Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/51f4bc9212cb82c076353939748ab5027f909298.cer
File:                     51f4bc9212cb82c076353939748ab5027f909298.cer (raw, json)
Hash identifier:          Xp5rNLR3OPZ6K2i4akCRK2WMAjXRzrNI0oUOJwX/bvQ=
Subject key identifier:   9C:11:5B:A7:0B:F1:D7:3F:92:77:32:7B:06:F3:A3:CB:90:44:70:9A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8CEAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/db5e1315-7410-4cd4-9ca1-9f255c7a1d2a/51f4bc9212cb82c076353939748ab5027f909298.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/db5e1315-7410-4cd4-9ca1-9f255c7a1d2a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:41 +0000
Certificate not after:    Thu 04 Jan 2024 20:23:10 +0000
Subordinate resources:    AS: 8053
                          IP: 181.225.32.0/19
                          IP: 190.94.192.0/18
                          IP: 2803:d480::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14208686 (0xd8ceae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:41 2017 GMT
            Not After : Jan  4 20:23:10 2024 GMT
        Subject: CN=51f4bc9212cb82c076353939748ab5027f909298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:b0:3d:35:64:90:91:b9:a3:29:48:03:35:
                    e8:96:19:4a:69:f8:cb:8a:1f:b0:32:51:f3:e2:91:
                    21:f8:46:4e:d7:4e:63:b6:06:5c:0c:43:48:3b:21:
                    04:e8:7a:07:16:75:55:1f:cb:da:16:e1:97:ad:2f:
                    62:30:68:d3:4d:bd:08:e9:a6:68:8a:81:ac:52:0e:
                    69:2e:85:92:4b:ae:bb:28:f6:50:78:13:46:1d:b5:
                    24:49:7b:81:30:8d:dc:61:14:c9:af:37:85:55:13:
                    20:61:37:f8:83:37:9b:7a:45:84:52:99:82:b3:f9:
                    dc:2f:b2:d7:b1:33:8b:4c:da:79:a7:7f:90:1d:57:
                    51:fd:7f:0d:48:0e:df:0d:3e:24:17:b5:7b:59:e4:
                    bf:6b:f6:26:1c:ba:ef:d3:f4:07:1a:4a:f5:de:d7:
                    13:59:49:38:46:fc:ae:7a:ae:f1:f5:73:c4:9a:84:
                    10:f0:e9:31:a3:64:a6:f2:23:21:fb:6c:4e:20:11:
                    3f:53:82:54:db:ca:c1:29:a1:19:02:84:a2:44:94:
                    4b:62:5e:c2:8d:bf:f1:f3:2e:02:9d:2f:56:9b:08:
                    5d:f1:11:d1:cf:67:18:83:db:6c:56:f7:e0:d7:fb:
                    07:c7:40:b3:d6:85:fa:74:51:67:0f:f0:00:55:c4:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:11:5B:A7:0B:F1:D7:3F:92:77:32:7B:06:F3:A3:CB:90:44:70:9A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/db5e1315-7410-4cd4-9ca1-9f255c7a1d2a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/db5e1315-7410-4cd4-9ca1-9f255c7a1d2a/51f4bc9212cb82c076353939748ab5027f909298.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.32.0/19
                  190.94.192.0/18
                IPv6:
                  2803:d480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8053

    Signature Algorithm: sha256WithRSAEncryption
         49:3d:7a:c4:20:53:6c:11:7c:57:f5:a5:9b:60:69:45:17:4a:
         4e:26:22:b6:71:a7:7c:1b:b7:01:c7:f8:28:5b:af:0b:9c:e6:
         dc:71:b6:dc:e9:fc:90:d4:eb:64:d1:8e:12:61:13:6c:08:fb:
         b7:14:b1:33:cc:7f:97:d6:c2:e0:05:cc:38:62:79:74:ee:ec:
         14:46:b0:07:be:fc:01:bf:b4:b0:0e:00:78:d9:05:00:74:1b:
         ac:fa:dd:e1:3f:f4:04:7c:09:e9:61:52:42:ad:6b:87:a2:51:
         8d:49:3d:04:2d:fb:fb:b2:d8:41:b5:2f:a7:cf:70:9f:24:61:
         7a:46:dc:ea:53:f9:5f:ff:cd:76:97:c6:40:8c:a1:a2:25:20:
         5b:54:d0:bf:46:7d:b7:50:44:9c:b0:aa:03:46:de:64:05:27:
         e3:cc:b1:73:33:b2:3d:5a:8f:ef:8b:ff:d5:cd:e7:58:b7:23:
         d0:07:a4:2f:6b:19:30:d5:e8:3e:f2:e3:40:a3:4e:aa:6f:9a:
         2b:73:78:f7:f2:69:8c:3e:5f:9d:bb:42:aa:1b:b0:5f:72:8e:
         fc:ae:c6:da:7c:95:87:7e:2d:e1:6d:3c:ae:79:15:97:d8:33:
         04:7f:e3:db:a2:fd:89:e1:8d:de:d9:5d:92:ba:45:1f:80:c4:
         13:d7:35:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----