Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e60935bdbaf84edd159cb54bb8fad0298ca5126.cer
File:                     5e60935bdbaf84edd159cb54bb8fad0298ca5126.cer (raw, json)
Hash identifier:          rFnTPIg9QvoET4kXq1Oi0rI3jnQIk+LzzY3UuQOjRiA=
Subject key identifier:   60:76:86:83:41:24:9B:61:C5:B5:42:87:21:D1:76:DF:30:24:90:E8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E65A04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/5e60935bdbaf84edd159cb54bb8fad0298ca5126.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:18 +0000
Certificate not after:    Fri 12 Jul 2024 16:22:05 +0000
Subordinate resources:    AS: 264768
                          IP: 168.196.140.0/22
                          IP: 2803:d0c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15096324 (0xe65a04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:18 2017 GMT
            Not After : Jul 12 16:22:05 2024 GMT
        Subject: CN=5e60935bdbaf84edd159cb54bb8fad0298ca5126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:b1:40:18:d2:2d:21:be:8c:15:4b:e4:df:
                    f0:6d:05:5c:d4:c5:3a:13:a3:f3:3d:c8:66:43:09:
                    98:41:89:91:3e:b5:d6:04:3c:2f:18:fd:e5:c5:ed:
                    15:41:bc:f4:05:36:e1:4d:34:b9:c2:ff:91:36:a1:
                    a1:c1:d4:25:3f:3a:5c:34:5d:55:40:cb:1c:05:da:
                    53:6d:f7:e2:cc:7f:70:46:e4:43:5a:9f:c5:f8:1a:
                    52:32:9c:a3:7a:90:bb:96:81:7e:df:46:5b:2f:fa:
                    d6:5e:9b:a0:54:e9:7c:1a:db:0c:e9:a5:b5:c7:3f:
                    79:3d:ad:01:1c:84:80:5b:40:d6:b1:18:ec:7b:ca:
                    ef:db:7c:6d:aa:c9:83:ec:75:6a:9a:d9:88:8b:57:
                    90:b6:a7:96:9f:6e:dc:8f:4a:00:93:33:e5:54:5d:
                    67:fc:3b:39:16:d5:fd:26:34:b3:f8:ab:45:e3:e1:
                    1d:dc:fe:8a:e4:e1:68:17:81:5f:96:07:3c:e5:c8:
                    6a:72:e7:48:35:e2:55:65:d7:57:45:1a:c9:76:83:
                    4d:70:e1:f2:13:0e:89:ca:56:c0:0f:3f:cf:fa:ba:
                    f1:a7:63:82:d7:92:96:70:3c:6f:7f:d0:74:c2:0d:
                    4c:d8:4a:9e:ad:d9:74:92:c6:b5:7b:4a:e4:3f:fc:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:76:86:83:41:24:9B:61:C5:B5:42:87:21:D1:76:DF:30:24:90:E8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/5e60935bdbaf84edd159cb54bb8fad0298ca5126.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.140.0/22
                IPv6:
                  2803:d0c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264768

    Signature Algorithm: sha256WithRSAEncryption
         18:12:6e:8b:22:56:83:9e:27:f3:d1:41:ca:ea:13:91:6e:0b:
         2d:54:de:6a:b9:48:ab:b4:84:d6:56:f3:82:5e:40:b1:12:ab:
         9f:da:fe:c9:60:c9:d1:fe:ab:a1:76:31:69:6b:bc:b5:61:0d:
         7b:7e:f6:8f:ee:1d:04:d3:f9:bd:c6:f6:b3:0e:4a:b3:d9:28:
         15:61:e8:d5:07:d5:97:23:b8:d8:70:4d:94:06:c2:81:24:b9:
         6c:55:8b:4f:5c:2b:a1:72:c1:7e:7f:88:fc:10:f4:d3:e7:fa:
         11:95:dc:c3:41:2b:72:23:b4:98:a1:e8:02:18:83:9b:d5:16:
         a1:ba:b2:94:53:73:e8:b2:cf:87:bf:6f:e5:bc:bf:62:82:2b:
         02:39:32:ae:2d:e9:99:b3:df:02:11:43:1f:78:59:b5:1a:e3:
         63:df:ae:30:e0:94:c4:32:ce:70:2c:02:7b:d1:a4:d4:a1:e5:
         43:9c:ff:fd:58:76:b9:6f:6e:7b:fe:76:e0:48:4c:7b:d7:2f:
         32:dc:d0:51:d5:00:9c:53:28:15:75:60:a4:37:97:f8:2d:cd:
         91:ff:aa:cd:e7:23:3a:42:ac:c4:7f:ec:42:32:39:d3:d3:0b:
         b9:c0:cc:13:d8:6b:71:93:c1:e7:a0:8d:ce:84:99:64:57:2c:
         62:75:c1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----