Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer
File:                     74935393919dd2a404caa7ccadf12085d19ef35d.cer (raw, json)
Hash identifier:          gb18tElwVuThIGJnxszWRCN9dlU7KTAQuosJbdJSYow=
Subject key identifier:   5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D57507
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/74935393919dd2a404caa7ccadf12085d19ef35d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:39 +0000
Certificate not after:    Wed 22 Nov 2023 19:39:11 +0000
Subordinate resources:    AS: 264669
                          AS: 265733
                          IP: 168.90.252.0/22
                          IP: 2803:6540::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13989127 (0xd57507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:39 2017 GMT
            Not After : Nov 22 19:39:11 2023 GMT
        Subject: CN=74935393919dd2a404caa7ccadf12085d19ef35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:84:c2:3e:f4:9b:2b:6d:dc:1b:7f:b7:de:
                    b8:30:f2:fa:cc:9e:14:1b:25:7e:c8:9f:c2:65:2c:
                    96:9f:55:8f:53:af:8c:bc:c8:df:0d:3e:ed:9e:96:
                    26:55:15:17:5d:24:28:c5:27:26:e1:93:38:47:dd:
                    05:02:3a:17:51:1a:6f:a6:82:0c:3e:8e:b8:87:28:
                    32:2f:b8:96:05:f7:f9:5e:d9:ce:3e:db:27:24:9d:
                    eb:87:d6:50:a9:ef:1a:0e:a2:66:41:c1:27:80:50:
                    26:35:26:34:14:16:e5:78:34:29:48:bf:98:62:02:
                    40:bf:e7:fb:8d:1e:d0:8b:df:63:75:c5:d4:61:30:
                    c0:2e:8c:ce:41:bf:b8:94:15:26:59:86:d4:c2:fc:
                    34:9d:ee:d9:4c:32:af:24:fa:db:2a:e9:18:59:c6:
                    f2:d5:47:87:8c:0d:9a:75:7b:ed:85:87:2e:2d:27:
                    03:1a:87:33:93:44:6c:bf:f2:45:c1:10:45:28:3a:
                    75:5e:cd:a8:bb:ad:ba:4e:48:58:09:3a:c4:84:5e:
                    f7:07:2d:40:5e:2c:7a:34:30:bd:90:63:c7:cf:af:
                    61:d3:de:16:a8:63:6e:15:05:75:a8:1e:c9:df:7c:
                    93:55:af:5e:c5:a9:81:1d:47:c9:65:94:b3:4f:37:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/74935393919dd2a404caa7ccadf12085d19ef35d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.252.0/22
                IPv6:
                  2803:6540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264669
                  265733

    Signature Algorithm: sha256WithRSAEncryption
         ba:d8:a9:55:db:b0:85:0e:bf:14:d5:37:62:95:3b:22:9a:9d:
         35:48:d4:e3:b5:69:d8:9b:f8:95:bb:3e:07:3c:0f:b6:2f:18:
         48:de:9d:77:4d:47:2f:2d:b5:cf:b4:a3:0a:41:e6:d8:c8:dd:
         96:7c:05:07:27:1d:4b:a1:09:25:5b:b9:d3:78:22:d3:18:5e:
         2b:eb:82:57:cf:72:39:09:83:7e:b5:b0:52:55:6f:53:93:48:
         ba:bc:49:79:b3:dd:46:07:d3:c7:22:d3:a4:14:67:9a:db:5a:
         9f:fc:56:94:5b:07:94:47:1a:8a:cc:28:72:2f:39:d0:64:d6:
         a9:6c:b8:08:a3:2f:e6:9a:4a:a2:41:7c:cb:99:10:45:e3:a6:
         36:6d:af:23:d4:4a:24:fe:3d:39:61:ed:4a:52:45:cf:a4:b0:
         45:df:f7:99:9a:3d:dd:b8:41:57:5f:1e:a9:a7:35:68:1b:d8:
         67:c5:1b:d1:44:21:7d:03:68:76:05:13:a9:eb:0b:49:17:18:
         98:33:15:f7:a3:cd:8c:b0:63:d1:bf:b9:a7:e1:2e:9c:37:77:
         8e:c1:e7:75:34:ab:ea:7c:32:5e:cc:d0:aa:98:2c:15:90:8b:
         79:07:ae:56:66:e6:13:fb:15:a6:a0:5f:1e:eb:b3:51:4c:46:
         2d:91:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----