Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.cer
File:                     5fc7f0db9a5164f90e759ae11ff173e2845cfc55.cer (raw, json)
Hash identifier:          NSOufMARUN7mkZz3hSRjZV4SAKkY+0d8rilUr06pGqk=
Subject key identifier:   D0:B6:9A:CB:9A:27:FA:1A:52:68:1F:A0:8F:10:78:EC:9F:3F:FF:AC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC3CE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 20 Sep 2018 12:43:05 +0000
Certificate not after:    Fri 08 Nov 2024 15:58:02 +0000
Subordinate resources:    AS: 266695
                          IP: 45.229.196.0/22
                          IP: 2803:f520::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16530663 (0xfc3ce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 20 12:43:05 2018 GMT
            Not After : Nov  8 15:58:02 2024 GMT
        Subject: CN=5fc7f0db9a5164f90e759ae11ff173e2845cfc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:fd:56:3c:6f:97:51:32:dd:45:60:02:1f:
                    05:90:dd:91:8c:18:8a:c8:04:e6:f3:3a:52:b2:63:
                    b6:34:d6:26:4b:67:ea:df:b8:0f:a0:59:0d:b0:d9:
                    56:36:40:9e:4a:cc:38:ac:71:89:bf:eb:bb:cf:ec:
                    e1:8d:54:81:76:54:03:80:bc:33:35:3c:1f:ab:3e:
                    9e:eb:5a:72:46:55:1e:e6:63:18:f2:4b:9c:ae:00:
                    c7:9a:ed:b8:e0:87:87:de:cd:fa:80:3a:17:07:0e:
                    3e:08:eb:7f:6e:5d:0f:da:1e:13:98:3e:ef:3c:a9:
                    99:ef:e4:fe:cb:62:e3:44:ba:d3:86:0f:3c:78:05:
                    a8:2d:80:52:a4:dc:28:7a:75:77:bd:80:e0:30:6c:
                    a8:4f:32:05:6f:b3:03:e0:6e:1b:43:f0:a7:e0:91:
                    28:6e:b7:e5:43:df:c9:eb:26:3e:80:27:85:48:45:
                    75:10:ed:1b:eb:e3:0e:b8:99:bb:32:9b:dc:56:7a:
                    a2:eb:58:ab:9a:8d:e0:e5:b2:9f:00:5c:ff:85:35:
                    fd:64:53:08:47:a6:5b:d7:5f:65:46:2d:62:58:e2:
                    4e:19:6b:a4:7e:5f:86:2e:0c:ab:a9:68:79:ae:4e:
                    55:44:bc:f8:83:c9:c5:6c:10:e0:ab:38:1e:00:ef:
                    93:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B6:9A:CB:9A:27:FA:1A:52:68:1F:A0:8F:10:78:EC:9F:3F:FF:AC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.196.0/22
                IPv6:
                  2803:f520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266695

    Signature Algorithm: sha256WithRSAEncryption
         36:29:ca:e7:fc:3d:e0:f7:c0:46:c5:3f:ce:ac:42:fa:26:b4:
         34:70:c0:a8:db:89:e0:64:49:9d:e0:6a:28:7c:6b:38:32:fb:
         6d:e0:0b:27:20:46:db:b6:82:30:7b:03:8d:bc:48:2a:e5:c2:
         62:ee:d7:7e:40:84:45:43:d0:0e:8a:38:5b:77:db:03:ad:8f:
         0f:ab:27:d9:7b:60:3f:a5:79:64:a2:03:c9:e9:61:9a:c9:0e:
         14:46:00:53:0d:b6:d8:57:5c:82:ee:09:5f:b3:6a:0f:52:81:
         15:65:ac:26:b9:c0:5d:73:fe:6e:cc:c4:8b:84:93:3f:07:79:
         a1:63:9f:b9:64:03:33:b4:a4:49:5e:ae:28:1a:9f:cd:81:d5:
         24:d8:27:0d:f9:ea:24:de:87:7b:32:e8:4c:5a:0a:65:e4:dd:
         50:eb:84:73:70:3c:99:f1:67:af:8d:50:fe:20:59:ce:c1:ca:
         b4:cf:80:a4:41:c3:d0:93:39:fc:91:ba:55:11:1e:d7:47:69:
         72:9e:cc:d8:e5:c6:cf:00:c0:fb:64:a9:c9:6b:da:c0:a5:c5:
         f2:85:db:af:31:e2:fa:7b:b6:f5:ef:04:8e:31:a0:b9:0c:84:
         2f:cd:4d:59:38:e5:98:23:32:af:ee:a9:4f:bf:91:8a:4f:3a:
         77:81:18:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----