Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d023573ee3a0783b026e6880294e091aed01196.cer
File:                     7d023573ee3a0783b026e6880294e091aed01196.cer (raw, json)
Hash identifier:          oXp2aR5HX8imOjjA2UTpdprFFTBIRW7dB20HpEEjW9s=
Subject key identifier:   58:9B:8B:11:2E:BB:2C:46:27:64:4F:17:5A:C5:70:33:39:D0:69:C7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0107809F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/7d023573ee3a0783b026e6880294e091aed01196.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2017 03:04:53 +0000
Certificate not after:    Sat 04 Oct 2025 05:00:00 +0000
Subordinate resources:    AS: 266886
                          IP: 45.228.64.0/23
                          IP: 2803:f120::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17268895 (0x107809f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  5 03:04:53 2017 GMT
            Not After : Oct  4 05:00:00 2025 GMT
        Subject: CN=7d023573ee3a0783b026e6880294e091aed01196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d2:63:14:27:0d:2f:3b:7c:ab:92:c1:b9:17:
                    47:22:9a:bb:29:e1:bc:02:85:5f:45:61:27:89:3b:
                    51:11:68:6c:77:f2:75:85:b7:1f:3a:a1:6c:5a:12:
                    cc:74:b1:89:9a:b3:ea:72:8b:fd:f6:53:37:82:1f:
                    bb:43:9d:af:ca:49:f3:86:6a:70:27:fa:85:ad:52:
                    fa:7a:29:14:88:ab:20:9a:42:cc:0f:95:54:89:1d:
                    bd:3e:3e:6c:90:cf:b1:50:0b:0d:a6:8f:72:f4:26:
                    b8:bd:56:43:78:f8:34:74:23:0a:c3:a6:9d:6d:95:
                    9a:3b:e0:02:58:1e:5f:27:7e:f5:42:35:b8:7c:00:
                    06:19:01:e6:25:24:ca:34:3e:f1:6b:75:d4:2e:9e:
                    1c:f5:12:ea:96:27:9e:14:51:42:8f:ed:62:3c:c5:
                    78:e3:a5:ce:d9:73:e5:de:35:05:06:76:10:e8:42:
                    4f:a6:9d:1d:f5:66:0d:d3:99:62:51:52:2b:62:96:
                    13:1c:2e:f3:76:d5:53:00:24:da:d0:a6:6c:38:7f:
                    6c:42:eb:b0:7b:24:12:bd:a0:89:78:d0:13:b1:1e:
                    63:f0:e5:25:e3:57:20:3d:56:a7:52:9b:91:88:98:
                    4d:e6:ab:c4:22:73:b1:3b:b6:f7:d0:e6:81:12:04:
                    99:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9B:8B:11:2E:BB:2C:46:27:64:4F:17:5A:C5:70:33:39:D0:69:C7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/7d023573ee3a0783b026e6880294e091aed01196.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.64.0/23
                IPv6:
                  2803:f120::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266886

    Signature Algorithm: sha256WithRSAEncryption
         4f:14:13:74:9d:4f:2e:1f:8e:cd:04:e2:7d:8a:44:13:19:51:
         25:39:f7:f9:1a:3b:7f:0a:43:12:c8:57:95:48:99:77:3a:0d:
         79:f7:b2:23:7a:c5:88:cc:1b:e4:8f:14:7c:53:d1:c7:0a:93:
         bc:f2:ab:15:3a:22:3b:d7:ed:c1:c2:13:ea:12:bc:7e:9e:ab:
         14:4d:8b:2a:c8:02:aa:ef:5f:04:e3:73:17:14:4b:7d:e9:7e:
         b6:37:d8:be:f8:76:61:e6:61:ca:7b:2c:b4:3b:4d:7e:fe:56:
         f6:d1:d8:a2:00:13:f4:77:34:cc:c5:a3:92:b7:4b:16:6f:ab:
         3a:95:7d:ff:a8:dc:42:8a:0d:95:3c:02:d5:d0:a3:4b:8e:70:
         e6:f7:dd:a3:1f:23:88:c7:9a:9f:59:c4:c1:0f:e9:3e:05:a8:
         23:e7:1b:94:04:1d:91:a9:20:58:60:b7:c5:d7:d5:15:c8:86:
         1c:aa:3b:df:0e:92:72:2d:1d:a6:26:c3:95:9e:8f:65:b0:89:
         0d:4c:98:b4:cc:61:5f:f2:60:5d:36:0e:b1:23:29:d5:ef:0e:
         d2:52:c7:1b:f7:d1:2c:9f:a2:83:35:18:06:a0:5e:ab:23:86:
         ca:17:5c:e5:09:cb:1b:bd:b0:7a:51:2c:62:97:2f:ca:31:f0:
         2e:63:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----