Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46ed0ba5c1bff441980b5c3b48551e02885a3618.cer
File:                     46ed0ba5c1bff441980b5c3b48551e02885a3618.cer (raw, json)
Hash identifier:          ac27sgMAiu4Q6YyvCeHixtayU/iRtn5ybKvCc0gaPJw=
Subject key identifier:   E2:8A:32:1B:2A:F0:CC:20:B8:09:F3:22:95:A1:7B:D0:79:79:E4:32
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE6B4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4f3c0a9b-a1cf-4573-b2a7-50eb10893b28/46ed0ba5c1bff441980b5c3b48551e02885a3618.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4f3c0a9b-a1cf-4573-b2a7-50eb10893b28/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:46 +0000
Certificate not after:    Tue 12 Mar 2024 19:41:48 +0000
Subordinate resources:    IP: 160.238.212.0/22
                          IP: 2801:12:3000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14576458 (0xde6b4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:46 2017 GMT
            Not After : Mar 12 19:41:48 2024 GMT
        Subject: CN=46ed0ba5c1bff441980b5c3b48551e02885a3618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c6:70:77:44:73:5b:8a:52:56:ac:e1:3b:28:
                    0d:7a:38:2b:e4:ac:2e:06:06:9b:ed:f2:b8:e2:1b:
                    98:38:6d:03:37:29:29:48:a8:b7:e4:44:e6:37:c9:
                    06:0c:cc:9a:5b:e4:85:27:dc:ab:82:87:c6:3f:35:
                    ce:d6:6b:ee:6a:1c:9d:60:1f:e9:cd:95:db:fe:cd:
                    14:79:e1:33:78:cd:3f:9f:17:d8:47:3c:c4:2d:e9:
                    31:08:6c:b5:a8:6d:b6:b8:e3:96:51:ef:2a:1c:46:
                    e2:ca:38:6c:a1:75:c9:b2:50:d6:9a:68:b4:60:04:
                    7c:fd:f2:4f:3b:93:ed:bf:19:a5:d6:2b:25:2c:19:
                    a9:40:5d:40:91:a7:f3:d0:a7:07:83:7c:5d:24:9b:
                    00:eb:d2:b4:19:8a:e8:9b:e7:f6:2a:35:2e:00:e6:
                    cd:32:2e:37:f7:69:df:35:70:56:1b:95:a1:c1:9c:
                    28:dd:2a:17:fc:28:1b:57:c0:a7:23:8c:84:64:6d:
                    87:29:6b:88:55:70:14:ed:b2:17:9f:54:dc:3e:a9:
                    73:bd:74:f7:91:1d:b4:d9:0f:6a:c5:5b:a7:0b:40:
                    78:a1:73:11:f2:62:2e:cd:88:eb:74:54:fb:bf:c8:
                    b2:fb:70:e4:c6:bf:0e:de:4d:4a:46:f8:18:bd:5a:
                    af:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8A:32:1B:2A:F0:CC:20:B8:09:F3:22:95:A1:7B:D0:79:79:E4:32
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4f3c0a9b-a1cf-4573-b2a7-50eb10893b28/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4f3c0a9b-a1cf-4573-b2a7-50eb10893b28/46ed0ba5c1bff441980b5c3b48551e02885a3618.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.212.0/22
                IPv6:
                  2801:12:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:ea:f3:62:2c:48:fa:bc:c2:78:59:82:f1:a8:9b:ed:d5:21:
         65:27:de:79:d0:65:e7:8a:11:34:d4:7e:03:b1:53:ad:8b:41:
         53:b5:6d:7c:e5:44:eb:49:88:d2:59:77:6a:7a:98:77:cb:48:
         0d:85:55:c1:4d:bf:75:2f:69:14:23:5d:ce:58:2d:bb:d4:b1:
         c2:2d:e2:6d:ed:4f:65:a0:00:97:d9:be:33:a2:4e:42:1f:3e:
         6d:b1:6c:20:22:24:e7:a6:3c:a2:a6:19:58:c8:d9:0b:f8:61:
         e2:80:ff:8e:40:1c:fe:d4:f5:f8:1e:16:f5:f6:50:0b:1a:13:
         21:63:f8:81:25:99:74:b9:91:a3:82:a0:00:62:3a:0a:24:d6:
         c7:10:79:ba:5c:50:08:79:9a:a4:b2:c5:69:42:b4:09:bb:d1:
         47:fd:b3:8a:58:28:3b:01:b1:d3:29:85:c2:f6:27:f6:1f:62:
         ef:3a:3a:60:84:a2:6d:8b:02:3a:01:4b:a5:fa:75:c0:cf:b0:
         86:f7:43:87:7a:4a:dc:f6:6d:ec:73:05:0e:d3:af:58:7e:7e:
         f4:75:d0:67:83:4c:79:6b:d2:35:9c:5e:a2:8c:ac:36:ef:04:
         18:7f:f9:72:b2:31:92:41:89:e6:6e:44:1d:c8:9c:01:dd:6b:
         b0:e2:c2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----