Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer
File:                     63046ffca1186784d420944b2f52a6525f2a9b8d.cer (raw, json)
Hash identifier:          2twCurql4IkWWcDZ80kT6F8yYD1fc+4eUcO0cxaAtlc=
Subject key identifier:   8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D83A35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/63046ffca1186784d420944b2f52a6525f2a9b8d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:43 +0000
Certificate not after:    Fri 20 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 22541
                          AS: 52499
                          AS: 272913
                          IP: 190.14.64.0/18
                          IP: 200.75.160.0/20
                          IP: 2803:7680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14170677 (0xd83a35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:43 2017 GMT
            Not After : Sep 20 05:00:00 2024 GMT
        Subject: CN=63046ffca1186784d420944b2f52a6525f2a9b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:37:66:cc:d4:20:4b:29:92:e3:9a:b7:df:2d:
                    cc:a2:3f:1d:13:28:13:4c:25:1d:93:5e:1b:d5:b4:
                    af:8b:e4:75:6c:19:6a:cc:89:eb:56:f8:20:35:fc:
                    f4:ec:d1:c2:94:f0:dd:b8:c2:a7:cb:33:ec:b1:67:
                    d8:b7:8b:11:42:5b:b1:96:84:f7:7f:ab:90:07:06:
                    05:36:e4:53:62:ea:a7:5e:27:16:aa:17:1f:db:21:
                    5d:86:5f:3a:7a:4b:6a:ab:9c:6a:64:75:11:02:7a:
                    53:07:66:85:7b:a9:43:7f:19:bc:59:52:16:dd:61:
                    cf:a7:b1:bf:c4:2a:03:d7:b7:15:7a:3c:92:66:0c:
                    78:ff:e4:06:a2:21:74:71:c7:63:e0:11:9c:3f:5d:
                    63:94:45:34:71:1f:86:fb:c2:80:5f:39:3e:14:ba:
                    c4:f3:b8:be:67:7c:ad:24:c2:31:76:dc:c5:d8:3d:
                    06:be:8e:66:70:56:ab:75:fa:7f:bc:74:00:73:ec:
                    e6:56:03:e4:5a:58:d4:d2:79:86:58:3b:69:f0:a7:
                    be:d6:3c:4a:88:a1:f1:1b:a8:37:ca:2b:03:a1:d2:
                    5d:6c:a6:25:ad:f9:01:60:de:8a:6f:f4:b0:c4:51:
                    52:87:9f:dd:7d:1f:ed:d1:ca:db:43:84:ee:34:af:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/63046ffca1186784d420944b2f52a6525f2a9b8d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.64.0/18
                  200.75.160.0/20
                IPv6:
                  2803:7680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22541
                  52499
                  272913

    Signature Algorithm: sha256WithRSAEncryption
         15:47:da:42:5f:f6:86:b8:38:ec:57:a8:36:d3:3a:b5:ba:ea:
         48:41:4c:8a:60:9f:a4:7c:25:7b:e5:d9:8a:0d:37:f5:22:d0:
         1a:7d:b4:0c:ad:d0:96:ec:09:b6:9a:5d:b7:7f:10:5c:e5:7e:
         a5:0b:b3:9a:cc:a3:6c:2d:af:e0:98:46:3d:26:0a:10:e7:de:
         72:95:a3:a9:69:b4:85:60:31:d9:3e:a0:50:a8:0d:ba:5f:d7:
         7e:52:89:c6:98:1e:2c:02:f9:76:7e:39:83:25:83:15:25:64:
         06:e2:88:11:45:53:bf:e0:96:0a:a4:33:30:5d:d8:a2:be:4a:
         4f:20:a7:48:44:f4:28:a0:b1:7f:19:0d:ba:d0:f4:c6:47:a2:
         25:89:31:9a:88:9c:50:ca:fe:d0:4c:f3:d5:2c:7f:3c:9a:b1:
         e7:56:39:c8:35:01:05:58:55:38:b6:f2:fe:86:b4:b7:bb:6d:
         f0:47:b6:d7:bf:9a:2d:13:c8:16:66:59:e1:42:69:19:e4:0c:
         0d:1e:d3:19:cc:7b:56:51:db:71:f2:61:9b:aa:00:8e:84:cf:
         6e:8b:ee:43:64:51:84:52:47:41:a9:5d:bd:83:fd:16:64:3f:
         26:5c:bb:8f:71:1d:d7:08:48:e1:1f:32:b4:1b:b4:7e:1e:3f:
         ec:79:f6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----