Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81287956eb7299acf482795e03d8ae10a1dba595.cer
File:                     81287956eb7299acf482795e03d8ae10a1dba595.cer (raw, json)
Hash identifier:          IXlHmz4l2rWY76d52aa2uIbNdcdF9P3BVGdI0HcIm9Q=
Subject key identifier:   CF:6B:72:B3:46:83:57:92:5E:F0:49:30:49:36:4E:CD:7F:4D:F4:E3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE2A34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/047a19e0-48b8-45d2-869c-efb969a5170a/81287956eb7299acf482795e03d8ae10a1dba595.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/047a19e0-48b8-45d2-869c-efb969a5170a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 18 May 2018 13:53:27 +0000
Certificate not after:    Sat 09 Mar 2024 19:47:34 +0000
Subordinate resources:    IP: 45.236.104.0/22
                          IP: 2803:f0a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14559796 (0xde2a34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 18 13:53:27 2018 GMT
            Not After : Mar  9 19:47:34 2024 GMT
        Subject: CN=81287956eb7299acf482795e03d8ae10a1dba595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:cc:7f:22:be:44:da:d2:17:ca:de:ba:e4:
                    34:d5:78:8a:7e:31:0a:83:b1:6c:62:48:af:f8:a1:
                    0b:47:1a:eb:5d:f6:13:5d:4d:bb:4a:27:75:a3:00:
                    ee:18:ac:55:32:2a:b3:e3:cd:b8:84:01:c5:04:a6:
                    e8:22:4e:90:c1:1c:a4:dd:4b:b6:62:8e:fd:f3:66:
                    4e:d2:d8:b1:33:2c:c6:12:9c:99:e7:3c:78:c7:33:
                    eb:1a:36:58:c3:9b:77:fb:c2:be:6e:1b:cf:f5:e2:
                    e4:14:cd:8c:fe:34:64:d6:01:d1:7d:d0:27:28:66:
                    6d:c1:0f:52:ce:d4:0d:6e:0c:bc:fd:bf:92:18:08:
                    da:db:ba:63:f9:e7:39:fb:d6:75:32:01:db:f3:90:
                    4e:05:6a:32:7f:2a:66:3c:ea:87:2e:a1:fa:43:9a:
                    ba:88:0d:f1:de:ad:fe:14:d4:60:b2:aa:b1:bd:c4:
                    cf:95:23:5d:35:58:59:0b:9a:7b:8c:f8:23:88:3c:
                    ec:94:a8:dc:64:7b:b9:f1:a4:64:9f:09:84:a1:0d:
                    24:ce:52:92:e4:a1:10:2c:93:ba:d3:0d:fa:d7:6d:
                    7c:33:43:0b:d9:4b:db:3f:a8:7c:6d:00:4a:37:e5:
                    ec:7f:8c:21:f7:39:9f:d0:41:9f:23:98:7e:5d:d7:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6B:72:B3:46:83:57:92:5E:F0:49:30:49:36:4E:CD:7F:4D:F4:E3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/047a19e0-48b8-45d2-869c-efb969a5170a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/047a19e0-48b8-45d2-869c-efb969a5170a/81287956eb7299acf482795e03d8ae10a1dba595.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.104.0/22
                IPv6:
                  2803:f0a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:57:61:b4:fe:94:8a:22:61:ee:84:81:3d:47:78:e5:a8:8a:
         3e:95:01:e3:a5:36:80:4c:79:5c:84:12:8c:c9:c7:c3:37:3e:
         d2:f5:4c:0f:94:39:52:f6:0f:54:ac:1e:5a:63:e8:7c:cb:00:
         f2:22:3e:57:86:8a:5e:3f:6c:56:a5:c7:d0:42:15:0d:fe:21:
         06:88:42:94:23:03:bf:b8:43:f4:21:63:a9:5d:f0:16:89:5f:
         0a:49:e1:f6:f2:dd:42:c6:56:f6:f2:19:e8:d7:f7:3c:9e:17:
         c0:db:ab:a6:03:ac:81:d5:c1:d6:39:36:51:60:14:09:5d:8c:
         4a:35:99:2c:42:da:94:ff:ec:92:fe:45:3d:ef:0d:97:ba:94:
         b4:e4:eb:aa:d6:21:53:04:af:49:a5:53:51:d1:cb:37:f0:c7:
         c5:ec:ee:47:0b:78:24:28:bc:b1:60:d9:f2:cb:1e:15:b9:42:
         76:a3:cb:8e:d8:1d:18:35:b7:c7:db:da:c2:f0:18:7f:72:b8:
         22:0e:b4:1f:3e:74:2a:e8:7a:e4:b7:0a:bf:d5:32:3e:ca:f9:
         56:0a:0a:d8:42:6c:64:14:6f:d3:35:b7:ad:f8:e3:c9:c5:aa:
         b6:ac:5e:28:64:2d:f6:b3:af:f3:97:43:bc:10:f1:38:13:5d:
         a4:1f:83:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----