Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f63bdebc6ab31c585ea9675b89e3bf14b7ca837.cer
File:                     6f63bdebc6ab31c585ea9675b89e3bf14b7ca837.cer (raw, json)
Hash identifier:          h6mmYTC8UoLqB2BWcJKwfnfqUJT7VTNNEEmkR1o6mZQ=
Subject key identifier:   F0:F8:A3:29:D1:70:0E:69:A0:11:CD:FA:91:15:76:DB:F2:5F:E6:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D96FF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/89fb97a7-fc3d-4cea-a93a-f0680bcd32b0/6f63bdebc6ab31c585ea9675b89e3bf14b7ca837.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/89fb97a7-fc3d-4cea-a93a-f0680bcd32b0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:27 +0000
Certificate not after:    Fri 12 Jan 2024 21:44:34 +0000
Subordinate resources:    AS: 263177
                          IP: 191.102.48.0/21
                          IP: 2803:6a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14249975 (0xd96ff7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:27 2017 GMT
            Not After : Jan 12 21:44:34 2024 GMT
        Subject: CN=6f63bdebc6ab31c585ea9675b89e3bf14b7ca837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:f6:9f:85:4b:7b:ab:0b:d1:b8:e3:71:90:
                    fa:48:e9:38:2c:4e:8d:04:59:ec:bb:67:7f:9e:df:
                    b5:76:84:ab:57:1e:ed:bf:f7:60:1d:28:1c:5b:fa:
                    31:97:81:16:d4:44:9b:8d:2b:81:13:5e:92:f2:a1:
                    49:fd:3a:7f:f3:25:0e:3b:80:b8:36:47:fe:d6:b8:
                    8a:a1:a0:62:c4:6e:d5:fe:50:a8:f9:4d:89:e6:71:
                    09:55:4d:bf:64:8d:f0:fe:72:d8:e7:75:6d:df:61:
                    03:44:94:bc:4f:67:1c:00:85:70:08:e3:e3:ad:52:
                    3d:7e:1b:e4:45:62:78:31:c5:ae:63:e4:27:de:3c:
                    f7:d9:cd:3f:23:8c:68:08:76:ca:1c:cf:82:08:0e:
                    3b:ff:26:36:a7:90:ff:73:ab:6b:bc:f7:fe:d4:cc:
                    6c:3f:42:0e:c3:1d:7b:85:b7:cd:a2:ab:21:3b:7e:
                    74:5f:cc:60:a3:60:7d:0b:32:b9:3d:d8:bc:80:4d:
                    5e:ee:19:39:21:52:fd:3f:2e:15:69:55:a9:4f:95:
                    10:8b:25:f8:f9:c7:78:5b:f5:2a:e8:21:bc:68:da:
                    30:89:6e:f3:c7:8a:6a:e7:b8:78:42:bc:32:9e:98:
                    c4:f0:30:56:2c:42:8b:00:89:cd:80:65:e8:58:c8:
                    7f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F8:A3:29:D1:70:0E:69:A0:11:CD:FA:91:15:76:DB:F2:5F:E6:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/89fb97a7-fc3d-4cea-a93a-f0680bcd32b0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/89fb97a7-fc3d-4cea-a93a-f0680bcd32b0/6f63bdebc6ab31c585ea9675b89e3bf14b7ca837.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.48.0/21
                IPv6:
                  2803:6a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263177

    Signature Algorithm: sha256WithRSAEncryption
         21:c2:17:02:12:b0:e2:0e:69:28:28:98:ea:72:f0:fe:77:89:
         ef:38:53:80:4d:bc:15:20:99:02:5e:8b:2e:b0:e7:f2:d3:a3:
         05:b6:b3:e7:a0:67:6b:7f:8b:4e:36:d7:23:1b:c6:c6:9f:4d:
         71:a0:18:2f:35:33:71:75:82:0d:08:8f:fe:d5:31:d6:a8:cc:
         03:c2:43:40:3a:4a:92:e7:56:4d:96:4a:51:c6:6a:80:b6:a1:
         2b:e0:23:f0:b7:11:42:6d:dc:dd:b5:43:09:01:a4:92:fb:64:
         da:6e:e1:eb:14:f7:18:a8:be:d2:83:21:b7:a1:fa:5a:82:a9:
         96:82:ba:97:b6:bf:45:34:19:30:b2:7a:79:0c:3d:7f:c5:09:
         14:87:2a:07:05:3a:21:87:19:78:16:c2:21:78:d7:97:a6:02:
         a4:86:49:1f:5e:f8:8c:cf:dd:73:20:77:a3:5a:89:41:69:df:
         2b:f0:bd:61:db:5d:93:78:8b:b0:71:e2:b3:64:42:08:bd:59:
         1d:c6:34:70:1f:e1:b8:1d:36:94:00:5e:06:ac:b3:e7:84:32:
         2a:0b:bd:73:d7:0b:d7:7e:3d:e8:bb:75:e5:56:ec:a0:db:26:
         3e:ca:45:23:cc:0e:8f:b0:d6:22:19:62:e8:6a:67:0f:70:a2:
         2b:ac:16:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----