Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer
File:                     9d25be9947afcb39fce110f05b5d8afd69a92382.cer (raw, json)
Hash identifier:          IkodXsE6cyDHHI+sK1nn0b7irG+eLktX7mqvPDHT9Gs=
Subject key identifier:   A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F150FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/9d25be9947afcb39fce110f05b5d8afd69a92382.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:17 +0000
Certificate not after:    Sat 10 Aug 2024 23:31:34 +0000
Subordinate resources:    AS: 265838
                          IP: 45.224.116.0/22
                          IP: 2803:e220::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15814911 (0xf150ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:17 2017 GMT
            Not After : Aug 10 23:31:34 2024 GMT
        Subject: CN=9d25be9947afcb39fce110f05b5d8afd69a92382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:d1:a3:06:a2:ec:ff:4a:34:86:d3:be:72:
                    4f:32:f9:8e:85:8a:2d:c2:03:56:93:d9:55:2b:ee:
                    35:82:79:a0:30:be:ef:b0:e5:ac:b8:10:e3:59:0b:
                    a1:01:fc:df:b6:42:88:02:fb:56:9c:7f:d8:a4:a9:
                    c5:a6:bf:29:e6:dc:3d:a7:a1:01:dd:b6:18:2a:49:
                    6d:88:89:6b:e3:2e:dc:ac:e4:54:b3:6e:62:6d:a9:
                    17:53:88:96:f6:fa:a9:50:64:38:d6:2c:81:71:c9:
                    8c:d7:3e:55:f6:56:2b:0e:92:4b:83:31:c5:bb:71:
                    88:99:96:86:e5:4d:9b:bd:7a:15:51:1c:79:11:50:
                    b2:e8:0c:b4:81:f3:5b:41:e0:ea:8d:80:11:27:08:
                    86:65:38:9a:25:9e:05:b4:df:83:83:ef:5d:72:6a:
                    e3:bd:a2:d3:65:f8:e2:30:a7:b2:7d:81:41:1e:49:
                    dc:00:e9:76:2f:80:52:50:a9:69:57:53:6b:c1:40:
                    e4:7e:c4:ca:a8:da:f6:c1:4b:49:a9:dd:c1:1d:8b:
                    ee:ae:0e:5d:0f:20:dd:97:10:8c:7b:95:92:14:8c:
                    e4:cd:f6:7a:60:4c:b0:7d:95:24:18:a5:48:29:52:
                    0a:12:49:2f:79:69:66:ba:12:e8:79:a0:41:a9:69:
                    17:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/9d25be9947afcb39fce110f05b5d8afd69a92382.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.116.0/22
                IPv6:
                  2803:e220::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265838

    Signature Algorithm: sha256WithRSAEncryption
         65:cf:f2:cd:cf:96:7a:f9:df:da:12:3f:09:9b:b6:41:db:e7:
         9e:22:50:2b:9d:87:ea:7a:1a:1b:41:b9:cf:00:d8:2a:6b:78:
         bd:14:ea:67:0c:a7:4f:53:8c:e3:49:7d:33:a9:f1:ce:6b:3b:
         12:97:cc:cd:fc:c4:69:7a:50:99:44:be:e1:6d:b4:5e:09:21:
         5f:c8:a8:75:51:ff:0a:cf:74:32:ac:66:3a:4f:3d:94:66:c8:
         83:29:c4:46:1a:f9:78:e7:04:65:6b:53:48:76:ea:02:6b:8a:
         37:4e:e8:2a:40:c6:fa:b1:08:1f:d1:12:59:ed:f3:66:09:7b:
         54:04:ee:f3:32:0d:53:42:d5:b7:72:c0:da:35:2a:0d:9f:66:
         61:32:9b:f4:a4:fe:d2:70:55:4a:6e:50:27:f0:a9:73:07:a3:
         db:ce:4a:03:63:e4:df:23:de:9c:6f:7c:63:66:db:15:78:31:
         94:64:81:40:d8:20:43:2e:a6:9c:89:e0:9d:89:05:ea:f1:7b:
         56:e0:9f:23:bd:49:8e:e7:ce:e2:d2:10:c2:a9:6a:8b:77:97:
         0f:3b:5c:b2:f4:ed:44:f1:8a:87:bb:24:27:8c:89:1c:4d:9c:
         a4:2d:b3:ae:25:9c:aa:04:be:d4:98:0f:70:f5:df:64:0d:d7:
         4f:64:1f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----