Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aed98b75fb50f119b25488999dc2dad31cb479cd.cer
File:                     aed98b75fb50f119b25488999dc2dad31cb479cd.cer (raw, json)
Hash identifier:          etcBiALp0rgAWkDst4xaQL+TGHJUGAlB8cVTfaqeNd4=
Subject key identifier:   84:D0:82:30:2D:5B:3B:90:72:8E:04:4E:D6:5A:50:33:98:C9:DD:A5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E99462
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b7c3a606-b966-4377-98ec-dfba4ab7c3c3/aed98b75fb50f119b25488999dc2dad31cb479cd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b7c3a606-b966-4377-98ec-dfba4ab7c3c3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:45 +0000
Certificate not after:    Wed 12 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 263753
                          IP: 131.72.236.0/22
                          IP: 2803:ed80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15307874 (0xe99462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:45 2017 GMT
            Not After : Jun 12 06:00:00 2024 GMT
        Subject: CN=aed98b75fb50f119b25488999dc2dad31cb479cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:99:0e:96:f3:14:48:25:39:8d:a9:2a:4c:07:
                    b5:66:69:78:a2:51:f4:da:bf:06:94:de:67:f5:87:
                    ef:eb:3b:9a:7c:f9:01:31:b5:b0:71:b4:5d:c5:cf:
                    c0:63:75:93:49:10:f6:f0:27:50:9e:43:56:b4:90:
                    d4:17:36:85:f6:83:74:b4:63:79:f2:6d:df:4c:b3:
                    fd:2c:05:67:2e:2f:ee:b5:bf:f4:c7:7e:60:2e:cb:
                    61:9d:71:23:a9:73:ee:35:2a:11:89:41:9f:d5:34:
                    7b:55:d0:ec:bc:7e:0e:56:f1:d0:5e:22:e6:0e:bf:
                    6c:64:dd:8b:90:f3:f6:be:80:5b:16:ac:91:ca:14:
                    6c:b1:6d:b1:c0:93:1e:f4:3a:f0:ee:16:5b:7c:08:
                    84:3f:e6:b3:8a:2c:44:da:a4:6b:92:a1:d3:37:fb:
                    df:04:a2:ce:80:bc:72:40:1d:fe:d3:2b:1b:b2:c6:
                    24:2b:33:35:37:5b:6f:fe:ca:b6:47:72:81:87:e8:
                    0a:60:3f:6d:d1:c1:23:ab:30:a3:35:64:17:54:75:
                    59:20:28:e6:f3:e1:5a:6e:22:a0:1a:80:58:16:34:
                    81:e0:ff:48:71:ae:20:1e:bc:79:65:7f:f9:76:db:
                    3f:2f:d5:2d:ab:79:a7:87:b5:70:e7:d8:2c:ee:92:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D0:82:30:2D:5B:3B:90:72:8E:04:4E:D6:5A:50:33:98:C9:DD:A5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b7c3a606-b966-4377-98ec-dfba4ab7c3c3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b7c3a606-b966-4377-98ec-dfba4ab7c3c3/aed98b75fb50f119b25488999dc2dad31cb479cd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.236.0/22
                IPv6:
                  2803:ed80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263753

    Signature Algorithm: sha256WithRSAEncryption
         7b:d7:c1:97:92:82:bc:26:23:72:d1:e2:48:c4:0b:09:5e:e6:
         42:0d:62:30:4a:50:f2:8d:7e:b0:bb:8c:7d:2a:d1:18:d1:61:
         1d:20:be:08:22:5f:cf:9e:42:fb:19:37:56:03:03:94:45:11:
         5b:3c:cc:99:07:68:9f:24:c9:67:7d:60:8d:c5:84:3f:9c:d3:
         27:b1:9d:56:72:a0:3c:65:a6:87:63:4f:f1:b2:5c:91:ab:b1:
         a7:38:2e:03:cc:73:ef:fa:0c:19:f5:6f:21:43:ba:19:5f:83:
         67:27:d0:0c:97:4f:3b:36:a3:aa:2e:12:ef:ca:0f:b4:02:c4:
         5b:1a:b1:c8:1a:90:35:fe:f3:a6:01:c8:fa:a1:3f:18:af:52:
         f4:ed:2a:3c:c1:6a:a1:d4:b4:d9:e3:09:ea:16:1a:53:d7:4f:
         ce:dd:49:bd:a1:c2:ee:0a:ca:b7:a7:db:25:d8:69:dc:b3:bd:
         46:d4:40:88:39:27:8a:ab:25:e9:11:0c:af:a3:45:fb:19:f1:
         a0:20:10:e8:c7:c1:0c:43:ef:76:34:b2:35:41:64:ec:7f:25:
         2f:b0:7b:88:42:3b:ab:39:86:d6:1c:b8:72:37:8d:57:7b:fa:
         f8:02:91:a9:9e:88:92:86:3b:4a:d9:d5:3d:f7:59:52:43:a4:
         e1:57:ff:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----