Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a15b01c2a8902bf345199fd88a365f092418a1fe.cer
File:                     a15b01c2a8902bf345199fd88a365f092418a1fe.cer (raw, json)
Hash identifier:          HuRRVXyUldW+vjkVVap0riJ2TaBSaslRBA94Fy1NMNI=
Subject key identifier:   BB:FC:F1:42:C4:C7:BA:5D:1C:4B:C6:3D:85:FB:B3:90:EF:19:EE:06
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0D0F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/a15b01c2a8902bf345199fd88a365f092418a1fe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:37 +0000
Certificate not after:    Sat 13 Jul 2024 21:09:33 +0000
Subordinate resources:    AS: 265837
                          IP: 45.70.88.0/22
                          IP: 2803:e420::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14733556 (0xe0d0f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:37 2017 GMT
            Not After : Jul 13 21:09:33 2024 GMT
        Subject: CN=a15b01c2a8902bf345199fd88a365f092418a1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:fa:d2:5b:62:ff:55:4a:e2:e1:66:67:ba:
                    30:a2:2d:5e:93:40:df:7c:94:e6:3d:52:3c:21:29:
                    09:89:3b:b5:e3:8c:ee:45:d9:03:8d:ca:75:7b:72:
                    80:60:db:dc:af:e4:17:cb:af:98:8a:64:86:1f:a8:
                    00:b5:87:28:56:1d:2b:7a:53:ce:fe:60:c3:08:06:
                    ce:71:af:cd:f3:9b:c0:af:14:74:cd:49:a1:f9:d7:
                    f2:81:0b:e2:ae:64:6e:cc:a6:2c:a4:fd:5e:ab:ee:
                    b2:1e:4c:45:e2:53:cc:ad:5f:4b:a3:0b:05:79:c4:
                    4c:4a:ac:84:20:9e:7d:f8:41:9c:3a:1f:5c:7e:a4:
                    86:0b:88:bf:dc:1b:9b:82:5a:b5:dd:13:f9:8b:b2:
                    e4:ca:2b:17:3e:5b:ce:b3:0e:15:3a:0c:0a:1b:a8:
                    96:50:cc:69:c1:34:11:99:4e:66:19:8e:8f:61:d7:
                    44:df:4a:18:87:7e:f3:f4:1f:65:22:0b:d3:92:e3:
                    4d:22:37:26:45:fb:78:7d:04:38:9c:77:2d:7f:8f:
                    5c:02:a3:d2:92:56:86:f0:bc:82:da:06:f0:2e:6e:
                    5a:94:19:52:3e:29:69:57:cc:a0:cf:48:b1:b6:e7:
                    4e:b1:f0:ec:9d:78:45:1f:aa:43:67:6b:5e:af:9b:
                    12:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FC:F1:42:C4:C7:BA:5D:1C:4B:C6:3D:85:FB:B3:90:EF:19:EE:06
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/a15b01c2a8902bf345199fd88a365f092418a1fe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.88.0/22
                IPv6:
                  2803:e420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265837

    Signature Algorithm: sha256WithRSAEncryption
         b1:5f:0d:da:dd:c0:41:e0:1d:b0:23:e3:61:f6:79:e4:8f:9b:
         76:26:ef:41:d9:1c:dc:51:86:61:86:06:8c:98:64:91:99:10:
         38:b7:f5:bc:30:a1:8d:7c:ac:33:1b:01:ee:be:ce:7d:62:75:
         95:9b:9f:13:6a:74:79:9d:95:74:2a:5e:41:1a:b5:1a:b6:78:
         6d:7e:ce:ce:05:37:c0:ca:f5:15:33:08:cd:08:e6:c6:fa:dd:
         3b:a0:c3:43:69:c4:f8:d6:da:ef:d8:77:0f:d8:0b:9f:e3:50:
         1e:9b:d9:40:b7:87:c7:2a:bf:f9:fb:13:50:8d:c3:7f:20:f2:
         42:0a:6d:f1:cc:9a:3b:45:f5:2a:cc:91:26:a4:80:5b:09:84:
         84:54:2f:59:c6:c7:52:37:b5:84:49:da:bd:06:23:07:c5:d6:
         a5:17:39:01:c0:f4:0d:ee:51:2b:12:2d:7e:3f:af:2f:f2:1f:
         1f:67:99:ba:25:d7:6b:d7:e5:1a:4f:7a:e9:97:54:93:14:d4:
         3b:35:29:af:79:2f:e2:86:34:49:62:40:57:14:16:53:9d:da:
         74:f6:48:66:ee:cf:83:69:d0:47:eb:87:79:d6:91:5a:36:2e:
         3b:d2:91:23:75:46:4e:18:d3:4f:e5:7e:14:77:1d:2b:86:18:
         f3:a6:7e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----