:c9:b6:0d:90:b1:1c:36:64:
         77:c6:42:8c:32:9d:b9:11:03:9d:a1:86:93:82:79:4f:06:a5:
         6a:cb:15:e9:99:9a:fa:ba:fc:9e:49:3e:d2:16:19:2a:dc:cc:
         c9:90:c1:8e:25:6d:18:c6:6e:a4:31:24:d4:6e:c2:6e:69:5d:
         07:85:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----