Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer
File:                     7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer (raw, json)
Hash identifier:          Kmz+Sj4MkN+CGRRYUm7DC0b5iDRYw9wMLidvD+/Dq2c=
Subject key identifier:   8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC9EA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:19 +0000
Certificate not after:    Tue 20 Feb 2024 16:03:59 +0000
Subordinate resources:    IP: 160.20.164.0/22
                          IP: 2803:59c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14458531 (0xdc9ea3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:19 2017 GMT
            Not After : Feb 20 16:03:59 2024 GMT
        Subject: CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:8e:8f:2f:b0:ed:b8:03:8d:eb:ee:23:32:
                    07:e6:ff:df:ec:2c:e5:cd:32:22:17:d5:83:e4:24:
                    cc:fc:ea:2a:50:de:16:45:cb:38:e4:b8:ed:76:18:
                    6f:ba:12:7d:5e:20:e2:f8:19:88:1f:77:fc:9e:2e:
                    ac:a3:6b:1c:91:ac:d6:fe:62:bb:be:3d:52:86:7f:
                    3b:ff:2e:2b:22:b8:13:22:bd:1d:3c:f5:e1:68:a8:
                    49:9c:27:6b:de:74:5c:04:de:d5:0d:e0:02:4a:c9:
                    71:56:95:59:ed:c1:7d:10:61:26:c2:b6:53:fa:33:
                    07:44:15:af:48:bc:a5:d3:95:3f:61:ed:bf:4d:75:
                    2e:29:4b:2f:2c:53:10:d6:b4:70:6d:67:fa:76:63:
                    1c:2f:0e:6c:e6:ee:ff:19:36:4c:81:9d:8c:0b:fe:
                    e0:a6:d6:9e:89:06:9e:28:42:77:66:d8:9d:b5:ba:
                    d5:61:9f:04:9a:e6:ca:2a:e0:5a:0c:e9:b0:7e:d4:
                    17:9e:a6:41:45:1e:68:22:11:60:14:e8:98:3e:f9:
                    c2:11:f4:43:80:36:31:bf:f9:07:7a:6e:9c:9a:0d:
                    c2:ae:7d:97:39:93:bd:4e:f3:08:47:9f:83:d4:e5:
                    c8:93:40:d1:5a:a9:52:4b:1c:af:14:cf:35:d9:14:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.164.0/22
                IPv6:
                  2803:59c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:67:b7:71:42:36:a1:2d:4b:87:57:51:aa:24:4b:56:86:c7:
         a6:48:98:4c:b4:9a:ab:d0:1c:83:86:9d:c9:3c:31:da:b5:d3:
         6a:fe:b5:ab:ee:81:42:55:44:1e:89:ec:57:76:33:65:84:be:
         2d:60:94:d8:b6:72:25:85:f7:8e:0b:7e:f0:52:41:63:e3:92:
         db:4f:63:de:f1:19:de:d0:00:83:46:17:0f:20:e1:1c:3b:af:
         b1:e6:14:ee:03:10:f8:e5:3f:ed:8e:42:aa:41:2f:1f:16:ff:
         49:9e:61:14:88:c6:4c:f8:30:8f:48:c9:0e:32:03:f9:77:10:
         f5:c7:57:52:34:ed:31:d3:d1:7b:6a:98:33:d5:ef:fd:47:7f:
         d3:a8:ca:09:6d:88:f5:5c:b5:ae:a0:bc:f2:f8:2d:3f:0d:fe:
         dc:c3:e8:df:64:ef:d8:08:23:2c:2d:b8:11:fb:95:77:8e:f1:
         36:4a:32:df:73:64:4e:24:46:48:a9:7d:e8:52:e1:a1:ec:c5:
         7c:34:cb:e2:4f:20:41:f9:8f:12:27:b7:fc:51:70:e6:7e:39:
         f8:65:6f:d3:a4:92:57:e7:b8:65:3f:f9:45:b7:1d:16:e3:f0:
         22:4f:ca:3b:36:9e:96:94:0b:48:91:58:8b:88:42:57:a1:ff:
         cf:47:ea:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----