Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer
File:                     70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer (raw, json)
Hash identifier:          e1DNYFKqfEc4K55j4xqpxVEbCl2vp8W9isQVgwQOX5M=
Subject key identifier:   CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FACDC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:34 +0000
Certificate not after:    Sun 29 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 22833
                          IP: 179.5.0.0/16
                          IP: 190.62.0.0/16
                          IP: 190.86.0.0/15
                          IP: 201.247.0.0/16
                          IP: 2800:b20::/30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16436680 (0xfacdc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:34 2017 GMT
            Not After : Sep 29 15:00:00 2024 GMT
        Subject: CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:3c:bb:0d:2b:d3:56:8f:4c:fa:be:ec:12:
                    79:72:3e:dc:17:0d:b1:b4:20:de:72:ad:a2:bc:b7:
                    c6:49:e8:85:2b:ae:ee:1a:19:e6:29:e0:01:01:a6:
                    dd:7d:43:38:dd:aa:96:e8:ef:d1:14:75:b7:a7:b6:
                    d4:e5:ba:fe:9b:8e:d5:ae:97:3e:e1:3d:44:72:3e:
                    70:93:fd:ec:30:0b:c3:f4:58:68:c4:83:93:01:d9:
                    d8:d3:f3:60:2e:51:6e:4d:07:81:54:91:41:4e:13:
                    07:1e:7f:b7:c5:71:c0:20:89:af:65:6f:2a:93:2d:
                    55:e0:0c:c9:1a:f6:78:71:3e:09:d6:0d:99:99:16:
                    08:91:e3:55:10:3b:e0:b7:b8:ec:f5:f7:0a:1a:ed:
                    6a:64:88:43:9d:36:ed:47:d5:a7:95:d1:f1:1e:32:
                    e5:f3:93:d9:ab:97:8f:73:d1:12:93:47:e0:4d:ad:
                    2e:fc:c0:68:a0:5f:a3:b1:b7:9c:bd:fb:87:ad:73:
                    31:da:fd:40:63:9d:21:b1:de:1a:8b:a2:3a:c4:e4:
                    55:12:8d:d0:52:ed:f7:9c:97:df:c6:2f:10:04:26:
                    b5:29:90:89:40:a7:3b:61:71:89:c2:54:64:18:f9:
                    0f:57:c8:1e:43:29:f1:e6:80:51:aa:e6:3f:82:c0:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.5.0.0/16
                  190.62.0.0/16
                  190.86.0.0/15
                  201.247.0.0/16
                IPv6:
                  2800:b20::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22833

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:d2:31:39:a3:af:28:79:25:99:a0:50:6d:03:3f:76:50:
         98:ee:28:0b:cc:80:0d:9b:01:8e:76:f0:21:65:2f:04:7d:d7:
         52:5a:0a:44:a3:de:10:b2:21:8a:34:23:07:05:c9:ed:62:f3:
         3a:1b:57:02:8b:6e:6e:0f:b4:df:61:3f:67:ff:6b:8a:6a:b6:
         31:b9:78:a5:c5:76:e9:90:13:e9:6a:07:cd:b4:2e:6f:cb:10:
         50:28:79:ed:8b:56:64:31:ce:9e:07:9b:8c:d6:af:7c:77:84:
         46:37:ce:78:07:9e:b1:29:91:cd:c4:02:a5:4b:aa:94:5b:f5:
         76:4b:57:c0:da:b3:50:ed:24:f3:ef:f8:7d:9e:17:1d:89:04:
         35:f7:d6:d3:04:25:a0:ff:bf:34:ca:19:bb:6a:63:25:c5:6e:
         b1:3f:58:ac:42:84:b3:c1:31:e3:71:3c:1c:48:c6:b6:19:36:
         90:a7:9a:36:4e:ee:71:b5:4e:49:cc:36:2d:7c:2f:e3:e7:af:
         03:56:14:79:4c:03:34:a9:49:d9:4e:d1:2c:22:cb:68:35:1f:
         e4:dc:91:13:3d:4e:78:c7:54:ff:9d:76:88:09:fe:36:44:4d:
         1d:2a:c5:c1:72:a4:f6:f6:e6:12:16:ee:b1:e5:7f:0e:7f:6d:
         92:95:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----