Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cdbaa401653d959436f4ef6f9bc0e6829bf617d.cer
File:                     5cdbaa401653d959436f4ef6f9bc0e6829bf617d.cer (raw, json)
Hash identifier:          hm1WAFRqDfcff+UX/K0+OseaI6+4ZpV0idZYHS5FSTE=
Subject key identifier:   48:76:07:6F:39:63:5B:C3:A2:0B:C1:A7:19:90:13:1F:50:97:F0:10
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D9096C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/5cdbaa401653d959436f4ef6f9bc0e6829bf617d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:22 +0000
Certificate not after:    Sun 07 Jan 2024 14:27:12 +0000
Subordinate resources:    AS: 265665
                          IP: 45.4.84.0/22
                          IP: 2803:aec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14223724 (0xd9096c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:22 2017 GMT
            Not After : Jan  7 14:27:12 2024 GMT
        Subject: CN=5cdbaa401653d959436f4ef6f9bc0e6829bf617d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:48:8f:db:b9:5d:45:b4:6b:72:29:c1:6a:
                    e3:93:99:cb:09:36:45:49:2d:c8:df:2b:a4:05:7f:
                    06:9c:f9:20:b5:11:98:ff:e2:29:cf:8a:67:06:be:
                    c2:ae:25:51:25:77:dc:3c:df:e9:8a:2c:11:03:1a:
                    d9:59:50:48:8c:f4:75:9f:06:47:7d:fa:28:ae:5a:
                    ab:89:d5:e9:9a:21:d0:fb:c1:e0:15:0a:97:da:3c:
                    40:3d:43:73:ee:ad:cc:a3:c9:2b:36:ef:41:33:5b:
                    d6:37:59:d1:0f:ac:a2:18:96:f7:76:9d:d7:63:36:
                    a1:36:5e:2e:2b:95:2f:dd:87:51:fd:fd:e6:0e:c8:
                    1b:8b:ce:b8:46:c5:a1:1c:87:a0:43:ae:38:6d:f7:
                    fe:6e:92:ef:81:36:8c:7b:ab:25:f3:2b:f8:37:84:
                    8c:02:ae:07:8b:7a:2a:c7:44:33:74:7f:20:e7:ea:
                    79:50:82:92:ae:e8:da:0b:80:a1:56:b6:94:2b:c2:
                    46:5b:37:b2:31:e0:16:c1:5a:2e:13:82:fc:49:de:
                    33:e7:d5:04:ff:d6:07:3f:0b:b1:7d:51:a0:0c:36:
                    48:3a:78:14:df:3c:43:d8:42:44:b0:f3:f3:c3:5b:
                    50:4e:1e:3d:85:1b:3c:a7:12:c5:eb:94:fd:7f:84:
                    3f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:76:07:6F:39:63:5B:C3:A2:0B:C1:A7:19:90:13:1F:50:97:F0:10
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/5cdbaa401653d959436f4ef6f9bc0e6829bf617d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.84.0/22
                IPv6:
                  2803:aec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265665

    Signature Algorithm: sha256WithRSAEncryption
         1a:66:85:83:2e:41:c6:cd:21:9f:0b:0e:53:7d:1b:94:fd:ff:
         12:fc:c1:ba:0c:15:d9:b3:8f:a8:2d:7c:93:08:8a:b9:83:39:
         b4:4e:06:fc:48:29:a8:76:6b:a9:d7:d8:57:aa:57:7c:c9:fc:
         6c:6b:10:43:6a:ad:0d:1e:f3:2a:1a:53:a3:c6:50:27:8c:92:
         c5:da:ea:c4:8c:bd:68:13:82:56:f6:00:e6:27:1c:de:e1:d2:
         c9:6e:f7:10:73:59:85:76:c8:4d:90:c3:3f:bd:a8:85:c4:59:
         17:7a:a3:fd:1a:38:bf:0c:7f:a3:af:e5:5d:38:b1:e6:f1:c9:
         e8:4b:7b:dc:88:ea:5c:4d:df:23:f2:06:db:f9:f4:45:c6:b3:
         c5:80:71:33:17:16:dc:98:92:a3:f7:08:68:57:ec:ab:a8:69:
         58:38:40:b5:80:fb:e4:82:48:8e:7d:57:af:e6:7d:f2:bb:5d:
         d4:0c:4b:28:06:67:78:ef:09:16:fe:12:3a:21:c8:ad:79:23:
         0c:5d:53:36:a1:b8:12:98:33:b2:0c:4e:cb:86:41:8c:d0:a8:
         f2:65:8c:d9:f2:bc:f6:e9:8b:49:b8:39:ff:94:e1:67:a5:ca:
         81:b1:33:09:ea:be:6b:cf:ee:f2:95:d6:d7:5f:06:cd:bc:bb:
         93:e7:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----