Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b4bfc8a3aa9498c63a3c59321e08c73ea5e733d.cer
File:                     4b4bfc8a3aa9498c63a3c59321e08c73ea5e733d.cer (raw, json)
Hash identifier:          tg5d3jmi2+IkYauSZM7nUu6QgyhgF/aIfAMHhU79uFo=
Subject key identifier:   30:DB:C5:0B:FC:C4:AB:B3:71:FD:2F:FB:1D:28:6A:80:30:25:90:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F43023
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a289dd90-862f-4420-9e5b-108c6566703f/4b4bfc8a3aa9498c63a3c59321e08c73ea5e733d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a289dd90-862f-4420-9e5b-108c6566703f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:44 +0000
Certificate not after:    Sat 07 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 263187
                          IP: 179.51.252.0/22
                          IP: 2803:6480::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16003107 (0xf43023)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:44 2017 GMT
            Not After : Sep  7 05:00:00 2024 GMT
        Subject: CN=4b4bfc8a3aa9498c63a3c59321e08c73ea5e733d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b1:0c:f6:08:68:49:55:28:5f:a3:97:b4:1e:
                    34:4e:3a:e9:46:09:ff:e5:61:c4:db:61:77:a7:53:
                    c9:1e:ae:e8:72:60:03:d8:01:9a:24:da:7e:92:6c:
                    94:1b:86:4a:d9:52:66:2e:99:06:2d:75:17:f8:96:
                    25:2a:c3:5f:87:73:39:20:9a:c8:3a:0a:e4:1b:b8:
                    d1:cf:73:22:78:7a:14:ce:cd:9e:57:79:6b:ab:15:
                    ee:48:67:d7:c3:bf:55:20:f6:c7:50:fb:a0:6c:c0:
                    91:c6:1e:53:2f:69:8d:ba:17:dd:3f:90:4f:f9:ae:
                    59:05:a5:75:23:cb:7e:13:b3:31:24:a0:cd:96:32:
                    93:a4:2a:5d:97:3d:8e:22:26:68:d6:50:b1:f6:f5:
                    45:b6:c0:a9:48:53:42:76:82:06:05:60:90:03:7d:
                    b2:3e:3a:31:44:36:d6:c9:0e:2b:95:87:e3:82:02:
                    56:e5:97:d8:95:1f:d3:c1:bd:bb:60:1c:a6:55:a2:
                    ab:31:fa:17:63:06:1a:cb:2d:31:d1:33:8e:8d:53:
                    dc:92:a4:93:fd:59:4b:ab:5e:ed:f1:54:93:d4:a5:
                    7c:10:7c:d2:19:f9:df:68:42:e2:0c:0d:8f:1e:ce:
                    93:f2:65:33:00:60:c3:31:4e:1b:21:58:66:c0:b5:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DB:C5:0B:FC:C4:AB:B3:71:FD:2F:FB:1D:28:6A:80:30:25:90:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a289dd90-862f-4420-9e5b-108c6566703f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a289dd90-862f-4420-9e5b-108c6566703f/4b4bfc8a3aa9498c63a3c59321e08c73ea5e733d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.252.0/22
                IPv6:
                  2803:6480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263187

    Signature Algorithm: sha256WithRSAEncryption
         45:e4:f6:45:0b:89:4c:40:92:c1:3d:42:a0:f0:e4:1b:5c:ed:
         e9:a4:2f:62:c0:08:f3:ec:15:b1:09:8b:8c:ce:b1:1d:0a:c6:
         1a:d5:07:00:33:b9:99:aa:ce:9f:b1:2a:3b:0c:75:bd:2b:3a:
         36:bd:80:b9:af:24:c1:f8:70:9d:05:2c:f6:ba:42:29:a4:61:
         10:95:24:b4:ec:02:1c:7c:43:69:81:75:fe:e0:85:94:72:ff:
         df:f3:17:6a:71:35:b7:2d:69:a0:a5:37:41:e3:b4:ba:22:b4:
         cb:c6:f1:48:de:a5:7c:1c:b3:7c:72:fd:18:04:25:bc:ac:b8:
         c1:df:72:f7:c7:1d:a7:c8:14:8c:9f:ed:e3:b0:31:46:bc:ac:
         ed:56:10:32:d9:e8:4a:06:3a:59:6c:bd:99:1e:54:b6:84:c4:
         a5:ff:07:f5:45:e4:f0:53:1f:f5:95:3b:30:1b:82:2d:ca:e0:
         92:6d:cc:d4:0d:9d:36:4e:11:8d:ac:88:c6:59:50:cd:c9:e4:
         2a:73:e4:24:84:df:a0:0c:7d:0a:b1:5e:c8:dd:c2:05:e8:29:
         45:c6:70:9c:9b:f0:fb:6e:b3:81:3d:96:55:80:cb:e6:47:ca:
         41:5a:23:10:6f:6c:72:02:ed:5d:cd:28:cb:9d:13:b6:0c:0a:
         76:45:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----