Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cecba4d06719b0701405567ea7739bad8040b51.cer
File:                     8cecba4d06719b0701405567ea7739bad8040b51.cer (raw, json)
Hash identifier:          2DohaXX16F0AH1YwUUw0Sx5xyVd38Q8+mYjCO9ZKzzA=
Subject key identifier:   80:CB:5A:5C:56:CC:08:65:09:95:00:14:30:A2:11:C1:AE:DF:A4:BC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6CD90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/8cecba4d06719b0701405567ea7739bad8040b51.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:56 +0000
Certificate not after:    Fri 08 Dec 2023 16:56:00 +0000
Subordinate resources:    AS: 267788
                          IP: 170.247.0.0/22
                          IP: 2803:26c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14077328 (0xd6cd90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:56 2017 GMT
            Not After : Dec  8 16:56:00 2023 GMT
        Subject: CN=8cecba4d06719b0701405567ea7739bad8040b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:32:ef:79:88:4c:a8:6b:71:fc:40:87:5b:
                    96:c3:9e:59:8e:b3:af:d8:2b:a3:6a:2c:4e:5e:81:
                    78:2d:c3:1d:28:4d:b5:94:63:0e:89:c5:f7:10:d3:
                    00:4c:55:3e:e8:e1:b2:b5:a1:27:72:81:ed:77:37:
                    74:bd:ad:13:52:ed:30:d0:9e:e3:61:52:ed:93:2d:
                    98:20:e1:f4:1f:53:8f:c4:60:01:bc:6a:75:b5:71:
                    6f:1b:32:90:e7:22:72:15:f2:2b:d9:57:4c:c8:a1:
                    b5:79:59:3f:30:93:dd:18:d8:63:a4:4b:cc:a8:8d:
                    0f:14:52:9d:6c:aa:4f:7a:b8:c5:84:64:f4:d6:e2:
                    cf:74:9d:18:ba:19:cd:97:9b:3f:01:f6:ad:55:0f:
                    9c:ac:a6:d2:00:89:99:95:5a:f1:17:ae:00:0c:4f:
                    1b:e0:4c:f5:b0:f0:e2:08:96:e6:67:4a:07:26:1c:
                    33:67:e4:72:46:e3:48:d1:59:b5:40:45:c8:6d:27:
                    8a:b3:34:cb:6f:6a:d7:e2:3e:b6:1d:eb:bc:68:20:
                    58:a5:02:59:03:c3:09:b0:58:a3:5b:d7:1a:2c:94:
                    9f:53:0c:92:34:7e:09:d9:a7:7c:f3:52:96:e3:a8:
                    b6:07:a0:55:10:34:50:18:f5:ec:87:4b:fd:37:ff:
                    77:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CB:5A:5C:56:CC:08:65:09:95:00:14:30:A2:11:C1:AE:DF:A4:BC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/8cecba4d06719b0701405567ea7739bad8040b51.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.0.0/22
                IPv6:
                  2803:26c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267788

    Signature Algorithm: sha256WithRSAEncryption
         11:6d:0c:8f:44:2e:b7:38:b3:59:f6:51:fa:34:ed:a9:b1:f8:
         4c:c3:dc:90:88:5b:d9:ae:63:66:12:c4:c3:e9:c9:5f:4a:43:
         86:45:81:e2:1e:e6:09:25:d6:a9:78:71:6a:f9:c0:c4:85:36:
         d6:5f:11:1a:22:d2:f9:d7:7e:2a:1e:ba:a3:bc:28:13:a4:7c:
         77:06:43:e7:f0:0e:aa:7c:1a:c3:91:31:8f:6e:d9:47:68:d9:
         c5:0d:9e:a1:72:f9:ad:2c:22:c3:a0:c3:e4:12:99:c6:4c:3b:
         2e:7e:dc:8a:0e:00:58:e1:99:86:71:5b:f0:3a:1b:21:4a:70:
         ee:fa:5f:29:7a:28:d2:3e:ab:10:1c:c9:bb:74:f0:c7:73:21:
         0b:17:0d:b0:93:91:83:81:45:d0:e6:09:34:1e:29:90:2b:e2:
         3d:7c:d4:25:53:01:60:94:72:f7:b6:dc:c6:19:5d:95:3b:16:
         41:91:e1:8a:1d:08:e8:94:8d:77:b9:db:e7:29:e0:ad:f1:d6:
         16:0c:18:1d:2f:02:84:c3:ba:c0:c7:74:6a:5a:df:de:12:bf:
         48:49:6a:f4:71:f1:ee:1f:63:26:c3:d5:24:c4:16:12:fe:0f:
         65:d6:0e:08:6d:07:9e:37:b8:a0:68:51:96:90:2d:cf:cb:26:
         cf:fe:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----