Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0dc41738b385a57fce144119e9f086e5efc1042.cer
File:                     b0dc41738b385a57fce144119e9f086e5efc1042.cer (raw, json)
Hash identifier:          2OL3d9s222v0tLPH8TeUEumUqQe/xztmyBsdpTxB7ks=
Subject key identifier:   D1:AC:D3:9A:54:A4:49:6D:F6:99:E2:43:FC:F0:2E:72:D9:70:B6:A9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1DE17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/64978138-3b90-4dd8-b7a1-226b2c2d0ae5/b0dc41738b385a57fce144119e9f086e5efc1042.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/64978138-3b90-4dd8-b7a1-226b2c2d0ae5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:48 +0000
Certificate not after:    Thu 18 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 21765
                          IP: 192.141.64.0/22
                          IP: 2801:17:3000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14802455 (0xe1de17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:48 2017 GMT
            Not After : Apr 18 06:00:00 2024 GMT
        Subject: CN=b0dc41738b385a57fce144119e9f086e5efc1042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:53:3a:56:66:4e:c3:8b:b3:ca:36:02:3f:
                    d1:71:54:2f:8e:3a:91:38:5c:f7:91:8e:4f:f4:68:
                    2a:80:df:07:41:3b:75:fb:99:f5:34:33:00:50:a6:
                    bc:80:66:12:c4:5e:9f:3a:94:a8:ee:e5:21:cf:2e:
                    78:1b:c0:90:d7:75:73:aa:45:13:eb:f6:03:a8:ad:
                    13:80:70:53:4f:71:d1:2e:ad:55:4f:d9:cf:97:09:
                    e8:4d:8c:ff:ab:a0:49:2e:fa:ac:f7:a6:11:62:01:
                    05:e3:1c:0a:df:4d:1a:df:9d:1b:14:b1:48:43:ea:
                    b6:36:ca:ed:9b:34:6f:58:ee:80:e0:98:c5:b1:5d:
                    fd:b3:0e:e3:0d:69:1b:0b:a6:fb:18:44:cf:01:51:
                    9c:e2:2a:41:d1:83:cc:6a:c5:14:96:24:a9:c6:f3:
                    25:cc:98:58:0b:60:f1:3d:7a:e5:03:31:7a:e6:3c:
                    b5:51:66:a1:38:8e:fa:73:5d:88:c7:16:95:c8:3d:
                    b2:9b:20:1f:dc:71:28:82:e3:28:52:f0:e8:0a:17:
                    a8:16:a2:4e:37:9c:3a:3e:83:ec:8a:25:10:df:87:
                    a9:61:9f:cb:4e:d7:96:f0:72:2b:d3:84:d0:ff:3a:
                    40:00:51:52:eb:1b:01:8b:7d:d5:da:0c:0c:19:89:
                    f7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AC:D3:9A:54:A4:49:6D:F6:99:E2:43:FC:F0:2E:72:D9:70:B6:A9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/64978138-3b90-4dd8-b7a1-226b2c2d0ae5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/64978138-3b90-4dd8-b7a1-226b2c2d0ae5/b0dc41738b385a57fce144119e9f086e5efc1042.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.64.0/22
                IPv6:
                  2801:17:3000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21765

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:10:0d:50:56:da:00:25:fa:ee:45:64:0c:36:4a:f7:24:
         34:81:53:da:45:63:27:31:95:59:0a:5a:2b:49:27:74:d6:75:
         be:b0:02:10:79:91:76:39:ba:d2:35:8f:3a:05:8a:cf:ee:53:
         7e:66:95:03:f8:16:1f:c3:5a:04:c2:6b:01:50:2c:d8:98:3b:
         33:8e:ff:47:4b:6d:0d:fe:c4:f7:e0:2e:2d:9a:d9:53:e1:ce:
         e5:bd:5e:d6:a1:db:09:08:9f:dc:89:c3:6c:74:34:47:a0:d3:
         a4:26:d6:42:2a:bc:1a:eb:a1:1c:a4:7b:d9:77:ca:fb:24:da:
         b9:2b:da:1f:ef:5e:df:10:4d:ce:d9:96:2d:ad:0c:d4:73:d7:
         45:b5:78:55:59:51:63:29:91:29:e5:fe:67:30:d0:ee:ad:1d:
         b0:b9:c4:92:3b:45:12:fc:d5:94:fc:8e:f4:72:97:b8:fe:30:
         4c:c0:7f:cb:61:d7:37:fc:b8:39:da:64:6b:1e:28:05:fa:35:
         50:d4:f3:70:e5:66:d4:31:15:1f:48:5c:e0:d8:02:bc:c4:f3:
         88:c7:e5:79:9c:a0:f4:54:0e:57:ac:9b:13:b0:7c:c1:e6:8d:
         49:14:3c:a1:1e:04:87:17:47:d4:7b:38:88:23:45:de:09:a8:
         9d:c0:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----