Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99a93fa2e48a3eca74da21b5331c098de8887574.cer
File:                     99a93fa2e48a3eca74da21b5331c098de8887574.cer (raw, json)
Hash identifier:          IhtOD1LZ/iDWR/LiclZLJB9MISz5Mv2tHnLy5dNUdMw=
Subject key identifier:   D4:95:B8:68:24:4E:CF:A4:7C:1C:39:B2:63:E2:A8:29:D5:A6:2A:E7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD40AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/abae610d-1b6f-43fb-97e5-7551cce42760/99a93fa2e48a3eca74da21b5331c098de8887574.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/abae610d-1b6f-43fb-97e5-7551cce42760/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:58 +0000
Certificate not after:    Thu 29 Feb 2024 06:00:00 +0000
Subordinate resources:    IP: 2801:14::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14500013 (0xdd40ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:58 2017 GMT
            Not After : Feb 29 06:00:00 2024 GMT
        Subject: CN=99a93fa2e48a3eca74da21b5331c098de8887574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:f2:e5:37:42:74:ad:2a:cf:a8:31:6c:6c:
                    68:cd:ac:06:d4:cf:40:54:81:d6:6d:f5:ac:fe:1d:
                    b6:5a:ba:c5:c0:b4:c5:a2:ad:58:89:91:e6:00:35:
                    2c:af:50:c4:d8:be:cf:34:30:b9:5a:a1:98:f1:a2:
                    d5:76:ed:a9:15:a0:bf:fd:47:9a:83:88:cf:2b:58:
                    cd:0a:7a:b4:c4:df:30:f7:0d:3c:27:b9:e3:1d:44:
                    0d:4c:f6:4d:5a:f6:13:30:7a:19:69:65:f2:05:95:
                    25:b5:d7:b0:3b:1c:02:32:81:2d:4e:c7:85:35:6f:
                    84:24:c5:66:19:f5:f4:d2:ee:0b:59:3c:ab:31:c5:
                    1f:23:0f:c6:b0:e5:76:2a:09:d8:6f:e8:99:76:69:
                    aa:17:7c:0d:6b:cd:fa:8d:3f:b1:4b:92:51:42:8d:
                    6b:a2:08:4c:45:2a:8a:6c:4e:27:d2:43:7b:60:ce:
                    3d:30:d6:08:11:64:8e:7f:1b:f8:25:b9:e1:cc:00:
                    ae:c9:6a:bd:19:19:fc:7f:92:47:6c:f2:c4:73:18:
                    82:32:f7:fa:18:25:83:2a:07:40:92:4b:67:c1:bf:
                    55:e6:1f:3d:e4:b9:fc:6a:d1:ff:b5:3a:b7:84:80:
                    86:b8:2e:d5:e4:c4:97:88:aa:34:d7:d2:8a:8d:04:
                    14:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:95:B8:68:24:4E:CF:A4:7C:1C:39:B2:63:E2:A8:29:D5:A6:2A:E7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/abae610d-1b6f-43fb-97e5-7551cce42760/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/abae610d-1b6f-43fb-97e5-7551cce42760/99a93fa2e48a3eca74da21b5331c098de8887574.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:8a:ee:3f:0f:2f:bd:77:b1:ad:ac:8c:e9:6c:53:1c:a9:89:
         e8:31:10:ef:99:63:b8:bd:63:dd:97:de:23:d5:9a:12:87:25:
         c7:79:7f:01:f3:ad:ed:6d:09:b4:a1:cd:e7:ae:8d:9e:c1:d1:
         76:2f:0b:03:39:e1:00:cb:1d:58:5f:84:3c:80:dd:a0:bd:f8:
         b8:fc:cd:ea:89:77:5f:1b:95:46:12:a5:7f:8e:88:c7:36:fb:
         c1:23:d0:ab:0f:ef:80:b1:c0:8d:82:a7:19:58:e9:5b:1d:de:
         80:fe:c9:ac:d7:00:c3:70:37:0f:d6:f8:78:5e:74:11:0a:10:
         f8:41:44:1c:cc:ab:13:39:ee:f2:3a:a7:99:84:c6:cc:40:2c:
         9d:63:b0:d1:b2:f2:80:11:bc:de:44:13:26:fd:ee:bb:87:d3:
         6d:88:1d:07:14:f0:b2:cd:73:ec:cc:d9:93:9b:6a:c7:77:42:
         5e:1b:c3:fc:ae:3e:40:6a:ec:e5:d3:e0:12:dc:3a:71:26:6a:
         c1:25:a6:6d:3a:1c:21:a6:ea:d5:28:27:43:f9:c9:b9:9f:64:
         49:00:47:ea:a7:1f:c7:97:cf:e0:54:f5:19:f1:ea:05:0a:4d:
         4f:d6:47:b3:ec:e5:0a:79:be:6f:fb:81:a2:77:2e:15:f1:80:
         b9:4e:95:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----