Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78532a8cd9faf1123ab038c152ddcd9606500859.cer
File:                     78532a8cd9faf1123ab038c152ddcd9606500859.cer (raw, json)
Hash identifier:          Sctks05UlnNSq48Ei3F/HZZJ17ryyK2tu4V/u5/ZM84=
Subject key identifier:   97:0A:AC:D6:50:51:9B:9A:64:F7:36:0A:89:72:12:25:D2:78:90:61
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9B27C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4aa3b304-9a87-4951-89ea-60c4cb1835e1/78532a8cd9faf1123ab038c152ddcd9606500859.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4aa3b304-9a87-4951-89ea-60c4cb1835e1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:29 +0000
Certificate not after:    Thu 13 Jun 2024 16:26:07 +0000
Subordinate resources:    AS: 263820
                          IP: 138.219.160.0/22
                          IP: 2803:2a40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15315580 (0xe9b27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:29 2017 GMT
            Not After : Jun 13 16:26:07 2024 GMT
        Subject: CN=78532a8cd9faf1123ab038c152ddcd9606500859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:3e:00:d7:9a:94:c7:6f:80:d4:67:31:9b:
                    16:36:8d:70:13:7a:f4:60:c9:8d:ba:6e:30:79:e6:
                    f8:58:ec:70:14:08:a6:91:3b:72:e3:ca:f6:30:22:
                    e3:c6:a0:4f:62:93:48:16:12:05:d6:cf:42:aa:b0:
                    46:0b:c0:d5:e0:cc:2f:75:d4:48:ca:a0:5a:32:37:
                    c9:5e:9e:4c:fd:6b:e8:c9:22:73:bd:fa:4d:ca:17:
                    d7:c5:f3:ba:7c:72:dc:db:4e:43:df:94:3b:a3:97:
                    17:6b:93:a7:a6:3e:ca:0a:d2:05:7a:32:b8:0f:db:
                    82:4b:1d:ee:a4:cd:86:11:0d:65:15:7c:84:03:c9:
                    6e:cc:4e:43:d1:f0:50:88:21:e4:6b:c3:d4:69:a0:
                    01:f3:02:87:85:26:14:b5:6e:dd:05:9f:bd:3a:6e:
                    e7:d3:6c:a2:c3:40:09:fa:29:4b:3e:40:61:e7:f7:
                    f1:de:48:8d:20:8d:92:50:a6:11:61:e6:66:36:5a:
                    07:d9:9d:3b:be:1f:fe:b5:64:b0:46:39:35:e2:ee:
                    89:21:0d:44:5e:52:3c:69:dc:9d:7a:93:9d:b2:1b:
                    13:dd:36:73:fb:58:ce:ad:f8:b9:bb:de:54:e5:6c:
                    aa:58:ba:a6:21:ad:bb:16:1f:cc:71:db:69:59:2a:
                    17:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0A:AC:D6:50:51:9B:9A:64:F7:36:0A:89:72:12:25:D2:78:90:61
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4aa3b304-9a87-4951-89ea-60c4cb1835e1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4aa3b304-9a87-4951-89ea-60c4cb1835e1/78532a8cd9faf1123ab038c152ddcd9606500859.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.160.0/22
                IPv6:
                  2803:2a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263820

    Signature Algorithm: sha256WithRSAEncryption
         6a:33:05:28:00:70:48:b6:fc:e7:e8:63:d9:6b:c7:05:91:6e:
         6e:9d:49:27:ca:d3:1a:e7:09:27:b6:3c:34:79:13:b2:f8:5d:
         10:d6:02:c8:e9:dc:1d:3a:92:3d:b6:6f:47:60:85:68:ba:23:
         32:11:e7:fe:8a:df:34:10:2a:5e:c5:61:9b:82:27:ee:59:a6:
         a1:7f:dd:96:c2:5d:dd:46:88:22:3f:8c:57:8e:f6:02:c1:db:
         fb:a8:2f:6f:a8:50:9c:96:9e:98:05:06:01:bf:43:64:d4:e7:
         c8:27:28:dd:ea:ee:37:8a:66:32:fd:e5:72:ee:84:f2:a8:ef:
         d9:06:5b:de:39:43:de:02:8e:30:68:fa:4f:1f:c1:56:1f:11:
         62:a0:19:47:41:3a:93:48:31:43:26:23:fd:88:9b:88:f9:35:
         f2:49:43:b5:cb:80:25:e5:3d:d9:4c:f3:80:64:9a:65:6b:1e:
         c2:4c:ba:3c:a0:f5:86:bc:a5:01:c8:5d:25:0e:d9:04:67:45:
         8d:b9:35:49:e7:69:70:08:6c:81:7c:3c:06:38:b0:8b:77:12:
         7d:f9:e5:50:94:ea:58:21:4f:e2:35:29:7e:8a:d1:51:a5:74:
         f8:d3:14:ff:40:81:05:8e:4c:34:2a:1a:63:8b:6a:57:1c:4e:
         11:2d:bf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----