Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92f99288a81ebe400af2542cf1335efd001a7734.cer
File:                     92f99288a81ebe400af2542cf1335efd001a7734.cer (raw, json)
Hash identifier:          w+rXkswxpu4zv7OI3o96Mnt2bUdDYBplK4wUe5oI4Wg=
Subject key identifier:   48:EB:CE:32:EB:E8:D3:56:71:5F:74:23:E9:91:02:5E:16:3B:39:31
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB1AB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/92f99288a81ebe400af2542cf1335efd001a7734.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 03 May 2018 23:30:25 +0000
Certificate not after:    Sat 03 Feb 2024 05:00:00 +0000
Subordinate resources:    AS: 27670
                          IP: 45.5.172.0/22
                          IP: 2801:18:3000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14359217 (0xdb1ab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 23:30:25 2018 GMT
            Not After : Feb  3 05:00:00 2024 GMT
        Subject: CN=92f99288a81ebe400af2542cf1335efd001a7734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:93:49:fe:68:ad:4f:b1:28:09:69:fb:5a:b2:
                    13:b1:4e:b9:73:b5:09:dd:fb:d7:9e:44:8d:6b:69:
                    1c:2e:4e:4f:5a:78:cf:aa:f2:12:c9:89:db:3f:90:
                    3d:21:f9:10:d7:2d:62:e7:01:78:98:33:c2:bb:3f:
                    ed:21:45:ad:73:c6:fe:d8:12:b7:f7:65:13:24:fe:
                    cc:dc:14:cb:fd:0e:37:c8:bf:61:16:03:0c:4b:bc:
                    a6:be:a4:df:ac:94:8c:42:6f:5a:42:45:31:86:54:
                    ae:52:43:d5:ea:4b:b9:e9:1d:5f:2c:54:ae:06:b3:
                    51:09:39:40:fd:5f:8f:2f:79:9d:68:f3:be:a8:52:
                    8a:3f:f3:2a:77:86:a6:61:66:b2:0c:2c:37:68:2c:
                    0c:81:34:98:1e:61:58:c9:61:8f:22:6e:de:2c:f2:
                    a4:2d:22:a1:59:69:22:d8:bb:ba:d6:56:a7:94:f9:
                    e7:e8:b8:de:b6:62:a5:30:cb:e3:c6:58:50:3c:bd:
                    61:06:d9:9d:48:c3:42:05:78:49:06:90:47:77:82:
                    fa:bf:fc:32:00:f4:f7:06:fe:49:3a:05:31:5c:aa:
                    1b:b3:dc:49:db:d5:90:60:7b:91:e8:68:83:2e:e2:
                    b4:c7:b0:19:ce:21:ad:46:51:60:87:ce:36:f4:f1:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EB:CE:32:EB:E8:D3:56:71:5F:74:23:E9:91:02:5E:16:3B:39:31
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/92f99288a81ebe400af2542cf1335efd001a7734.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.172.0/22
                IPv6:
                  2801:18:3000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27670

    Signature Algorithm: sha256WithRSAEncryption
         bc:7b:1b:7c:ad:91:98:f5:46:1a:d1:a2:74:2c:94:91:86:0a:
         65:c5:b5:f1:e3:0d:ce:a0:f7:87:15:66:d7:88:8a:c2:d8:41:
         a2:9d:45:07:e0:6c:17:50:ec:c3:f9:29:77:7c:79:03:5d:0a:
         3b:0b:04:0c:f1:f0:53:24:38:a5:19:6b:60:cc:7c:a3:59:07:
         fe:97:89:0c:4e:d9:17:9b:0b:7c:02:7c:b6:26:33:56:03:74:
         1c:ae:71:40:55:0b:72:4d:5e:c1:af:a2:f3:8d:68:19:ad:f2:
         02:05:5f:7a:e2:04:fd:b9:cf:64:42:6b:a3:74:56:c6:ca:d5:
         7a:a5:2f:00:eb:f7:4a:4c:da:00:3c:c0:81:47:5f:e0:20:80:
         df:2b:11:fd:53:d3:44:d9:c3:b4:5f:8c:c1:af:99:72:e2:25:
         ba:76:49:85:bb:44:c0:14:11:b3:f0:e4:8e:d3:6b:2b:fd:ef:
         cf:f3:93:c2:46:3e:13:b3:d3:b2:ab:e4:39:44:df:dd:87:c4:
         7e:3f:99:8d:f9:c7:ad:0c:44:b6:6e:1d:e2:73:4b:5d:88:39:
         0f:46:4b:80:25:c7:c4:ad:f5:d4:ef:c2:04:f6:12:bc:6c:eb:
         ad:f4:5c:da:29:8d:90:e6:d8:0f:09:4b:62:ac:75:6d:43:94:
         b2:b1:09:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----