Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a798f5148d06edd6bd46714a3ea83faee3385634.cer
File:                     a798f5148d06edd6bd46714a3ea83faee3385634.cer (raw, json)
Hash identifier:          4f4daaIW6MncYp9rlURCffEL7gIuZweXVVM6X8k4vAQ=
Subject key identifier:   DA:98:11:22:62:87:27:58:78:70:5B:3F:BE:B7:3B:2C:59:3A:E9:AE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F138B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bd2e07fd-e0c9-4c78-b16f-bb8de8c97806/a798f5148d06edd6bd46714a3ea83faee3385634.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bd2e07fd-e0c9-4c78-b16f-bb8de8c97806/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:32 +0000
Certificate not after:    Sat 10 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 264614
                          IP: 200.9.169.0/24
                          IP: 2801:1f:e000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15808697 (0xf138b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:32 2017 GMT
            Not After : Aug 10 06:00:00 2024 GMT
        Subject: CN=a798f5148d06edd6bd46714a3ea83faee3385634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:11:9f:9d:62:d2:f2:90:41:53:35:5d:d1:b7:
                    ec:c9:e7:61:b8:83:10:a3:45:80:c5:4f:27:57:af:
                    1c:1a:57:a8:c7:4c:5c:7b:a2:e1:a7:e3:a7:a2:97:
                    a2:71:b3:cd:4a:f2:05:d7:de:7a:97:29:43:af:c3:
                    37:57:72:30:e1:91:20:54:7c:a5:8b:1c:21:ee:6e:
                    14:20:51:c8:e0:70:2a:e2:49:7d:4c:76:67:76:1a:
                    63:b8:e7:fd:4a:90:56:f8:e9:e2:51:2b:82:34:31:
                    c3:5a:92:56:af:af:0b:f2:e0:48:b4:34:39:85:68:
                    63:cd:9d:01:7a:16:16:a3:7f:8d:56:5e:d8:bf:0c:
                    9b:7a:bf:a0:51:31:b5:0c:2c:4c:ea:d1:dd:42:43:
                    4d:19:72:82:78:aa:03:a6:08:a9:b2:88:8b:7f:a4:
                    ff:fd:b5:f7:42:2d:78:e4:f7:65:66:ec:7f:cd:85:
                    33:18:e2:0e:54:51:f4:08:63:c4:b8:dd:54:c1:8b:
                    b6:50:e0:84:2d:48:85:04:60:7a:6e:0e:47:78:d0:
                    ce:47:8d:4a:68:f1:e7:f3:10:47:3f:69:30:ce:9a:
                    57:35:1b:a8:39:b7:a6:d7:fd:8c:55:ec:8c:39:24:
                    f8:b8:1c:d5:92:b7:b1:48:0d:ce:97:12:bd:35:46:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:98:11:22:62:87:27:58:78:70:5B:3F:BE:B7:3B:2C:59:3A:E9:AE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bd2e07fd-e0c9-4c78-b16f-bb8de8c97806/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bd2e07fd-e0c9-4c78-b16f-bb8de8c97806/a798f5148d06edd6bd46714a3ea83faee3385634.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.169.0/24
                IPv6:
                  2801:1f:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264614

    Signature Algorithm: sha256WithRSAEncryption
         42:3f:54:25:f7:88:46:e0:4e:73:d8:e1:c0:6a:e2:67:56:18:
         6c:34:70:44:de:f2:98:fa:1c:6d:a6:2d:af:39:63:96:e3:9a:
         15:f0:28:62:8d:b1:a3:e9:46:83:81:04:04:7a:42:49:f0:9e:
         41:99:ca:67:27:08:bb:51:23:2c:ae:ac:05:e5:20:dc:75:92:
         e2:0b:55:e7:9b:cb:54:b8:d4:e6:62:8a:83:15:b3:4f:bd:2a:
         ca:42:46:1a:a2:e9:cb:69:9a:49:2c:7e:80:22:ee:07:51:ab:
         51:13:a5:67:99:76:aa:e0:d8:c4:8c:6c:4a:96:82:c8:da:78:
         d7:da:a0:aa:39:df:94:6f:23:c8:65:04:31:c5:44:c1:7b:22:
         70:80:5e:e3:9e:08:40:d4:43:de:2f:a5:f2:58:cf:56:d2:b6:
         ac:e3:17:23:b0:dc:04:84:a7:91:e2:4c:cf:2d:44:33:7f:5b:
         f2:6d:77:0b:a2:49:44:a0:41:2b:7f:81:ee:d8:2a:75:49:2f:
         cc:ad:52:c5:4b:fb:b7:cc:05:23:b9:d5:f6:99:6a:ea:81:a7:
         12:8a:b5:6e:dc:ec:ac:2a:10:b8:d9:7a:a3:70:7e:fb:c6:da:
         0d:2d:6f:dc:bd:d5:02:9e:1a:9e:e2:c0:2b:ff:12:23:91:ff:
         9e:1f:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----