Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.cer
File:                     b3495e150d297a57bdd9c70a5c6b12197ca76f3c.cer (raw, json)
Hash identifier:          16mQtDMU36DZMD4u+fahoRVblaJUYYp4mMcZ4TSg09w=
Subject key identifier:   22:CA:9A:30:9C:FC:9B:FB:1A:68:10:92:BF:45:91:AC:6A:02:DC:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCD53E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:19 +0000
Certificate not after:    Thu 14 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 27949
                          IP: 200.10.199.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16569662 (0xfcd53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:19 2017 GMT
            Not After : Nov 14 14:00:00 2024 GMT
        Subject: CN=b3495e150d297a57bdd9c70a5c6b12197ca76f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:d0:9e:ee:e6:e0:fc:7c:8c:8c:1f:7e:50:
                    fb:cf:a8:91:61:09:7c:04:60:c0:5f:bd:8d:1c:e1:
                    8e:41:0e:79:09:5a:62:39:78:0f:81:e0:ec:55:f3:
                    80:6b:d6:7e:36:7f:d8:3e:ac:08:82:c4:db:54:5b:
                    6f:50:4a:42:e9:c5:fb:8b:2a:dc:10:f4:58:5d:16:
                    f8:f9:d6:21:12:0d:cd:11:d8:07:51:18:fe:9b:05:
                    8c:31:fb:ec:f0:c3:12:05:f9:1e:fb:6a:60:76:74:
                    c4:c8:47:f0:3e:96:40:75:e2:64:ca:ae:9a:5a:34:
                    e2:4b:ae:98:a9:e6:ea:03:a0:a0:90:84:62:fc:c1:
                    53:7b:4e:6e:25:cd:06:b6:12:03:73:71:f8:0d:ec:
                    32:04:0e:a5:42:69:1e:53:c7:90:03:90:2e:8b:01:
                    58:dc:19:23:0f:fb:34:84:8d:37:18:78:39:14:16:
                    40:c4:eb:29:3d:31:87:18:e3:50:6c:fa:00:b1:6c:
                    05:67:ae:12:ea:f0:9e:ec:38:72:8a:44:d3:08:46:
                    e2:68:b3:ee:4d:af:d9:8d:2b:2b:23:d6:2b:4d:17:
                    21:99:5a:f0:0f:9c:ce:5f:00:ab:6b:17:96:1d:65:
                    7a:30:b7:1c:97:f8:6b:6b:1d:c5:2d:ef:54:b3:49:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CA:9A:30:9C:FC:9B:FB:1A:68:10:92:BF:45:91:AC:6A:02:DC:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.199.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27949

    Signature Algorithm: sha256WithRSAEncryption
         c2:d7:75:7f:8a:7c:97:24:d1:72:ca:d8:5a:c4:a8:6e:cc:53:
         ff:18:37:75:aa:e2:ed:c3:db:99:4d:3f:b8:91:db:4e:f2:54:
         ba:58:b4:b0:f7:48:3a:9e:9d:15:00:cd:be:dd:ae:f6:9e:47:
         97:72:11:93:0e:b6:94:9a:c5:ba:d6:6d:cb:6d:66:f9:6c:97:
         87:58:70:3b:e5:97:cc:89:41:99:01:58:43:c3:3b:ce:07:1e:
         b7:6a:d5:3a:8a:2b:e0:1f:0d:42:5d:57:2b:4a:8e:08:2c:a9:
         84:92:0d:2a:f5:ad:d4:a4:be:4e:c1:41:b7:79:22:93:87:26:
         0b:fa:2e:3e:59:6c:95:8c:4e:2d:cc:fa:ad:51:cd:66:66:23:
         89:6d:fc:08:ea:6d:b6:3a:cd:86:45:b2:18:b8:ed:8d:71:e7:
         b7:91:a8:21:f8:c6:dc:02:34:3e:ad:fe:c4:c6:15:92:e8:20:
         31:51:d2:e8:32:68:8a:80:da:05:b7:06:62:30:03:f1:cd:be:
         a1:2b:a1:c6:5b:17:60:d6:de:4b:bc:1b:91:66:b8:1e:3e:36:
         9b:68:b8:14:0d:a1:6d:36:ad:e4:dc:d7:4f:a0:b0:2a:34:72:
         83:ff:6f:3c:2c:67:93:e0:da:a5:40:08:c0:0f:c4:87:c9:cf:
         f2:f2:c9:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----