Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.cer
File:                     9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.cer (raw, json)
Hash identifier:          bHxKITgtTVRrGqK2Eq/QSIsGRaZGHUVMplu/yHmabow=
Subject key identifier:   F2:27:FD:D6:E2:78:4A:60:5B:01:41:17:78:23:6B:3C:49:13:72:44
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103241B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:12 +0000
Certificate not after:    Fri 17 Jan 2025 20:33:25 +0000
Subordinate resources:    AS: 265677
                          IP: 45.4.200.0/22
                          IP: 193.30.12.0/22
                          IP: 2803:81c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16983067 (0x103241b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:12 2017 GMT
            Not After : Jan 17 20:33:25 2025 GMT
        Subject: CN=9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:37:df:2d:f8:07:69:61:5e:82:3c:4d:3f:d6:
                    14:a7:e5:9b:05:1c:26:0b:8d:f3:8c:ca:3d:c9:f7:
                    cc:83:4d:bd:9c:cc:71:95:2e:26:11:f8:15:05:c3:
                    15:2f:b6:26:64:83:62:f8:75:eb:bb:a5:e1:d0:70:
                    35:1a:24:4e:d1:85:2f:36:08:1c:a5:78:77:ff:65:
                    21:5f:5d:54:3a:d6:8b:14:88:9f:fe:31:37:8d:1d:
                    7a:f3:52:ff:38:0c:4f:07:30:bb:e5:8b:65:ef:cb:
                    75:61:32:03:da:0e:17:c8:dc:cf:0d:4c:48:ba:c9:
                    a4:26:bb:40:fb:b8:aa:14:b9:c9:df:9c:f7:31:c5:
                    40:df:ff:2d:44:06:fe:a6:d3:01:87:25:66:df:65:
                    21:e0:23:42:3e:65:5d:63:2e:7f:55:be:23:20:de:
                    30:ab:1c:97:f6:02:6f:0f:af:40:0e:0c:ea:e1:63:
                    a6:22:5a:6c:59:eb:ad:a9:a0:81:0b:2f:d6:2c:d1:
                    f9:61:d9:35:95:6b:ec:53:47:40:e2:4b:a7:53:8b:
                    9c:80:d0:03:4a:49:4a:c3:5d:50:47:87:a3:7e:34:
                    c7:3a:d5:60:10:e9:a0:92:74:64:51:9d:5d:ea:14:
                    95:37:7d:0c:91:34:b0:05:05:59:b7:d3:86:b3:26:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:27:FD:D6:E2:78:4A:60:5B:01:41:17:78:23:6B:3C:49:13:72:44
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.200.0/22
                  193.30.12.0/22
                IPv6:
                  2803:81c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265677

    Signature Algorithm: sha256WithRSAEncryption
         4e:c6:96:ab:b5:12:67:ed:aa:48:ec:78:b9:de:95:c5:b3:ab:
         3f:72:98:10:71:c6:4c:71:84:86:21:97:b2:5f:a8:ae:19:a4:
         8e:f0:86:d3:b1:6a:ad:ad:d0:bd:79:a6:0a:0a:62:a0:1b:3b:
         d8:ed:4f:9d:ed:1a:3c:91:26:ae:43:fa:4d:b3:d6:6f:87:8c:
         57:65:59:fb:70:e6:bd:a6:e4:69:7d:38:7d:32:41:68:0c:5d:
         38:b2:fb:df:be:c5:c7:0b:93:d3:59:32:98:62:9e:bd:4f:c2:
         4a:28:66:95:85:c8:b0:23:69:15:9f:63:db:64:c2:cc:50:52:
         0e:87:2a:82:2c:8e:fb:cc:f8:e1:31:72:c1:6a:3c:ea:0d:df:
         4f:d4:5c:ae:f2:56:44:ff:3f:bc:dd:77:9f:54:ad:e7:63:11:
         b4:d1:02:2a:f5:3e:3f:4b:80:ec:d8:f6:19:35:54:7d:3d:7d:
         e7:e4:3e:7f:75:85:f6:ee:3d:b3:e4:73:e5:10:a4:33:e2:d8:
         bb:02:8e:3f:a7:67:f1:54:53:41:8d:01:b9:39:ad:92:cc:4a:
         7d:62:66:f3:e7:89:de:16:46:01:1d:7e:b7:9a:71:8f:f0:23:
         87:8e:86:78:e5:7e:58:8d:7c:72:af:13:d2:34:a9:c4:a3:6c:
         51:86:74:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----