Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/446075d70c17fb779bcfd215c595e0b95ae9e0b8.cer
File:                     446075d70c17fb779bcfd215c595e0b95ae9e0b8.cer (raw, json)
Hash identifier:          cOui8kWlgl0FGzwH8YMGCY1o6csIknu0sYfEK1lQg4w=
Subject key identifier:   C8:8A:7A:C8:F4:45:99:E0:75:B0:2F:F1:15:0F:82:C1:5A:16:C4:22
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3E82B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f32ffc40-9377-45cb-a427-b369f10e32e2/446075d70c17fb779bcfd215c595e0b95ae9e0b8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f32ffc40-9377-45cb-a427-b369f10e32e2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:26 +0000
Certificate not after:    Mon 06 May 2024 18:32:42 +0000
Subordinate resources:    AS: 263760
                          IP: 138.185.104.0/22
                          IP: 2803:1c40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14936107 (0xe3e82b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:26 2017 GMT
            Not After : May  6 18:32:42 2024 GMT
        Subject: CN=446075d70c17fb779bcfd215c595e0b95ae9e0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:48:fd:53:7b:6c:4c:27:0d:8b:09:1a:fc:09:
                    a6:3d:de:ae:47:91:9a:34:fd:10:0f:24:82:1c:fc:
                    d9:88:55:f4:ec:13:2e:f8:65:ec:18:8f:8f:e6:be:
                    29:97:c4:db:b6:7a:0d:67:39:0d:ef:da:4e:c0:78:
                    8d:cd:86:99:1b:dc:45:82:5c:7d:dc:44:df:82:d0:
                    93:60:1a:9e:d2:69:e8:55:f6:42:72:33:71:ca:37:
                    07:65:af:02:ae:62:80:64:f8:91:f2:0d:55:56:f8:
                    82:23:69:84:95:24:ab:40:4b:d8:9f:d1:97:a3:85:
                    90:e1:16:58:4a:fa:86:ac:45:85:1f:e2:f9:2c:2d:
                    93:1e:c4:25:a8:7c:35:f5:2c:69:6d:f3:9d:ba:65:
                    19:fc:21:74:6e:3a:ac:27:15:87:5c:6c:0c:80:e4:
                    a8:50:4e:c8:34:55:bb:89:3f:55:4c:cb:38:de:14:
                    62:e8:26:c3:a0:24:02:bb:1e:42:dc:c4:bf:b6:76:
                    dd:21:d0:de:10:6c:62:e9:14:e9:45:3b:00:b3:0e:
                    dd:61:f2:f3:89:57:35:b9:33:63:43:2a:69:4d:17:
                    cd:da:39:36:50:89:1a:c8:b3:df:28:9e:ad:1e:7c:
                    3d:15:16:44:ea:80:c1:d7:e0:97:98:5c:fd:ec:2d:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8A:7A:C8:F4:45:99:E0:75:B0:2F:F1:15:0F:82:C1:5A:16:C4:22
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f32ffc40-9377-45cb-a427-b369f10e32e2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f32ffc40-9377-45cb-a427-b369f10e32e2/446075d70c17fb779bcfd215c595e0b95ae9e0b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.104.0/22
                IPv6:
                  2803:1c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263760

    Signature Algorithm: sha256WithRSAEncryption
         90:f8:9e:d5:a5:8a:89:9f:08:92:3c:6d:62:f3:42:26:fe:3c:
         77:ee:75:3a:0e:9d:93:b5:ab:5d:d3:bd:1a:2c:ad:ce:76:9b:
         bd:27:44:57:39:c0:15:96:09:86:4c:06:0f:1c:90:a3:53:f5:
         b1:40:d1:72:d7:77:5d:97:ab:26:82:d1:4e:78:99:b4:e6:f8:
         ed:d9:81:45:19:61:d9:cf:28:c9:cf:71:bb:13:c8:a7:db:d0:
         c6:f8:80:68:7a:75:c2:74:8c:9d:2f:4d:d7:f4:47:81:7e:28:
         1e:d2:ed:5e:a9:84:41:48:b7:de:11:0b:f4:36:bf:73:2b:ac:
         0f:d0:f1:38:15:0f:d9:74:a8:18:da:bb:9f:1e:3e:8b:ae:77:
         b9:f4:0c:d4:d9:d7:a2:16:3b:2a:c4:98:bb:c8:c4:22:85:3a:
         a6:8d:1e:fd:8e:35:03:db:41:fb:ff:0e:f3:1a:f3:84:4b:88:
         a9:1c:5f:6d:e5:bf:2f:6f:18:c2:3d:51:a9:7c:38:65:34:27:
         75:3e:cb:14:d1:93:fa:79:04:2b:b0:e9:9f:42:a8:91:d1:05:
         50:3e:d3:44:b1:b6:2b:66:0f:da:3e:5d:02:97:56:07:3f:b9:
         ed:98:41:31:b2:37:96:e1:61:6d:b8:09:0d:7d:05:e0:11:df:
         57:56:78:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----