Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a548a805009d1d1eab43b72b15c0622aacc534d8.cer
File:                     a548a805009d1d1eab43b72b15c0622aacc534d8.cer (raw, json)
Hash identifier:          B0Peu3psB60+JQsouDe24dio+NK0sBHA+mJv/2cQl/I=
Subject key identifier:   F9:95:38:A1:62:A0:E2:44:3A:7B:41:01:9B:B2:4E:87:EA:95:EE:05
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E30CED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/847f61ff-3358-4716-a276-3e640ce03763/a548a805009d1d1eab43b72b15c0622aacc534d8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/847f61ff-3358-4716-a276-3e640ce03763/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:48 +0000
Certificate not after:    Wed 01 May 2024 22:16:43 +0000
Subordinate resources:    AS: 263711
                          IP: 201.150.28.0/22
                          IP: 2803:f980::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14879981 (0xe30ced)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:48 2017 GMT
            Not After : May  1 22:16:43 2024 GMT
        Subject: CN=a548a805009d1d1eab43b72b15c0622aacc534d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:45:ea:cc:77:27:0d:03:a3:80:48:73:d4:51:
                    89:7a:3e:26:79:0f:54:d0:cb:cb:c0:04:38:55:71:
                    cb:2c:15:e0:8e:e5:d0:a9:a7:4a:ab:ee:25:c4:23:
                    42:89:64:6b:64:1a:15:b0:bd:0b:87:6f:66:73:8b:
                    20:ae:4f:1c:36:02:36:47:04:3d:cb:e1:27:3a:5c:
                    f3:a2:8b:2f:d7:44:44:14:a5:9b:2e:b2:9e:d9:ae:
                    e0:71:de:cf:2e:09:81:6c:65:df:ed:5e:70:04:7e:
                    f6:57:0b:e6:a3:5c:60:51:3a:e7:64:37:bc:25:23:
                    a7:34:a3:45:ec:2e:89:d6:d9:e7:d7:b1:5f:ff:9c:
                    4c:12:9c:a8:03:b8:e3:eb:f7:3d:7e:e4:d7:b1:17:
                    3b:93:d1:d8:8f:68:bd:5f:ed:65:a9:1d:7e:57:c5:
                    a2:71:9f:5c:83:64:9e:57:fa:7b:43:cd:77:ef:af:
                    75:82:3c:6d:76:0c:29:49:15:67:f0:10:68:d6:06:
                    09:87:ba:1a:5e:82:c4:f3:e5:4d:d8:e4:cb:26:2e:
                    62:2f:50:40:ec:45:46:9c:d1:4d:be:71:f6:40:bf:
                    f3:de:26:ba:ef:7b:1f:d1:cf:da:9f:11:66:dd:4f:
                    c5:26:a1:bd:33:c3:94:be:a2:47:8f:8b:e5:00:8d:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:95:38:A1:62:A0:E2:44:3A:7B:41:01:9B:B2:4E:87:EA:95:EE:05
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/847f61ff-3358-4716-a276-3e640ce03763/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/847f61ff-3358-4716-a276-3e640ce03763/a548a805009d1d1eab43b72b15c0622aacc534d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.28.0/22
                IPv6:
                  2803:f980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263711

    Signature Algorithm: sha256WithRSAEncryption
         4d:d4:e6:8f:0f:cf:3d:1b:f5:26:ba:68:c0:f8:b7:17:a9:a2:
         39:75:d8:ae:1f:29:a6:84:a6:43:bb:0d:1e:f9:d0:7e:9b:29:
         59:8c:b5:0f:fb:14:73:a6:53:0e:75:fa:73:fe:fa:22:47:80:
         e0:09:cf:07:04:e2:35:31:da:45:ce:84:97:c3:66:ab:07:ac:
         26:f5:a4:1b:06:28:78:92:c0:e5:79:98:7b:6d:58:df:54:0a:
         ee:a7:58:56:d0:d6:7c:60:96:35:d6:36:b1:42:33:53:a4:e3:
         95:84:e1:9b:d7:e6:df:d5:57:c3:03:09:7b:8d:74:3b:3a:de:
         30:25:5a:f8:a6:a0:96:08:c7:50:57:7e:a3:e4:f0:9f:6c:a6:
         e4:d3:f5:2f:ee:a8:fd:f6:0d:52:40:61:bb:d5:91:37:b5:22:
         96:ef:7c:07:fc:68:94:3e:0c:34:01:4e:93:1a:e3:12:9a:09:
         72:dd:37:ef:d3:d2:c7:94:02:83:a1:d6:93:2b:97:91:3e:12:
         b2:8a:b9:1c:f5:2a:93:e1:d9:4c:41:cc:49:aa:85:53:99:0d:
         42:5e:ce:38:32:3b:ef:37:1b:34:ec:2b:86:00:4f:ca:dc:79:
         01:cb:e7:37:59:df:a2:45:48:e5:c6:b8:d3:2b:93:2a:ec:d9:
         eb:04:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----