Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1d28f003bf3d4549fc8d703d5766ee22681fdb4.cer
File:                     a1d28f003bf3d4549fc8d703d5766ee22681fdb4.cer (raw, json)
Hash identifier:          n3QDiVh8AiW7TEZUiZi4ST1lDj6/bvg9l7Nv9lRqy50=
Subject key identifier:   09:BD:30:26:1F:B0:3B:3C:61:C5:20:F5:9C:F3:1B:A3:57:D4:5D:83
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF522C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bf5d1ea4-01f4-494f-b3e2-d1d699ba80f1/a1d28f003bf3d4549fc8d703d5766ee22681fdb4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bf5d1ea4-01f4-494f-b3e2-d1d699ba80f1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:28 +0000
Certificate not after:    Thu 25 Jul 2024 22:19:22 +0000
Subordinate resources:    AS: 52406
                          IP: 200.115.185.0/24
                          IP: 2801:0:350::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15684140 (0xef522c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:28 2017 GMT
            Not After : Jul 25 22:19:22 2024 GMT
        Subject: CN=a1d28f003bf3d4549fc8d703d5766ee22681fdb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:79:91:33:73:80:8d:53:20:14:1e:a5:d3:48:
                    f4:37:00:41:2e:9e:59:cf:21:60:60:7a:cd:b9:2f:
                    c8:2f:de:95:01:4d:02:6a:64:e8:e0:a9:ca:1f:49:
                    0c:17:50:92:f0:c4:cc:48:44:39:64:a5:3d:a1:79:
                    21:2e:c5:a4:c7:5b:70:c5:98:d6:ea:be:da:a6:ba:
                    5e:e1:77:cf:20:98:05:e7:92:21:8d:f6:42:51:69:
                    f7:f2:e1:0b:1d:ae:6f:bd:34:99:c8:93:da:b9:50:
                    54:5b:e4:a3:aa:99:13:59:3c:a9:84:e9:32:41:40:
                    37:07:78:0a:15:c1:28:86:ec:2f:4a:0c:fb:3e:e7:
                    36:ce:0c:d4:b0:33:bc:f7:64:b4:e2:9e:f9:f2:ea:
                    e4:12:3a:8d:36:c1:4d:ec:16:ad:7a:ac:0b:84:d8:
                    f8:66:a7:e3:8f:d3:f6:e6:22:d7:ff:eb:c1:7c:f4:
                    2d:83:2e:e1:6e:25:fc:73:3d:31:63:4c:c5:08:9c:
                    87:a7:e6:d1:d4:c8:ce:22:31:3f:7d:26:ea:fd:d6:
                    b5:4e:21:b9:e4:da:09:8f:cd:46:fd:a4:2f:b0:38:
                    64:c6:25:af:1b:26:97:38:20:13:c1:b7:95:00:58:
                    20:e3:15:f2:f9:de:ba:9d:2d:0b:25:45:9e:35:fd:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BD:30:26:1F:B0:3B:3C:61:C5:20:F5:9C:F3:1B:A3:57:D4:5D:83
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bf5d1ea4-01f4-494f-b3e2-d1d699ba80f1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bf5d1ea4-01f4-494f-b3e2-d1d699ba80f1/a1d28f003bf3d4549fc8d703d5766ee22681fdb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.185.0/24
                IPv6:
                  2801:0:350::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52406

    Signature Algorithm: sha256WithRSAEncryption
         a2:fc:1f:9d:fd:26:c3:ee:66:52:73:1a:fd:7e:ef:92:65:57:
         5e:0e:c3:87:f3:fc:7c:c8:e5:96:8e:d0:e2:2a:e6:7a:66:92:
         1a:ab:8e:0a:ea:18:9b:70:4c:25:1c:33:34:51:1d:e5:b7:8e:
         47:50:d9:31:f8:9b:08:62:69:f0:ed:06:91:a6:64:fa:ec:13:
         ff:85:c6:ad:5d:fc:15:30:77:39:98:3f:57:28:95:63:11:97:
         56:89:8d:ff:04:eb:4b:64:e0:01:84:25:ce:a6:6c:a0:6b:d6:
         82:7a:8f:5a:6c:75:0f:d8:1d:7c:e2:4b:e7:35:7a:ef:98:7d:
         65:4b:b6:1c:5f:f2:47:8f:88:48:0b:11:10:8c:52:e7:85:01:
         d6:04:de:db:60:df:a6:19:ae:40:d7:34:00:d7:90:43:26:5d:
         e2:e0:dc:88:9f:28:30:05:88:c2:15:a2:04:d0:67:82:7e:c7:
         bb:7d:aa:9a:7b:e0:e1:d5:44:c6:13:08:95:1f:fe:26:9f:0d:
         fe:93:21:8f:8b:13:a0:d5:01:b9:51:a8:a3:c3:92:37:9e:c7:
         56:d6:e8:b7:5b:2f:e2:99:9a:d4:45:5c:dd:db:96:9e:c1:e2:
         97:62:70:f3:c5:e9:6a:bb:60:d5:83:3f:eb:84:c6:66:c4:09:
         ba:d2:55:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----