Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6909b0665be941391b3b1470ca2466a28b38c4a.cer
File:                     a6909b0665be941391b3b1470ca2466a28b38c4a.cer (raw, json)
Hash identifier:          +xgbqpjtXC6G9u6Ua3qMafK025gbIZ6rhyQRKgIoe5k=
Subject key identifier:   56:C1:69:F6:A3:DC:E4:9F:F7:C1:46:AF:9F:37:D1:CC:BA:98:73:20
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8024C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/743ad174-889b-4dd2-beac-af3f0e4eb73e/a6909b0665be941391b3b1470ca2466a28b38c4a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/743ad174-889b-4dd2-beac-af3f0e4eb73e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:54 +0000
Certificate not after:    Sun 02 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 264647
                          IP: 143.0.102.0/23
                          IP: 2801:1d0::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15204940 (0xe8024c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:54 2017 GMT
            Not After : Jun  2 06:00:00 2024 GMT
        Subject: CN=a6909b0665be941391b3b1470ca2466a28b38c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:75:85:8a:56:7e:ff:7d:29:28:25:a9:ab:6e:
                    f3:f3:58:c4:7c:b7:08:ca:77:e5:0e:fb:a1:5a:61:
                    ef:a8:cc:71:7a:06:41:0a:85:1e:f7:5b:cc:32:e6:
                    df:e7:1c:18:d7:c0:2a:8c:04:89:a7:db:c5:0b:42:
                    78:1d:6a:4a:e2:de:43:f6:51:3b:24:9e:75:67:1c:
                    12:a3:47:03:cf:d7:dd:34:89:b0:bd:55:48:e9:db:
                    64:d6:1a:ee:4c:bf:f7:6c:f2:d7:b4:5e:e3:51:fe:
                    f2:2b:c0:6a:1f:5f:91:9c:0a:d5:c7:c6:8a:b1:19:
                    d9:05:35:59:79:54:1e:a5:7f:57:54:35:09:9a:64:
                    45:38:e5:80:af:77:9f:55:18:e5:9d:96:02:6e:f4:
                    ef:f0:c9:e7:94:5f:87:fc:c4:32:48:4f:ee:3c:cb:
                    23:0e:49:f1:09:be:85:84:5e:e2:2c:20:64:2e:ed:
                    08:9d:8c:bf:fd:d4:e5:55:c3:54:59:16:e3:d8:0a:
                    b5:16:dc:cd:7c:66:24:85:55:b0:7e:52:c6:34:b2:
                    49:1b:23:10:7d:d3:e0:d2:ee:7b:dd:5b:ab:74:68:
                    10:c3:ea:34:73:98:cf:74:84:00:5d:be:b2:ed:10:
                    2b:f1:e0:0e:fc:ef:8e:ae:5c:e3:e3:7b:a9:1b:84:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C1:69:F6:A3:DC:E4:9F:F7:C1:46:AF:9F:37:D1:CC:BA:98:73:20
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/743ad174-889b-4dd2-beac-af3f0e4eb73e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/743ad174-889b-4dd2-beac-af3f0e4eb73e/a6909b0665be941391b3b1470ca2466a28b38c4a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.102.0/23
                IPv6:
                  2801:1d0::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264647

    Signature Algorithm: sha256WithRSAEncryption
         76:34:e5:e4:41:6f:86:4f:db:f7:1f:02:54:0d:39:28:e7:4d:
         2c:c8:72:f4:e3:70:dd:a3:51:6d:e8:a4:de:cd:21:7f:20:59:
         d7:1d:17:28:9f:38:1e:8f:5e:51:80:25:f4:4f:3f:54:14:fa:
         c4:72:52:4d:a9:b1:95:c6:95:0f:e3:6a:e4:1c:32:2a:5b:c1:
         0c:32:dc:aa:a8:49:09:53:76:75:93:a3:3a:97:4a:32:e2:bb:
         55:e8:b9:da:b2:0a:d0:8e:c3:8f:0c:99:b3:55:ec:18:34:d3:
         de:11:07:c3:8b:7c:da:ef:61:a2:2f:ba:f3:7a:52:da:3f:dc:
         fa:3f:33:5d:ed:ad:12:b7:10:9e:0d:83:90:6f:76:05:fc:21:
         74:d1:73:c6:17:a1:31:1c:00:50:a1:31:40:7a:f3:7a:0d:fd:
         a9:81:ac:de:2f:a9:58:68:61:4a:3c:5c:be:df:4c:1c:b2:87:
         eb:f0:59:2f:b2:2d:28:44:80:fd:89:88:a8:6b:fc:fe:9d:cc:
         f9:fe:76:61:b4:fb:75:15:c8:72:04:eb:42:87:2c:84:e6:35:
         c8:30:7c:e0:be:3e:f9:18:0d:54:0e:0f:95:30:d3:12:44:fc:
         a8:69:74:bb:e7:3f:21:38:d7:5f:8b:22:93:3a:4b:f2:fc:5b:
         cb:ee:38:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----