Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af4e172d4f103eb44af4320052788d1ee84bc8ff.cer
File:                     af4e172d4f103eb44af4320052788d1ee84bc8ff.cer (raw, json)
Hash identifier:          nnd6z9fGrr9CTwPyZs14GhHxwKvOcpxdEDPpIJ9FZ4o=
Subject key identifier:   27:20:93:1A:79:7E:EA:1B:9C:78:87:E7:FC:63:C4:F6:FB:DF:20:D3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFB535
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1ecbaeea-cc43-44e0-9521-eb38799adca1/af4e172d4f103eb44af4320052788d1ee84bc8ff.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1ecbaeea-cc43-44e0-9521-eb38799adca1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:07 +0000
Certificate not after:    Sun 28 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 262178
                          IP: 190.113.64.0/20
                          IP: 200.16.90.0/23
                          IP: 2001:13e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15709493 (0xefb535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:07 2017 GMT
            Not After : Jul 28 06:00:00 2024 GMT
        Subject: CN=af4e172d4f103eb44af4320052788d1ee84bc8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d1:d8:56:cb:d8:e9:95:41:69:e7:a2:67:a6:
                    f3:44:dd:0c:bf:a1:c0:c2:50:a6:09:da:4e:6b:8a:
                    f5:f3:3c:83:0f:ec:80:c1:53:d4:81:6b:c3:58:ca:
                    d8:95:74:76:e9:b8:d7:e3:8b:d9:c9:5f:c2:b1:2e:
                    a5:87:fd:e3:6a:e8:2a:34:95:a0:8d:24:8a:97:d7:
                    d2:cb:c6:42:c9:63:9e:f9:35:fa:1f:77:19:8a:52:
                    8a:6e:26:c9:59:fb:b4:2d:7e:89:23:be:dd:ec:65:
                    80:9a:00:08:a0:3f:58:4e:82:ba:0b:f5:98:36:fe:
                    57:0f:e5:03:20:d0:78:56:49:18:f4:64:0d:fe:0b:
                    15:c1:ac:f4:a7:01:f3:10:9e:d8:c5:12:76:9d:80:
                    e1:44:a8:a5:21:ce:f7:46:ec:8e:56:5c:7c:e1:df:
                    87:f1:c8:60:0e:45:bc:a1:c8:d2:bd:9b:88:1e:57:
                    c3:5e:45:ee:79:67:0d:78:3f:60:71:d7:b4:a4:b8:
                    28:60:03:1c:98:84:8c:28:ea:f2:85:bb:7f:50:a3:
                    10:6e:36:a5:62:99:1f:c6:3f:08:c7:4d:fa:3f:b9:
                    bd:1d:d5:7b:9e:d0:72:0d:77:55:d3:1c:65:51:5a:
                    bf:d0:7c:ec:5b:85:fa:b4:1a:0b:cd:48:13:38:7e:
                    de:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:20:93:1A:79:7E:EA:1B:9C:78:87:E7:FC:63:C4:F6:FB:DF:20:D3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ecbaeea-cc43-44e0-9521-eb38799adca1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ecbaeea-cc43-44e0-9521-eb38799adca1/af4e172d4f103eb44af4320052788d1ee84bc8ff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.64.0/20
                  200.16.90.0/23
                IPv6:
                  2001:13e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262178

    Signature Algorithm: sha256WithRSAEncryption
         57:69:ad:90:18:cb:24:9c:cd:85:2c:58:a3:75:c2:7e:18:a7:
         4a:00:fe:9c:15:75:ad:ed:28:58:82:7a:9a:f7:f1:dd:b5:39:
         0c:17:ba:6d:ec:ce:bf:ee:17:ff:d0:c3:84:82:b3:15:59:c7:
         d6:09:f0:c6:5d:16:88:53:90:09:30:b5:6b:4d:3b:c4:4f:12:
         8c:04:c0:1f:b4:35:19:5b:ab:4a:99:e1:7b:bc:ec:3f:61:a3:
         93:01:85:96:a2:e1:b3:76:ee:48:7e:cd:ac:1e:59:87:d8:c4:
         4e:74:02:7b:74:e7:e7:84:42:dd:d9:f2:72:7d:3b:3e:20:14:
         64:7a:32:ff:48:6e:e4:e3:0a:5b:2b:29:9e:6c:df:f5:5d:ff:
         5b:c9:da:4c:6e:7b:68:09:c7:eb:14:0a:1e:bb:79:50:c4:8b:
         3b:ec:83:44:5e:63:17:55:a9:66:f6:b7:8a:82:a9:4d:fb:06:
         6e:c0:55:a7:72:79:17:c2:2f:32:49:6f:ad:f7:34:2f:85:ea:
         d2:ff:d6:22:0b:36:75:82:12:ef:59:c7:09:c6:fd:84:25:4a:
         5f:05:99:2c:f3:82:36:96:80:97:53:30:6f:61:e1:53:b1:57:
         9e:cb:d7:e1:9f:dc:7d:3e:e2:98:7b:9a:6e:04:16:4a:61:ac:
         dc:95:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----