Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer
File:                     95f676acfc94ecb8278d82cca69a83a7b785bd05.cer (raw, json)
Hash identifier:          56Iur7BSkgfVlwvYKVNIARLk3a1jlsIVjHo6BtQqbDA=
Subject key identifier:   66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA0001
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/95f676acfc94ecb8278d82cca69a83a7b785bd05.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:22 +0000
Certificate not after:    Sun 16 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 27696
                          IP: 181.189.224.0/19
                          IP: 190.5.64.0/18
                          IP: 2803:7200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15335425 (0xea0001)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:22 2017 GMT
            Not After : Jun 16 15:00:00 2024 GMT
        Subject: CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:7f:8f:5c:b1:62:74:b1:0b:84:9c:09:53:
                    8d:95:ad:42:d6:82:1c:0f:29:40:50:55:03:f7:05:
                    25:2c:a7:8d:0e:81:07:51:ff:83:f7:9e:ee:76:38:
                    1d:5e:78:dd:ec:3e:62:d3:04:51:e6:a3:df:00:a5:
                    0c:5e:28:14:90:c9:ef:2e:87:e0:b2:0d:cf:64:6c:
                    cb:7c:ec:19:af:a9:fc:ca:db:37:7a:93:d5:95:ca:
                    aa:b4:bc:17:80:d8:09:13:7a:c7:a2:0f:51:61:6a:
                    4c:28:10:fb:a3:0a:bb:23:47:5d:7a:f1:53:f4:fe:
                    84:85:79:14:29:53:a8:6c:64:1f:08:57:fd:e1:6e:
                    aa:87:d9:69:b3:91:88:2b:ff:69:57:9c:16:07:2e:
                    53:a9:aa:6d:ba:94:57:2b:b9:57:76:4e:ef:3a:f5:
                    23:1b:69:74:e3:f3:fe:e9:8c:2c:fa:7c:a3:3a:6b:
                    56:73:2c:08:c0:c3:7c:0e:84:34:f0:15:9b:49:f9:
                    e5:a3:c0:97:b7:64:7c:59:54:e5:1d:4f:b2:1c:ce:
                    e3:36:09:ca:c9:4c:03:79:25:03:2e:de:cf:3f:26:
                    d1:b9:be:18:b7:83:6f:c5:84:06:be:f0:0d:eb:2b:
                    b3:6d:ce:10:b0:69:8f:98:5a:80:de:a9:16:0e:15:
                    bd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/95f676acfc94ecb8278d82cca69a83a7b785bd05.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.224.0/19
                  190.5.64.0/18
                IPv6:
                  2803:7200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27696

    Signature Algorithm: sha256WithRSAEncryption
         ae:b5:18:03:26:a2:da:a6:ec:f0:bc:ec:87:4d:31:46:5a:43:
         86:7e:15:d0:81:85:b9:d2:37:07:e8:77:4b:04:c5:5f:57:58:
         8a:e4:01:b2:a9:ad:95:5a:cf:1b:2b:46:36:01:ad:fa:d5:48:
         11:d2:eb:05:05:23:d4:2d:ef:66:f5:79:37:1e:56:fa:30:33:
         d9:a8:16:76:df:76:fb:4e:60:02:72:c5:11:3d:fb:62:dc:b5:
         89:5f:eb:b2:f6:1d:b6:02:a7:dd:fb:88:fe:1f:52:1a:20:88:
         5d:5a:37:1b:00:70:2f:14:57:13:7c:a5:b3:8d:4f:35:0d:a5:
         d7:22:89:4a:fb:41:02:c4:c0:34:68:0e:0f:4e:b1:16:c0:fa:
         3f:bd:ab:f1:5a:e3:58:2d:65:ee:bf:cf:49:41:17:19:85:9b:
         a5:3e:fa:24:d0:38:f1:0d:9f:9a:f9:6b:45:99:dc:79:6c:ea:
         0b:17:07:86:6e:90:16:f8:a9:4d:dc:d0:69:4e:6d:be:a3:9e:
         6e:b8:e2:9c:91:50:fa:5f:b2:6f:14:95:4b:6e:0d:21:6b:01:
         f4:98:63:ce:51:36:58:63:b0:cf:d6:fc:69:47:13:fb:6d:54:
         2a:ad:40:30:87:8f:5d:8c:4f:fe:de:2f:52:e0:2e:92:3e:ef:
         48:cc:2d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----