Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer
File:                     5be393491eb2c03f14214a706c7be3bb76a02485.cer (raw, json)
Hash identifier:          wF5+eXtFFjCrED/zbvOum/CfqmbLDZSaTJxUe62EyrI=
Subject key identifier:   81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DEC855
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/5be393491eb2c03f14214a706c7be3bb76a02485.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Jun 2018 20:05:15 +0000
Certificate not after:    Sat 16 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 266802
                          IP: 45.236.168.0/22
                          IP: 2803:a8a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14600277 (0xdec855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 20:05:15 2018 GMT
            Not After : Mar 16 06:00:00 2024 GMT
        Subject: CN=5be393491eb2c03f14214a706c7be3bb76a02485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:b5:2e:04:c4:43:21:df:e5:0d:b7:05:56:
                    b0:8d:a4:89:65:e5:2f:f8:74:d5:5c:f2:3b:c0:9b:
                    37:15:0c:92:85:a1:ff:3b:b9:95:ce:43:04:e5:fc:
                    07:f5:0e:9e:d5:e8:06:64:36:16:08:88:0b:28:43:
                    84:c2:12:13:4f:94:56:56:09:d1:97:bc:14:6c:e1:
                    cc:0e:06:d6:9e:ca:2f:75:df:c4:43:da:e9:99:99:
                    5e:af:d2:98:50:14:76:35:74:c1:e2:6d:1b:80:1e:
                    78:d8:1d:5a:6d:0a:39:9e:5f:c2:a3:f9:0b:5e:c4:
                    94:69:15:ec:0b:8d:bf:6d:bb:2f:e2:4d:f8:ba:5f:
                    a0:55:4d:05:45:78:14:68:f4:bf:90:ee:a4:16:ba:
                    f4:c5:f2:e3:3a:4f:fd:15:df:57:20:e4:84:a0:d6:
                    ce:c4:2f:bb:62:1d:db:83:77:13:27:a3:83:d3:ae:
                    74:d6:3b:83:c3:91:2e:56:7e:fa:fc:f9:c0:76:d9:
                    c5:97:cc:3d:dd:89:eb:9a:90:93:e0:64:af:14:dd:
                    e6:41:15:eb:77:32:35:b9:15:16:21:4e:5d:e9:bb:
                    fb:6a:53:d2:d5:4a:de:81:76:41:cd:cd:94:e6:f2:
                    e9:ae:a1:2c:9f:68:2a:00:21:c6:ae:28:e8:fc:92:
                    21:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/5be393491eb2c03f14214a706c7be3bb76a02485.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.168.0/22
                IPv6:
                  2803:a8a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266802

    Signature Algorithm: sha256WithRSAEncryption
         bc:79:49:c8:08:b7:d7:74:55:2d:0c:a8:cc:76:56:c9:34:a4:
         75:ad:a2:83:a9:69:dd:9f:2f:96:74:7a:50:e0:9f:84:7a:e4:
         f0:bf:30:d5:ab:89:05:a5:d2:3d:4c:cf:0c:6a:8e:87:9e:2d:
         0d:05:00:85:d7:89:20:56:b5:4b:ee:70:44:29:3b:e0:1f:7e:
         9c:ea:73:30:e2:94:ca:ca:3c:8d:89:ad:3e:47:10:21:2f:b4:
         2b:dc:e8:f3:88:57:49:af:34:2c:f8:6a:38:ff:2f:bb:e6:de:
         2f:d2:13:4d:89:b0:8d:a9:cd:df:d8:fd:4d:b3:b6:9b:52:82:
         84:ed:64:f7:c2:1b:c1:d1:6b:66:09:8d:99:9c:9f:74:d8:2f:
         5a:34:e8:d3:4a:69:17:36:d1:34:4a:9e:78:d8:d5:2f:09:2b:
         e5:b8:ec:37:6d:ea:5f:a8:15:14:85:5b:19:f1:80:49:64:72:
         f3:d0:ad:5f:cc:4c:5d:1f:4b:3d:a7:8b:83:44:e3:08:53:7a:
         34:6f:f1:f0:7a:f3:8b:29:67:94:cf:df:72:48:81:4a:4a:72:
         2e:a7:a1:c2:b4:7f:15:f7:cd:fa:29:59:4e:84:b7:48:fe:a7:
         dd:f1:6d:f5:2f:aa:3b:fc:16:19:5d:2d:1d:e8:ce:41:0a:20:
         f9:3b:94:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----