Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87321cd9210d28b0affd9a79118b5f6d1ae80b2f.cer
File:                     87321cd9210d28b0affd9a79118b5f6d1ae80b2f.cer (raw, json)
Hash identifier:          uLMd3H/FbjTpxcpAqDXlLQO2qoofRVBcNl3QDo6svXA=
Subject key identifier:   BA:2B:3F:17:AA:3E:1F:CA:1F:49:05:2E:78:B9:02:F8:63:A6:9C:DB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDE132
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b9dc3a54-5022-4a44-aef1-24eae3a1ba3d/87321cd9210d28b0affd9a79118b5f6d1ae80b2f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b9dc3a54-5022-4a44-aef1-24eae3a1ba3d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:33 +0000
Certificate not after:    Thu 07 Mar 2024 18:32:54 +0000
Subordinate resources:    AS: 263228
                          IP: 190.112.208.0/21
                          IP: 2803:8e80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14541106 (0xdde132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:33 2017 GMT
            Not After : Mar  7 18:32:54 2024 GMT
        Subject: CN=87321cd9210d28b0affd9a79118b5f6d1ae80b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dc:91:f4:fb:0b:f5:a3:27:9a:ae:20:ba:ad:
                    14:e4:4f:63:66:9d:c9:e8:f9:ef:91:bc:c6:99:5d:
                    93:41:ad:e9:de:a0:da:e5:44:bd:83:42:ff:ee:e0:
                    4e:bc:e3:66:a7:88:17:9d:52:1a:e3:55:64:45:2b:
                    9a:f9:59:0e:bb:ff:6a:4e:08:02:79:9d:ba:d2:ed:
                    a4:c7:f3:7c:03:4b:a0:ee:8c:5a:7d:1e:e5:97:c3:
                    4f:1b:0f:65:f1:f4:b6:ca:8b:d8:5c:02:07:88:0d:
                    95:93:d3:1a:01:8e:04:be:79:26:aa:4f:a8:ff:a8:
                    a1:7a:3e:35:39:d8:6b:4a:62:cf:e1:eb:45:bb:44:
                    c1:2f:90:89:ba:38:91:5c:7e:de:d5:98:68:4e:11:
                    9c:56:24:6b:ed:a8:16:60:8b:2b:8e:3f:2e:37:fd:
                    7b:40:e0:1c:cf:c7:c7:97:93:cf:29:fb:76:de:e7:
                    96:67:6c:33:32:b9:e1:88:f7:d7:73:b6:54:59:45:
                    cf:37:35:99:d6:e8:79:48:02:14:ec:34:42:ea:71:
                    60:e8:f2:5a:f4:38:6a:67:dd:94:cc:12:ec:9d:b4:
                    93:8a:48:17:63:6b:9e:44:73:a9:c4:05:64:d9:2e:
                    40:db:70:b8:32:49:eb:7d:21:9e:4e:84:36:c4:dd:
                    a6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2B:3F:17:AA:3E:1F:CA:1F:49:05:2E:78:B9:02:F8:63:A6:9C:DB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b9dc3a54-5022-4a44-aef1-24eae3a1ba3d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b9dc3a54-5022-4a44-aef1-24eae3a1ba3d/87321cd9210d28b0affd9a79118b5f6d1ae80b2f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.208.0/21
                IPv6:
                  2803:8e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263228

    Signature Algorithm: sha256WithRSAEncryption
         77:53:a0:45:59:bb:26:d6:1d:29:5c:4f:b7:6d:19:80:ea:20:
         2e:54:52:16:01:5d:fd:78:4e:b5:92:77:2d:f1:df:e7:ea:8f:
         eb:7b:27:2b:dd:cc:de:dc:58:d7:4c:df:7f:59:9c:01:fa:ad:
         57:c7:f1:d7:8f:84:d4:9a:93:0f:5f:6e:10:b9:c7:5a:17:19:
         e4:63:a8:12:18:69:9c:5a:56:80:83:db:0e:eb:93:26:74:6c:
         b4:25:97:06:5b:bb:24:0f:b4:47:13:44:90:dd:e4:64:d3:13:
         04:ec:92:9d:4c:c8:a3:50:6e:fe:7b:9b:e4:97:72:2c:fd:06:
         8b:50:df:d5:fb:7c:75:be:16:b4:3f:af:9f:9a:a8:ce:37:52:
         56:36:fa:d5:ba:12:44:9f:34:53:bd:32:63:aa:7e:5e:25:5e:
         83:0c:a4:62:70:b7:7f:69:30:2c:16:42:73:17:cf:11:2b:65:
         97:50:06:7e:85:33:8e:50:68:86:83:ff:7f:28:20:b5:17:de:
         3f:79:18:31:77:31:ac:f2:5f:5d:d6:e5:55:40:64:47:a7:94:
         93:b5:c1:bf:c8:5c:cb:37:43:14:d6:4c:52:cf:1d:90:4b:29:
         e6:d2:df:13:18:bc:52:50:22:be:b0:b7:1d:0c:29:a3:bf:71:
         29:aa:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----