Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b18c2c69d62770b93e193b9c6af3d06a05351014.cer
File:                     b18c2c69d62770b93e193b9c6af3d06a05351014.cer (raw, json)
Hash identifier:          4s4a8mOx7oCjj6CkIm+dTMtzMrIuxErM+IAb7QmM8AU=
Subject key identifier:   76:BD:93:61:B1:09:03:4D:D3:81:93:0A:73:0F:E6:62:70:12:7E:43
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F56D46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c36b17a2-aea8-4bd4-ba40-922cc90fce5f/b18c2c69d62770b93e193b9c6af3d06a05351014.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c36b17a2-aea8-4bd4-ba40-922cc90fce5f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:04 +0000
Certificate not after:    Sun 15 Sep 2024 21:33:45 +0000
Subordinate resources:    AS: 262252
                          IP: 138.118.156.0/22
                          IP: 190.120.240.0/22
                          IP: 2803:d900::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16084294 (0xf56d46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:04 2017 GMT
            Not After : Sep 15 21:33:45 2024 GMT
        Subject: CN=b18c2c69d62770b93e193b9c6af3d06a05351014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:64:5f:33:05:38:f7:13:b4:0c:32:31:18:
                    41:8a:c3:ed:07:4b:5e:f4:b1:84:d9:4f:e0:73:1e:
                    6d:60:a4:98:e7:b0:36:3c:27:72:f6:af:c5:d9:6b:
                    dc:99:4a:e7:dd:28:65:98:fa:03:08:b6:3d:61:10:
                    3a:76:2e:f0:2d:c5:a0:da:59:92:65:5b:3c:65:7f:
                    6f:e3:5c:bb:0e:05:67:a9:48:dc:7e:da:29:b4:4f:
                    be:fa:41:5c:2d:41:f9:84:dc:14:d6:a2:86:9f:e5:
                    88:f5:8c:74:fc:65:8f:f4:57:8a:1e:99:3a:00:1d:
                    9c:d3:01:7f:25:c9:1e:bf:20:a5:6e:1f:2a:56:02:
                    49:7c:de:5b:e0:bf:1b:86:eb:ff:54:2e:d6:1a:a3:
                    6b:92:a9:54:47:82:50:78:5c:6f:b1:3f:d4:45:9f:
                    53:47:5a:74:39:3d:33:ae:6b:ca:57:6c:25:24:a3:
                    74:b4:b8:5f:c6:45:15:46:bc:37:96:99:74:58:ca:
                    be:bb:9d:81:43:1c:44:54:fb:af:ab:70:a5:6b:87:
                    fa:93:89:6c:75:4e:bc:2c:0e:7a:34:3d:90:04:27:
                    99:3d:b2:6f:3a:bc:3d:b5:07:c6:08:b7:84:e2:8a:
                    db:87:ec:aa:9f:50:33:c6:88:01:8e:8a:9b:6d:43:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BD:93:61:B1:09:03:4D:D3:81:93:0A:73:0F:E6:62:70:12:7E:43
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c36b17a2-aea8-4bd4-ba40-922cc90fce5f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c36b17a2-aea8-4bd4-ba40-922cc90fce5f/b18c2c69d62770b93e193b9c6af3d06a05351014.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.156.0/22
                  190.120.240.0/22
                IPv6:
                  2803:d900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262252

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:e4:43:53:28:36:f3:fc:24:5b:bb:6a:6c:fd:4c:45:31:
         d2:c8:46:cf:38:29:9f:cb:b5:bb:75:dc:a7:b0:e5:42:0e:84:
         fd:37:e7:83:f2:8b:02:ec:8a:e9:19:9a:55:da:79:a9:3b:04:
         f1:64:52:61:75:46:ff:1e:f8:53:98:28:05:2e:e4:9b:3d:6b:
         e1:c3:09:01:f5:22:0e:d1:c0:94:3a:57:dc:49:2b:39:3b:af:
         db:78:a5:b5:07:98:1b:c4:a1:d6:40:60:b1:34:18:6f:77:f3:
         b5:b2:7b:95:de:e2:a1:f4:fe:a7:94:00:5e:80:16:ba:e3:f1:
         a1:88:91:18:37:38:c9:6f:90:db:07:21:ff:91:59:d5:1b:23:
         ad:39:29:54:45:01:76:9c:2b:6d:99:da:bd:ec:be:57:20:8f:
         0a:8f:ab:91:1b:7f:44:12:0c:a8:35:69:99:d9:40:ed:56:44:
         ef:02:02:51:41:77:35:c3:22:a3:b0:da:39:7b:aa:a5:cd:9b:
         50:1f:24:4e:3c:11:67:84:6d:c3:7e:18:7b:15:27:b4:b4:90:
         40:8f:e6:cb:90:3b:33:b1:89:bd:5a:e1:0a:e7:4a:56:dd:0e:
         d8:4e:81:7d:0c:de:a6:4c:57:19:1b:3a:ff:02:a5:ea:98:96:
         86:b1:f1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----