Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.cer
File:                     5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.cer (raw, json)
Hash identifier:          HqYsiCOuDUgJgLg8DNlAMeeSDqVY6/ASLhqW7dfeWPE=
Subject key identifier:   FD:88:C1:AC:A5:DD:02:7B:5C:A0:72:12:26:6E:3D:3C:59:68:45:65
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9DF45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2017 20:31:21 +0000
Certificate not after:    Fri 18 Oct 2024 18:51:55 +0000
Subordinate resources:    AS: 266676
                          IP: 45.229.4.0/22
                          IP: 2803:3920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16375621 (0xf9df45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 18 20:31:21 2017 GMT
            Not After : Oct 18 18:51:55 2024 GMT
        Subject: CN=5959e68ec46f3f840aa00e6a2a7b00f49f253fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bf:fc:cf:e2:d6:c3:00:63:32:a5:c9:d6:4a:
                    35:4a:04:84:ae:34:fc:16:5f:3c:31:7c:b5:b5:7e:
                    66:d9:43:60:83:2a:03:2d:d3:27:9b:3d:f9:ca:48:
                    98:8c:52:a7:7a:54:85:d5:1a:8f:86:9d:64:24:4b:
                    bb:d7:68:98:d0:6e:fa:fb:55:2b:74:70:fe:ea:70:
                    18:1a:c2:3e:fe:85:98:b3:9d:ea:a0:f1:b6:32:ff:
                    a8:9e:a8:e4:88:1b:f7:5f:90:92:25:27:a1:38:9a:
                    f0:14:a5:d2:32:4e:34:5c:61:af:38:92:48:af:b0:
                    87:57:df:d5:eb:fc:4c:5e:6b:db:5c:f3:1f:c4:63:
                    cc:64:ae:a4:14:f3:ec:92:1e:f0:d0:65:83:e3:66:
                    df:f0:a9:8d:f1:c8:bc:a1:b5:8f:8a:ed:90:55:42:
                    25:05:94:d8:46:ec:45:8e:e2:98:42:04:a5:60:fb:
                    00:88:8e:d2:a2:5a:33:4f:1f:04:cb:d9:bb:f2:59:
                    0a:67:4f:14:59:77:a0:2e:f0:c2:19:20:c0:f6:89:
                    ef:4a:4c:66:be:b5:d7:ba:3f:cb:2c:fb:20:a6:96:
                    3e:b1:b7:bc:16:ea:e5:ac:66:81:fe:38:2d:3e:00:
                    60:cb:99:3f:9d:c3:35:3e:fe:86:18:c1:ef:76:48:
                    87:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:88:C1:AC:A5:DD:02:7B:5C:A0:72:12:26:6E:3D:3C:59:68:45:65
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.4.0/22
                IPv6:
                  2803:3920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266676

    Signature Algorithm: sha256WithRSAEncryption
         7b:84:d2:e6:c7:d8:15:c5:68:b0:70:1a:87:a5:86:4c:cf:e9:
         68:86:5d:48:1d:fc:9d:27:5d:14:e0:50:93:52:f0:49:63:bd:
         4e:b5:57:71:5c:03:67:a7:a3:65:95:48:2b:0f:eb:39:0b:f0:
         fe:9a:57:43:0d:f9:76:1a:20:b2:a2:3a:c6:dd:f6:76:19:d8:
         36:25:64:a0:48:40:f6:d2:1f:f5:44:06:4a:a2:a9:9f:bd:3e:
         b5:49:1b:1a:ff:7b:20:f0:72:fe:4d:51:f8:08:38:e9:8e:2e:
         db:e4:ad:6d:91:32:8c:ba:7f:f8:79:cb:90:fc:fa:fe:df:78:
         25:46:1a:7c:44:de:22:ab:ac:f6:46:87:b6:0d:90:fd:c1:9a:
         66:2e:2a:1e:d1:ae:bf:56:c2:a5:d4:57:40:5b:01:96:ae:65:
         30:e2:6e:e4:e3:dd:df:ae:e9:d8:8a:d3:98:d1:7c:a8:c1:8c:
         1a:7d:b7:f7:47:00:a8:d3:49:4b:99:15:65:f0:c0:8b:4f:26:
         03:aa:a1:90:46:60:2b:a4:eb:aa:52:f7:5a:3c:89:07:3f:6c:
         bd:18:12:58:37:bf:81:19:98:be:85:45:94:15:09:2e:ec:c6:
         66:13:85:72:b3:72:f4:b1:96:2e:9b:a8:bd:6c:62:65:42:0f:
         d5:0d:e0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----