Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae61782f9050bb91be1a3cfc5144d8a8c0450c74.cer
File:                     ae61782f9050bb91be1a3cfc5144d8a8c0450c74.cer (raw, json)
Hash identifier:          wcvjtVlosN/1fZR20Uo55U4kHQ2D6bipV3CmY8FONRw=
Subject key identifier:   06:48:8B:21:8F:69:D4:E5:DE:32:C6:8B:BF:55:E8:00:F7:8D:3E:0D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB96BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/df066a5c-4aa3-46a5-bb33-027ea387eeaa/ae61782f9050bb91be1a3cfc5144d8a8c0450c74.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/df066a5c-4aa3-46a5-bb33-027ea387eeaa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:18 +0000
Certificate not after:    Sat 29 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 52343
                          IP: 192.188.51.0/24
                          IP: 2801:15::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15439548 (0xeb96bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:18 2017 GMT
            Not After : Jun 29 06:00:00 2024 GMT
        Subject: CN=ae61782f9050bb91be1a3cfc5144d8a8c0450c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:e2:06:25:8c:b9:2a:f0:49:84:ba:09:89:
                    1f:19:5b:7e:a1:f5:03:2b:e0:40:67:9a:0b:90:15:
                    e8:28:23:44:84:e8:ad:b8:c0:b7:bc:f9:0a:d3:bd:
                    ad:ae:4e:7c:a2:35:8e:0e:61:f6:25:e9:ce:3d:85:
                    7e:d2:fe:67:68:4a:0a:56:df:17:68:a5:de:98:96:
                    3d:a6:09:cc:f5:25:c4:e0:c9:47:1c:95:37:d4:24:
                    ec:38:11:a7:fb:ba:dd:58:17:ca:10:4f:25:ae:9e:
                    e8:a7:16:91:00:f1:28:04:d5:51:40:d3:5b:7a:08:
                    25:bc:31:fe:06:91:36:22:4e:41:4f:fe:05:ac:5c:
                    bc:fc:43:b1:16:cd:dd:34:94:cc:54:52:01:2e:3a:
                    c5:ad:a1:b6:79:50:c4:f3:bb:ec:77:d7:a7:32:da:
                    68:82:6a:05:1d:d3:93:b6:d5:d2:ad:c8:8b:2e:a0:
                    04:d0:eb:fd:45:58:d4:31:bc:bc:0d:c5:39:9f:2e:
                    1f:e2:a2:cc:36:d9:85:e1:5c:ec:38:6c:ef:a8:6b:
                    a8:26:44:68:de:52:6f:62:35:0d:ba:e0:61:50:0d:
                    c7:de:d1:f9:54:f7:e2:c1:f0:c1:7a:88:b3:af:60:
                    d6:3f:f8:4f:69:db:30:c3:01:5e:72:b3:3e:ff:0c:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:48:8B:21:8F:69:D4:E5:DE:32:C6:8B:BF:55:E8:00:F7:8D:3E:0D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/df066a5c-4aa3-46a5-bb33-027ea387eeaa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/df066a5c-4aa3-46a5-bb33-027ea387eeaa/ae61782f9050bb91be1a3cfc5144d8a8c0450c74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.51.0/24
                IPv6:
                  2801:15::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52343

    Signature Algorithm: sha256WithRSAEncryption
         b3:75:05:fc:0a:73:ff:9e:ab:ad:82:64:7c:6a:fc:ac:5d:8c:
         22:85:98:19:7a:51:58:3c:f6:00:dc:b8:8a:f5:59:b1:3c:24:
         fa:4a:6f:75:9d:57:85:1a:ef:9a:4c:4d:f4:d1:e7:1c:d6:c6:
         0f:53:6f:09:90:ef:09:92:be:56:68:d0:c3:53:4f:3a:0e:27:
         36:72:58:db:c9:c9:fc:45:fa:39:35:36:be:53:1f:90:0c:30:
         4e:08:35:cd:94:b1:d0:c5:da:13:56:cf:14:7a:83:b7:ea:e9:
         ee:21:36:08:8b:63:9d:56:c1:0c:42:5b:f0:c4:ed:a4:22:2b:
         e9:4e:5d:d9:93:0f:1a:a4:ac:32:eb:5c:02:81:9a:71:e8:a3:
         83:ef:bc:5c:73:f4:0b:46:ef:fc:9f:2c:e9:a6:ba:77:62:0b:
         42:f3:23:84:9d:8a:39:bb:ca:84:cf:84:3f:6c:f1:d4:74:63:
         1d:e2:21:08:c5:f1:f8:c2:35:dd:d3:b0:92:b4:7d:e0:d6:ee:
         55:97:67:01:c8:b9:4d:51:ca:cb:05:46:f6:c9:86:cf:c2:92:
         6b:08:be:72:12:1b:40:35:13:57:85:56:de:2b:e1:c6:57:0f:
         cd:f5:89:a7:2a:81:f6:79:78:02:84:ce:0f:33:6c:15:48:ed:
         1d:a0:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----