Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
File:                     610a073086b39384e909786d0a194418acd0bd49.cer (raw, json)
Hash identifier:          PwGCrnYhECz4Pe4lLN6eUg3GnVfPGgaj3KF2Bb4Ca2o=
Subject key identifier:   D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBDDDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/610a073086b39384e909786d0a194418acd0bd49.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:13 +0000
Certificate not after:    Sun 30 Jun 2024 17:17:01 +0000
Subordinate resources:    AS: 271911
                          IP: 45.70.56.0/22
                          IP: 2803:a820::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15457758 (0xebddde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:13 2017 GMT
            Not After : Jun 30 17:17:01 2024 GMT
        Subject: CN=610a073086b39384e909786d0a194418acd0bd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:72:67:68:e5:24:fd:ae:fe:e3:1b:fa:c1:
                    16:40:04:b9:24:66:c2:dd:66:62:8d:70:dd:13:0a:
                    ba:31:ca:54:aa:e0:e7:ba:3c:b1:cb:0f:ca:e1:80:
                    2b:ec:d0:9d:ac:bc:fe:b1:29:d3:c4:56:04:a9:4a:
                    53:82:29:ea:56:ee:e7:5d:9a:9d:d3:6b:9f:aa:6c:
                    17:15:d8:e7:60:94:fb:0c:d4:f6:9a:8a:6b:a8:2b:
                    66:40:1e:3f:a9:74:d2:b2:19:fe:9b:8e:74:d3:a9:
                    8b:1f:65:0e:85:1c:10:88:c9:5b:77:8b:ac:28:b7:
                    1e:9f:18:4d:a1:d9:32:76:c2:3b:a5:e0:09:f3:65:
                    05:72:b1:b5:97:48:9f:10:16:c9:1e:63:a2:47:96:
                    b5:bb:b6:9a:7c:47:a4:f8:4e:c0:e6:8f:56:9f:69:
                    9a:3d:e0:76:08:91:ab:17:a6:63:fe:42:ec:00:62:
                    ee:a3:d8:34:ef:40:0c:8a:cb:d3:0d:1a:60:68:c6:
                    b0:fa:e1:cd:61:97:db:1c:d8:c6:03:c6:43:ac:1d:
                    e0:cf:0c:5f:46:a1:60:5f:69:32:5f:bb:21:aa:d7:
                    96:52:87:ee:27:02:f8:33:4f:b6:13:ca:f5:4e:59:
                    d3:79:1f:ab:90:d9:47:9a:7c:2f:84:78:fe:c7:d6:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/610a073086b39384e909786d0a194418acd0bd49.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.56.0/22
                IPv6:
                  2803:a820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271911

    Signature Algorithm: sha256WithRSAEncryption
         92:3d:93:0c:d8:82:fd:dc:f5:1a:c6:83:05:43:5d:c5:53:bf:
         0c:8d:52:69:5c:38:52:90:68:16:b7:a5:49:5d:43:bb:00:6a:
         8c:9e:f9:94:95:5a:32:fd:bd:e6:76:a4:3e:6f:d0:70:1f:83:
         6d:94:51:e1:12:a2:4d:1a:7e:3b:4d:d3:67:29:cd:7d:a6:ca:
         22:53:07:4a:01:b7:7b:dc:a4:f7:51:fb:e6:76:90:78:42:ea:
         f4:96:73:d5:b9:b5:d0:7c:51:e6:a1:ce:9a:64:b5:4c:33:e4:
         2e:9c:15:db:5d:b9:d3:04:d4:be:67:22:01:55:08:38:b1:c4:
         02:d7:d3:76:68:83:a1:50:a7:56:9d:ed:14:29:68:36:77:72:
         ff:e7:40:d5:4f:e1:5e:60:9c:df:c2:3b:2f:1e:82:ec:20:c1:
         53:04:63:82:b2:d2:06:51:89:56:30:a9:6c:6c:e0:bc:c3:48:
         ff:62:c4:64:56:de:b6:0e:d4:e7:e6:0f:55:ab:c8:f3:2c:e7:
         c0:d3:34:1c:8b:8e:78:7a:0a:0c:5d:5e:a9:1b:d0:6b:5d:3c:
         02:44:5c:d7:6f:0e:cb:bd:25:60:91:51:24:7b:06:99:29:4a:
         bf:9e:94:a0:69:8f:fe:8e:fd:36:91:84:0e:78:23:9d:4e:9c:
         64:d7:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----