Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
File:                     490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer (raw, json)
Hash identifier:          f+hu1MAoWh012QT9rFto1nw2B2rKOgce4mHhTna9mn4=
Subject key identifier:   48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E79BD0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:26 +0000
Certificate not after:    Wed 29 May 2024 06:00:00 +0000
Subordinate resources:    AS: 278
                          IP: 132.247.0.0 -- 132.248.255.255
                          IP: 192.100.199.0 -- 192.100.200.255
                          IP: 2001:1218::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15178704 (0xe79bd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:26 2017 GMT
            Not After : May 29 06:00:00 2024 GMT
        Subject: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:e7:da:a4:fc:41:99:de:99:8d:43:9c:27:
                    82:f8:29:68:8c:68:33:f4:49:f6:1f:e8:5c:a1:85:
                    49:6e:8b:e4:94:01:bc:55:8b:5c:d5:36:0e:64:92:
                    4b:f9:d9:fa:e6:a2:c0:07:a9:f9:ed:64:5b:46:99:
                    f7:5c:c3:17:da:58:01:b5:e4:68:aa:ef:89:c6:cb:
                    09:04:03:24:0a:d4:6e:e4:46:bf:b6:28:71:6b:a4:
                    bb:54:cd:20:9f:c5:2c:64:c5:54:79:3e:1a:ae:e6:
                    72:fc:ca:95:a6:81:c5:75:1c:47:88:17:df:55:f1:
                    b4:a3:59:1b:d6:99:0c:37:85:f4:fd:f3:ec:4d:45:
                    6e:14:25:63:d7:6e:f0:0e:43:dd:d9:1c:29:92:b7:
                    46:cf:13:8c:cd:35:9c:22:a9:e3:a3:e5:eb:b9:ee:
                    e2:88:16:b6:f8:c3:98:13:40:c1:66:cc:58:cc:6c:
                    03:72:e6:2d:ce:e6:c5:f8:29:4f:70:ed:cd:32:1d:
                    d1:22:8c:50:f1:76:9b:b6:c2:df:ee:a8:c0:7e:53:
                    66:47:79:12:21:99:86:47:35:36:4f:79:3a:32:92:
                    6d:6b:4f:e4:42:72:c5:bf:b2:d0:0a:7f:e7:c4:5d:
                    f2:90:a2:a4:7f:4d:eb:dc:07:ec:be:d9:ab:73:f3:
                    db:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.0.0-132.248.255.255
                  192.100.199.0-192.100.200.255
                IPv6:
                  2001:1218::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  278

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:9f:eb:00:dc:43:3f:af:61:24:14:b6:01:a8:db:c3:7f:
         49:1b:28:25:3a:e6:1c:f0:1b:f7:b0:e8:ab:ae:f1:08:fc:28:
         2b:76:4b:67:77:15:c3:ef:f7:4a:8f:41:82:53:ad:17:ee:a9:
         69:ce:a8:29:1a:0b:08:a7:c7:12:89:24:b4:d9:dd:2f:df:f8:
         7e:f1:fe:04:f3:09:04:fb:15:82:af:f9:d9:82:43:26:e5:62:
         25:d2:49:ea:35:b7:ca:53:96:bf:9f:e6:64:20:43:52:6a:05:
         fa:54:7a:c4:0b:e4:2f:8f:82:c7:b1:72:3b:ff:78:6d:62:63:
         e1:86:f4:43:58:86:79:c7:6f:92:05:17:b2:20:75:71:1d:8e:
         95:0e:23:32:aa:9b:cf:8e:35:48:9c:57:4f:9e:57:69:d0:74:
         2a:ab:f2:f8:ba:b9:25:bb:a4:97:6e:4f:97:91:aa:28:ad:dc:
         4d:06:88:08:4d:b4:2d:61:ec:22:d2:a1:e8:91:98:15:80:fb:
         06:75:45:70:36:0c:f6:67:84:0f:60:49:e2:a1:b2:02:77:3c:
         6f:f4:72:8a:71:6d:31:33:a5:9e:20:d1:7a:04:d5:be:a3:8a:
         22:74:73:7b:0e:f4:32:8b:aa:df:7c:b6:1f:f4:24:c9:3a:9d:
         0c:e0:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----