Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9155d1ceb3948af4b1d280927ef77d604a5582eb.cer
File:                     9155d1ceb3948af4b1d280927ef77d604a5582eb.cer (raw, json)
Hash identifier:          QN44DbfsWOfDUo4rOEEhbMzsRnOt+0EHMmmDnleKEpw=
Subject key identifier:   EB:F2:97:60:6F:53:C8:20:C1:F7:B9:0E:EE:98:A2:A8:EA:8F:87:6A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D80D24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/9155d1ceb3948af4b1d280927ef77d604a5582eb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:29 +0000
Certificate not after:    Mon 25 Dec 2023 05:00:00 +0000
Subordinate resources:    AS: 264676
                          IP: 168.205.8.0/22
                          IP: 2803:ed40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14159140 (0xd80d24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:29 2017 GMT
            Not After : Dec 25 05:00:00 2023 GMT
        Subject: CN=9155d1ceb3948af4b1d280927ef77d604a5582eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8f:77:36:76:01:17:0f:a0:30:03:dc:74:b4:
                    c4:a0:7f:da:ba:80:e1:07:f3:01:45:8a:7b:b7:68:
                    19:51:ce:60:70:80:86:90:63:21:d4:c6:7c:1f:14:
                    c7:ac:39:f4:0d:1d:c3:78:61:e9:54:cc:f5:43:ef:
                    56:b0:5f:16:ba:47:63:78:40:90:84:49:c6:42:96:
                    51:e8:cb:9a:e7:f2:e0:ff:fc:81:43:dc:09:d3:72:
                    51:72:38:a0:eb:ee:23:63:e6:59:60:89:1a:73:43:
                    c7:04:ef:76:e9:e6:7f:5f:e3:2c:67:61:e4:06:08:
                    fb:bf:6e:ca:0c:22:66:5a:f7:e4:c4:c5:a1:2a:88:
                    e0:b0:ce:20:60:73:d1:f6:5d:e5:f1:76:bf:a5:88:
                    24:f6:93:01:7a:66:a0:93:5c:ad:13:2e:db:9b:fe:
                    e1:1b:ed:11:7b:ea:ef:ec:32:fa:f1:8e:57:bc:aa:
                    c4:58:7f:62:cf:a8:60:e6:d4:a4:87:5e:4b:76:02:
                    7e:54:e3:1f:37:c3:d1:8b:15:71:6a:17:65:68:b9:
                    d4:a3:bd:0b:83:e8:e0:8d:66:32:1d:50:cf:09:55:
                    56:76:e5:ed:5a:22:66:ae:28:79:96:31:48:29:d4:
                    f2:9b:94:b4:fa:09:3a:8a:70:23:2b:83:ce:db:79:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F2:97:60:6F:53:C8:20:C1:F7:B9:0E:EE:98:A2:A8:EA:8F:87:6A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/9155d1ceb3948af4b1d280927ef77d604a5582eb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.8.0/22
                IPv6:
                  2803:ed40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264676

    Signature Algorithm: sha256WithRSAEncryption
         b1:69:22:a4:6e:a7:6c:9b:c6:54:70:62:07:15:a0:f8:8f:94:
         4c:a2:93:77:42:42:10:77:39:48:95:71:ae:57:83:fc:91:19:
         e0:08:ff:c9:c8:19:8e:7a:68:f8:b7:8f:20:5f:07:26:42:e9:
         65:69:44:31:a9:91:c0:39:7c:85:bb:74:f5:82:28:cc:37:cb:
         25:83:de:1e:6f:99:d9:54:cb:65:c6:ae:fe:35:f2:76:fc:cd:
         25:a8:b9:6b:78:d2:29:3f:1f:b8:8f:b3:37:7d:6a:4e:76:d2:
         ce:0a:f9:c3:3d:7d:27:b1:38:6a:5d:77:47:d8:3c:8b:ec:cb:
         d9:da:39:0e:20:14:c9:95:2b:e6:0c:f5:a7:e7:67:98:9d:3e:
         36:dc:de:1e:9a:6a:46:69:f2:b7:86:a1:56:cb:51:81:6e:a7:
         20:2b:f8:73:e7:28:23:90:5e:a7:59:e0:4c:b9:10:55:55:9a:
         5b:93:b4:ea:a2:3a:fa:9e:7f:e6:2a:d9:1d:42:84:e8:7a:f6:
         ac:82:3f:78:bd:22:51:7d:66:e3:ae:47:2f:ea:ff:d5:da:66:
         f8:c2:f0:ae:d3:54:3d:c5:4b:49:9c:07:9c:e2:3b:fd:d0:6b:
         dc:1b:0f:0f:1c:f9:ad:ac:00:07:bc:39:05:fb:5a:60:5f:d5:
         a3:93:b5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----