Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/677e61affc2207b19cf569eaf59f1aa53af06efd.cer
File:                     677e61affc2207b19cf569eaf59f1aa53af06efd.cer (raw, json)
Hash identifier:          +/I4BZuo2odFDa7AJHGg8/LRxBvlFDbI/zB17UJ+28w=
Subject key identifier:   E2:B5:34:5A:B6:AB:EE:BA:07:CB:14:AB:54:F2:AD:0D:E3:E5:97:CB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E143A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/677e61affc2207b19cf569eaf59f1aa53af06efd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Feb 2019 18:20:04 +0000
Certificate not after:    Thu 11 Apr 2024 19:52:41 +0000
Subordinate resources:    IP: 207.248.114.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14762913 (0xe143a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 18 18:20:04 2019 GMT
            Not After : Apr 11 19:52:41 2024 GMT
        Subject: CN=677e61affc2207b19cf569eaf59f1aa53af06efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:b9:ee:5c:92:a5:03:79:21:d3:49:df:20:
                    2e:ee:a0:09:ea:9c:20:c4:46:3b:0a:c8:53:48:42:
                    f2:1f:50:03:8a:50:e8:7d:bd:5c:61:82:a9:6f:0d:
                    d7:c4:0e:00:eb:e3:66:e0:e0:a5:8e:7d:8a:4a:57:
                    9e:63:c6:58:36:b2:88:12:06:43:9e:40:dc:01:04:
                    61:79:cd:ba:e1:e0:bd:b6:32:e8:3e:3c:b9:5b:2b:
                    9a:05:0a:63:d7:63:8c:96:2c:d7:81:56:22:4c:d9:
                    e9:a7:ae:09:4e:3c:d9:3d:a9:0c:23:ad:19:ed:78:
                    18:06:34:83:83:ca:30:7d:d4:ea:ef:bb:5e:e0:ee:
                    2a:c2:38:62:f6:d1:a8:66:c4:46:df:4b:fb:ed:93:
                    2e:24:da:e1:f4:c0:31:b1:fd:17:c6:64:eb:fb:3a:
                    5c:3f:10:2d:11:43:83:22:4c:6a:07:10:0f:c6:07:
                    80:a7:da:54:0c:db:28:f0:61:6b:6d:1f:75:bc:2b:
                    87:60:46:5a:50:13:1a:d7:74:68:e7:e2:43:b1:4e:
                    db:38:86:a7:95:2b:0d:ea:d4:a3:38:04:b4:80:d5:
                    9a:6c:3e:91:59:74:f2:a6:01:d8:3b:f1:3f:05:0a:
                    b3:96:39:26:1f:32:7d:b9:f6:7c:ba:fa:e5:6c:3b:
                    5a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B5:34:5A:B6:AB:EE:BA:07:CB:14:AB:54:F2:AD:0D:E3:E5:97:CB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/677e61affc2207b19cf569eaf59f1aa53af06efd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:23:7d:cb:ea:51:5d:85:81:66:52:0a:ae:4c:cb:05:e7:e1:
         a1:20:c1:2d:5a:64:21:8a:e1:97:80:24:0a:9c:f9:97:3c:be:
         c8:b9:74:91:da:bf:77:f4:f6:b1:68:5d:26:22:cd:0c:d4:7d:
         70:cb:0d:19:0f:d3:eb:58:37:4a:c7:eb:81:b5:63:d7:3b:c9:
         53:23:bd:6e:df:cd:1e:2b:44:47:57:05:db:59:4d:65:c7:7c:
         9e:cc:30:8a:7d:e9:aa:75:49:6f:7b:77:e5:87:19:38:c5:ec:
         49:c6:59:7d:69:1a:1d:9e:e9:a0:9f:b7:46:2c:df:71:8d:7f:
         fa:c3:f1:c3:d0:85:af:3a:22:15:4b:4c:13:82:f1:ec:ec:13:
         02:4c:0b:1c:91:8a:74:75:fb:0d:56:52:b4:7b:74:c8:1b:a1:
         1c:7d:63:2f:fe:91:b7:1b:dd:bf:dc:6f:63:a0:9a:50:1e:34:
         df:f1:e1:53:f5:e1:91:47:95:8b:f5:9a:18:d3:f3:f0:6a:d5:
         30:7b:d4:c9:cb:72:39:68:1f:93:eb:67:bd:2f:c3:24:64:e3:
         a4:82:5d:df:b3:3e:bc:5f:a2:ae:c1:bc:f7:02:82:e4:21:3c:
         f1:83:f6:27:01:16:ce:40:9b:9a:e9:23:22:80:d5:5b:78:1e:
         c3:37:a6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----