Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8be2b08fa1ace8128b351c771ec61c78d5bca11e.cer
File:                     8be2b08fa1ace8128b351c771ec61c78d5bca11e.cer (raw, json)
Hash identifier:          tkf4M3Mugn1QhngVxRfRGtMzuuFiYfd2bKUjWKwY+ig=
Subject key identifier:   76:1E:40:FC:A9:94:54:C8:8D:54:4C:C8:04:B8:CE:CC:3C:DB:2A:9B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDC1F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5b7f1a7d-1740-4a8d-8454-9970c0c02024/8be2b08fa1ace8128b351c771ec61c78d5bca11e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5b7f1a7d-1740-4a8d-8454-9970c0c02024/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:43 +0000
Certificate not after:    Tue 16 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 52355
                          IP: 200.106.244.0/23
                          IP: 2801:0:170::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15581685 (0xedc1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:43 2017 GMT
            Not After : Jul 16 06:00:00 2024 GMT
        Subject: CN=8be2b08fa1ace8128b351c771ec61c78d5bca11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7f:36:6c:8d:50:40:10:e3:a0:f8:41:b1:e5:
                    f3:0d:43:7b:10:eb:63:52:49:48:02:9d:f9:1f:d6:
                    08:23:80:04:4f:b2:2b:1a:66:e1:da:34:d8:59:fe:
                    08:c1:16:1a:a9:ef:9d:ac:f9:c3:9b:21:d7:96:12:
                    a0:87:71:b6:c6:35:95:6b:85:20:48:9e:c8:ba:eb:
                    bb:57:b6:8e:f3:d7:49:ae:81:99:7e:2a:86:15:13:
                    02:f4:ed:6f:e2:4a:de:30:96:45:9c:5a:07:cc:ba:
                    55:d7:3e:8f:20:4f:54:e8:0a:46:ff:2f:9e:af:7a:
                    3b:6f:9a:2f:be:05:a0:fa:82:47:5d:d8:78:2c:90:
                    0c:1c:a8:2a:93:3f:65:bd:d4:67:91:5f:c0:73:9d:
                    2e:d3:26:0d:a9:2e:a1:64:ec:22:ff:fc:98:87:68:
                    78:98:fb:c5:36:a3:f1:46:ad:fd:72:38:32:fc:22:
                    ba:b5:ac:2b:1c:42:73:d5:1d:2a:6e:15:ad:86:f1:
                    ce:93:24:9f:55:15:9d:a9:bd:25:ce:44:cf:9a:70:
                    5d:15:21:18:c0:fc:38:ce:cb:76:df:d8:e7:8a:35:
                    18:68:fc:1b:79:f7:51:92:f3:c7:88:16:49:2c:78:
                    7d:80:be:8a:73:1e:94:24:5d:ea:ff:e5:3f:72:79:
                    02:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1E:40:FC:A9:94:54:C8:8D:54:4C:C8:04:B8:CE:CC:3C:DB:2A:9B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5b7f1a7d-1740-4a8d-8454-9970c0c02024/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5b7f1a7d-1740-4a8d-8454-9970c0c02024/8be2b08fa1ace8128b351c771ec61c78d5bca11e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.244.0/23
                IPv6:
                  2801:0:170::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52355

    Signature Algorithm: sha256WithRSAEncryption
         aa:f3:2d:cc:c2:7d:54:74:c4:11:f6:f6:e4:ac:6c:61:0d:c8:
         db:c4:cd:fa:05:e7:ca:8d:5d:c7:01:d0:46:e7:b6:1d:8d:02:
         a0:77:45:b0:54:a6:97:c6:36:85:db:a0:61:6c:09:57:ef:ea:
         24:1d:87:18:e6:05:f5:36:59:59:d2:bf:c9:e2:ee:01:6a:e9:
         1c:1b:2e:ec:e9:72:c4:5f:1d:16:a5:2a:a8:b0:67:a4:51:d9:
         96:08:51:ec:47:9b:1f:a0:a8:87:7e:53:df:2d:50:30:5c:7d:
         fc:ac:5a:b1:79:10:0e:38:16:fb:11:cb:de:5c:3f:79:08:36:
         1e:77:05:8a:3b:f5:e5:d0:55:5e:63:88:b6:a6:70:de:83:ef:
         0d:83:c9:00:6c:be:4a:f9:ce:c2:fc:15:c6:7b:ef:34:76:83:
         8a:85:20:64:d5:db:2a:31:32:93:67:5d:2d:31:e3:58:6e:68:
         2f:85:3d:1a:f7:ae:c8:4e:0d:87:ab:11:7c:37:6d:56:57:a9:
         cd:93:e4:83:a2:38:a7:4c:48:27:40:01:58:9d:88:c4:6d:7c:
         3c:46:50:e5:92:18:27:6c:4b:18:b1:8d:d9:31:af:98:23:60:
         cb:9a:56:9f:35:6c:0a:18:e3:3e:e4:9b:fb:e6:23:ad:0c:10:
         14:ca:6c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----