Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer
File:                     81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer (raw, json)
Hash identifier:          l2vYWF0El1HrJx97KKFnomZJKlMKOPhLtjwcdwOE9g4=
Subject key identifier:   AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F37C5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:31 +0000
Certificate not after:    Sat 31 Aug 2024 16:35:32 +0000
Subordinate resources:    AS: 263185
                          AS: 265667 -- 265669
                          IP: 179.43.80.0/20
                          IP: 2803:2480::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15957086 (0xf37c5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:31 2017 GMT
            Not After : Aug 31 16:35:32 2024 GMT
        Subject: CN=81e576eb875ef79c3d8f08ea0fa9a6fec82696ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:21:7f:9b:15:04:03:ba:e0:a6:9c:ab:21:
                    0b:8c:df:fa:36:be:dc:74:cb:0a:e2:21:7b:69:97:
                    0c:a0:99:37:a0:71:24:dd:6f:03:21:e1:bf:14:6d:
                    55:ad:5c:df:dc:b5:43:ed:3d:54:75:ce:bc:23:57:
                    e5:51:17:31:c3:3f:e6:b4:8d:be:3d:21:37:ab:6d:
                    f6:f8:ff:00:e2:cf:19:41:40:b4:3a:06:37:fa:66:
                    26:91:f0:f2:2f:ea:13:11:46:16:d5:28:32:7d:de:
                    5d:e1:25:2a:90:f0:4d:77:5e:d2:ae:a5:be:b8:1d:
                    ab:f1:9c:09:27:fd:08:55:53:51:ce:20:e9:ae:ba:
                    c6:fc:47:73:b5:27:52:30:a3:91:c7:90:da:9f:7e:
                    29:83:d4:83:fd:3d:82:f8:66:66:ec:de:70:d3:db:
                    ca:53:15:c8:64:98:7d:3e:f4:3c:2d:58:a6:d4:22:
                    53:39:95:f5:e5:35:d2:4b:80:9e:8f:d3:4b:a6:33:
                    75:dd:de:0e:e4:26:02:c1:ff:d0:46:3e:a7:11:a8:
                    e9:24:2e:16:f2:cd:a8:04:21:f9:3f:2e:c0:08:2e:
                    7f:94:bd:b8:a2:a3:aa:2a:a3:c4:11:b7:8a:e1:60:
                    fd:bc:1e:2d:90:a6:9f:57:56:48:fc:6f:1a:7b:a1:
                    a4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.80.0/20
                IPv6:
                  2803:2480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263185
                  265667-265669

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:27:31:76:78:46:0d:e1:5b:68:c7:ad:d1:c1:a7:9b:0d:
         3c:bb:3b:87:cf:6c:f4:48:47:75:68:74:37:5f:91:e3:a1:c4:
         af:92:19:28:91:19:92:88:8a:43:c2:0f:24:c3:7a:e9:7f:7c:
         21:e7:3b:73:40:2b:5b:55:6c:f7:d6:48:d6:9a:24:40:77:cb:
         b1:23:30:15:15:e6:7e:13:90:1f:0c:bc:7e:56:86:2e:6e:a6:
         00:eb:31:fd:2c:ce:0b:0d:55:61:e3:34:c5:3a:6a:74:cd:67:
         18:cf:89:38:58:0d:c8:8e:65:2d:7f:68:85:2f:6d:7a:0f:44:
         3c:b3:b8:5e:3c:fb:7c:fe:63:82:a4:25:7b:b4:cf:a1:b6:67:
         d7:9a:f1:1e:c8:fc:7b:c1:5d:7c:be:80:53:de:ba:c7:bd:62:
         64:aa:24:e6:6f:48:6d:6f:4f:98:d2:2f:af:41:6b:c3:39:a4:
         e1:45:56:87:b7:ba:92:2a:d0:a3:0f:85:05:d1:91:11:63:22:
         05:63:6f:b0:e9:46:0a:4c:48:66:f2:02:59:65:37:85:02:84:
         2b:f0:f1:ab:51:11:d0:d5:b4:9f:3c:9e:b4:12:74:98:d4:77:
         3f:b2:4e:c7:4c:95:35:01:ae:bc:3e:4f:91:b5:58:87:62:7e:
         5d:39:41:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----