Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fcf3302c6615af1974dce9c8e8304499ee53acc.cer
File:                     9fcf3302c6615af1974dce9c8e8304499ee53acc.cer (raw, json)
Hash identifier:          RQJ+RNBpbg8n0eXibqf/CCHdNQnQc0ZizyjPvXbEC6Y=
Subject key identifier:   0C:2B:E8:0C:8A:F6:87:11:C5:E1:13:00:62:89:C4:8B:A8:1F:E8:18
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0B4AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/9fcf3302c6615af1974dce9c8e8304499ee53acc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:42 +0000
Certificate not after:    Sun 04 Aug 2024 23:36:48 +0000
Subordinate resources:    AS: 264789
                          IP: 168.197.240.0/22
                          IP: 2803:38c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15774895 (0xf0b4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:42 2017 GMT
            Not After : Aug  4 23:36:48 2024 GMT
        Subject: CN=9fcf3302c6615af1974dce9c8e8304499ee53acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:8e:80:3e:d5:a4:07:98:74:03:df:7c:df:
                    04:85:cb:04:26:ef:7f:31:99:2d:12:9d:eb:59:2b:
                    e9:45:30:bd:a2:89:fb:71:9f:78:42:64:92:fe:d7:
                    ae:2d:e3:ad:0d:66:e3:f2:6b:5e:d8:0f:58:49:80:
                    1d:45:b3:1f:f6:6f:f2:41:98:cc:d1:6e:9b:5b:12:
                    67:77:18:dd:86:ee:b9:7e:37:ad:16:a3:2b:24:84:
                    f2:af:c6:09:65:e4:24:e3:b8:b3:9f:41:08:cd:63:
                    ef:b8:55:9b:2b:8f:f3:60:63:6c:b4:34:21:37:d5:
                    50:00:65:87:a3:60:62:ad:8a:72:05:06:82:9b:c0:
                    d5:c7:b7:cb:0d:e7:d8:2a:96:08:e6:96:4a:60:16:
                    2f:a1:a5:e9:e0:38:61:e6:f4:2a:22:6b:cd:93:73:
                    ba:d0:7e:4b:fd:91:53:56:b9:e4:00:4e:5e:ce:38:
                    ee:b2:5a:8a:72:6d:78:3a:c2:08:c2:25:78:bb:e1:
                    3f:23:76:80:8f:71:28:bd:6d:8b:a2:9a:6b:96:b8:
                    67:dd:ee:0e:b3:9c:a8:34:de:76:55:34:70:f4:c9:
                    d9:00:10:61:93:ec:dd:cd:56:60:ef:04:e6:32:63:
                    88:7f:7a:ef:1d:9c:78:6b:70:a6:5c:0a:6a:87:1a:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2B:E8:0C:8A:F6:87:11:C5:E1:13:00:62:89:C4:8B:A8:1F:E8:18
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/9fcf3302c6615af1974dce9c8e8304499ee53acc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.240.0/22
                IPv6:
                  2803:38c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264789

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:fe:b1:4d:5a:1a:d3:2e:6d:4e:a7:96:bc:40:bb:60:bb:
         cf:5c:01:34:00:cf:83:3c:89:70:d2:e6:02:f6:93:68:76:3a:
         d9:dc:81:3f:99:77:ff:8c:c3:ff:85:e4:15:48:de:41:67:e5:
         09:38:b7:ca:5d:8f:84:04:9a:e6:ea:fe:95:a6:67:e3:22:8f:
         79:7b:d2:5e:65:8d:ae:2f:78:9b:76:54:29:c8:8d:13:39:f8:
         09:a3:32:bc:86:65:bf:85:75:24:96:e0:22:de:07:34:5c:ea:
         27:5f:9c:24:f6:dd:44:20:57:17:83:78:d0:bf:bb:16:57:1a:
         ec:10:26:88:03:1d:8e:86:34:1b:4c:7e:47:eb:05:5d:5e:12:
         07:fe:fd:07:66:2f:75:94:0e:c8:d2:ee:ca:03:e0:3a:56:21:
         bd:c7:17:c6:17:fb:01:4a:e0:41:ef:1e:f3:9c:d6:30:d9:dc:
         21:27:ab:83:91:74:30:c5:1a:03:21:c2:35:f3:d9:59:99:84:
         54:81:81:07:18:cf:b5:51:b8:25:ac:75:20:86:17:f6:14:67:
         22:12:84:07:51:d5:59:25:c7:4c:10:3a:ae:c2:f7:1d:17:a1:
         8b:f7:52:fe:12:7e:69:81:a6:7d:a3:c0:60:c3:56:a5:92:28:
         b8:dd:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----