Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55040cfb32568a53c16b8ccd785750a784554ebd.cer
File:                     55040cfb32568a53c16b8ccd785750a784554ebd.cer (raw, json)
Hash identifier:          JY8dP2b4+VYrgPqbqI4s2tgSRkOfPU4wytuhOGPjsfY=
Subject key identifier:   54:18:B3:A7:9C:04:4B:FE:8B:36:CB:6B:9B:E5:A1:22:91:D5:A9:C8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCDDC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a208d5b9-380b-4da1-a45a-01eba51ee139/55040cfb32568a53c16b8ccd785750a784554ebd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a208d5b9-380b-4da1-a45a-01eba51ee139/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:36 +0000
Certificate not after:    Fri 23 Feb 2024 17:34:34 +0000
Subordinate resources:    AS: 263757
                          IP: 138.117.48.0/22
                          IP: 2803:4840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14474691 (0xdcddc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:36 2017 GMT
            Not After : Feb 23 17:34:34 2024 GMT
        Subject: CN=55040cfb32568a53c16b8ccd785750a784554ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:26:37:f4:6e:04:f1:18:61:d8:8a:47:70:d8:
                    c0:46:c8:a1:da:1f:4c:83:33:d5:44:2a:6d:74:78:
                    73:96:78:d8:4d:0a:a7:a9:6b:bc:3b:c8:20:61:8c:
                    1d:61:06:41:f6:d1:1a:b1:f1:06:4f:2b:32:c5:54:
                    fa:76:f4:2b:f8:ad:20:b7:9c:76:b1:54:d5:fc:34:
                    f4:7b:b8:7b:1b:8f:96:55:02:0b:87:16:0e:30:b9:
                    fd:87:af:e1:51:8d:d7:0a:ca:bb:3d:07:c2:66:66:
                    e5:c5:1d:30:8f:c8:df:29:c8:6f:f8:44:c6:31:ec:
                    93:c8:38:16:e1:64:e1:46:99:a2:8c:34:37:b4:39:
                    49:7a:23:ac:f5:64:17:98:40:62:c3:45:c7:ca:68:
                    5b:ac:c3:a0:15:8f:46:6d:e3:dc:ca:6b:4f:0d:5f:
                    bc:54:ea:7b:13:9b:07:51:dc:4d:f0:98:8b:7d:2e:
                    e4:a3:59:4b:eb:f2:66:19:fd:56:3e:59:f5:12:89:
                    e3:22:85:1e:c3:2d:64:f7:20:af:45:2b:06:68:b6:
                    7f:3d:b8:a8:8a:20:d8:04:72:39:ea:e4:e1:40:e0:
                    73:5a:60:f3:9c:e8:5f:d4:4d:cb:95:be:12:ab:f9:
                    ee:ca:bb:71:7b:a3:10:21:f0:d8:6a:3d:42:c2:5b:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:18:B3:A7:9C:04:4B:FE:8B:36:CB:6B:9B:E5:A1:22:91:D5:A9:C8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a208d5b9-380b-4da1-a45a-01eba51ee139/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a208d5b9-380b-4da1-a45a-01eba51ee139/55040cfb32568a53c16b8ccd785750a784554ebd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.48.0/22
                IPv6:
                  2803:4840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263757

    Signature Algorithm: sha256WithRSAEncryption
         88:4f:07:e0:90:52:d0:6d:48:3a:a9:fb:d8:9d:f8:96:40:7c:
         bc:5e:34:b3:a2:77:78:77:56:fb:45:2e:e2:78:2f:03:97:14:
         91:58:0f:28:4f:c3:d0:cf:7e:ed:9d:bc:1b:50:3b:4a:e3:9e:
         b8:4b:a6:e7:31:d5:22:4c:1a:f7:29:6f:36:7a:d7:86:6d:77:
         7c:d0:91:63:de:f5:38:96:77:ca:89:c8:c2:be:e0:40:c8:60:
         92:49:f8:cb:bc:6f:d1:b8:a1:e7:12:49:d6:30:25:87:58:0d:
         6f:3e:2b:7c:93:63:14:6c:21:05:b5:ec:8b:0a:f0:50:96:cf:
         16:81:ca:15:1b:d7:ca:d6:17:a5:01:ce:4e:c1:bb:6e:95:30:
         df:f6:d4:0e:d8:e6:5d:11:7b:fc:50:28:7e:69:9c:86:d9:a7:
         0d:16:d5:a6:fa:87:c9:8d:c1:7b:0a:1b:34:c5:c9:e5:4d:58:
         53:36:b1:7b:1e:8d:c9:d2:6f:3b:ce:97:f9:b4:2b:13:ce:7e:
         7e:2b:df:ce:c9:08:ff:01:79:b8:5d:2d:50:55:ca:13:f8:70:
         0a:7b:54:90:ed:19:45:7c:9e:ec:9f:be:00:a1:92:0c:09:c7:
         1e:88:9c:97:dd:d2:99:54:44:c1:a2:02:bd:7d:de:44:29:4c:
         98:b1:f3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----