Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
File:                     513674dcb37b91021affeddf80ef34c924423627.cer (raw, json)
Hash identifier:          F62UH3Z8iWk4wHrftrzzovyNwe89Zh5qeblWpcUZpsY=
Subject key identifier:   9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F19DF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:02 +0000
Certificate not after:    Mon 12 Aug 2024 18:02:17 +0000
Subordinate resources:    AS: 52392
                          IP: 190.99.120.0/21
                          IP: 2803:b100::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15834609 (0xf19df1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:02 2017 GMT
            Not After : Aug 12 18:02:17 2024 GMT
        Subject: CN=513674dcb37b91021affeddf80ef34c924423627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:23:74:f7:a3:90:71:be:aa:f5:26:f8:b7:c0:
                    f8:5c:7e:ed:20:5c:fb:72:e3:e2:7b:34:da:2c:3e:
                    e8:0d:2a:bc:fe:6e:fa:9f:42:40:a1:be:41:3a:60:
                    15:1b:42:0b:53:5e:50:8e:e0:55:5c:8b:6d:a0:d4:
                    0a:8e:ab:c9:94:7f:2b:44:e3:b0:e5:cf:78:c4:3b:
                    3c:e3:4d:a8:54:a8:bb:6a:e4:b8:03:cb:e3:f8:9b:
                    14:8e:d4:91:ac:4d:5c:53:1e:8a:39:85:2a:5b:3c:
                    61:bc:74:d1:f6:03:1f:f0:61:8e:b2:ee:09:0a:79:
                    fd:3b:50:4b:95:94:63:84:07:9c:dc:3d:71:68:3e:
                    9c:43:c8:ed:e3:b0:72:20:cb:ba:7b:ba:71:be:ed:
                    d8:0f:a0:d4:10:4e:73:db:b4:f1:39:36:10:9c:c8:
                    7f:2d:a1:32:b1:3b:c4:21:e9:db:36:0f:34:2b:d1:
                    9a:67:97:ed:2a:b0:9e:bc:df:f1:52:a9:89:e6:b1:
                    b7:4e:e1:a6:6b:16:f4:4a:c7:c0:c2:4c:02:b1:bf:
                    7d:e3:31:c1:2f:92:a3:04:33:22:db:c0:0f:cf:11:
                    f2:e7:c1:d9:6d:78:c3:70:64:a0:a6:2c:57:da:8d:
                    fb:cf:4f:a8:e8:64:cb:0d:7b:61:1c:6c:ff:29:d6:
                    fc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.120.0/21
                IPv6:
                  2803:b100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52392

    Signature Algorithm: sha256WithRSAEncryption
         78:68:4d:9e:a6:57:5c:44:9e:75:47:bd:b7:31:df:d8:bd:05:
         8c:ce:20:11:f0:e9:de:ab:03:d6:9e:bd:45:e2:34:81:56:f1:
         8d:d5:84:b4:8e:74:ea:07:26:fe:63:9f:1a:a4:ed:a2:ed:57:
         df:c6:06:a6:91:9c:ad:7f:1d:38:be:6b:42:62:75:a7:93:46:
         55:c4:29:28:de:09:1a:b9:0b:94:45:30:5f:ca:af:62:43:a7:
         b1:b6:50:63:7c:82:67:3c:fc:2f:35:b8:27:05:d2:bf:b0:26:
         0a:9c:3a:1c:69:c0:a9:04:73:68:c9:5a:f5:7d:cb:d1:28:c1:
         e8:c9:48:0a:e3:8b:48:71:e9:06:ad:44:8a:76:e0:25:be:9f:
         17:be:3a:c8:57:2a:35:44:6c:f7:c3:25:8c:67:ab:91:73:ff:
         62:72:5d:bf:23:c4:e1:05:fe:85:0d:02:99:15:c4:19:71:9a:
         e2:6e:e9:6f:c2:f6:8a:f2:5d:88:19:7e:0b:63:de:fb:4d:b1:
         4f:c3:04:50:df:81:51:98:d6:9e:00:e6:83:c2:3f:f0:71:de:
         96:f9:24:e9:03:38:0f:3f:a1:ab:2c:db:f8:8e:cf:66:da:24:
         f7:0b:44:8d:22:b6:0f:d4:68:70:5c:99:c9:ed:db:10:3d:78:
         5f:42:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----