Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7e4d19c57f9e363d6970c924c1351eca876c872.cer
File:                     b7e4d19c57f9e363d6970c924c1351eca876c872.cer (raw, json)
Hash identifier:          DWGOcvC+tFNC+52dNfr9sRkdTxE9QDVwCgNGJ/O6Nhc=
Subject key identifier:   C3:33:23:06:80:FA:F5:DE:62:33:71:9D:18:02:56:C2:02:14:95:91
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E06629
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/b7e4d19c57f9e363d6970c924c1351eca876c872.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:00 +0000
Certificate not after:    Wed 03 Apr 2024 15:18:14 +0000
Subordinate resources:    AS: 263762
                          IP: 200.5.48.0/20
                          IP: 2803:5180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14706217 (0xe06629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:00 2017 GMT
            Not After : Apr  3 15:18:14 2024 GMT
        Subject: CN=b7e4d19c57f9e363d6970c924c1351eca876c872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a6:82:0b:05:03:17:3d:4e:76:f6:1a:07:0d:
                    04:fa:b0:9a:61:00:1b:d6:65:78:49:d7:82:b9:b8:
                    cb:58:82:1b:28:48:16:b5:77:49:df:34:3a:81:03:
                    74:d2:13:7f:77:d3:d2:8e:4f:73:0e:28:46:aa:24:
                    4f:9e:75:33:47:fa:b9:0a:7c:1c:41:7f:82:b6:d5:
                    4b:63:01:69:ea:2e:95:a1:16:2b:9c:d4:2a:55:d5:
                    7e:0d:98:24:c0:6e:04:c9:dd:88:a1:6f:92:e2:bb:
                    be:28:32:9e:01:d8:9f:6c:a2:56:29:b2:89:db:fc:
                    80:a0:0a:9e:80:48:16:ca:6f:93:90:04:4b:87:7a:
                    5b:e1:67:af:54:a5:1d:96:9a:8d:88:f2:b5:14:89:
                    04:8f:15:47:65:ec:1a:3f:4b:ed:91:c1:bd:9b:ec:
                    e9:3b:3a:a7:56:d6:8b:dc:71:5c:f2:1e:e1:7c:88:
                    98:1e:4f:8f:80:bd:87:3b:7f:1c:86:c8:9a:02:55:
                    92:5b:e5:87:f9:7a:a6:45:a9:40:57:ba:09:23:01:
                    b4:8d:80:16:97:9a:e0:39:f6:45:49:13:0b:9f:6a:
                    5e:93:e5:17:5a:49:b8:45:a5:84:b7:c7:e9:8c:ff:
                    b4:92:4a:6a:84:59:c4:45:84:2e:65:2e:13:ca:20:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:33:23:06:80:FA:F5:DE:62:33:71:9D:18:02:56:C2:02:14:95:91
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/b7e4d19c57f9e363d6970c924c1351eca876c872.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.48.0/20
                IPv6:
                  2803:5180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263762

    Signature Algorithm: sha256WithRSAEncryption
         a6:d4:94:d7:f5:c2:0f:db:40:ec:fd:b9:e7:42:4a:e5:6b:67:
         d3:44:2d:40:2d:4d:6f:c5:e2:73:dc:58:06:18:b8:6f:4a:db:
         fb:1d:9a:10:f3:1b:18:08:39:17:70:bd:7c:e2:f9:fc:f0:52:
         de:21:1a:9e:fe:5e:ba:aa:91:bb:43:c6:e8:81:c2:4a:b5:0e:
         ec:97:c2:50:69:fc:fc:69:2d:97:9b:eb:e0:b8:bf:ca:c3:c4:
         26:e3:a3:c4:57:e6:dc:28:cc:b2:d3:9d:86:36:b7:91:3d:1a:
         dc:0f:de:03:24:ce:7c:45:fd:4a:cc:7a:15:4b:a2:46:4a:2a:
         6b:ae:8e:ac:9a:52:fe:08:34:59:17:d3:dc:21:2d:a1:e7:b1:
         99:b5:b4:36:4f:ff:ef:19:39:a8:3c:ea:1f:99:6c:9a:10:22:
         08:70:70:d1:bf:dc:de:d2:de:8d:41:9d:b2:1e:9b:c3:7f:20:
         f4:30:15:15:d0:75:98:de:7e:0e:fb:85:4c:09:65:4b:d5:6b:
         0d:0e:cc:f7:56:6a:02:2e:7f:fc:7c:a3:7c:ba:a0:be:e8:cd:
         68:22:6f:3a:43:be:c3:70:87:ea:72:ad:c7:ab:a3:6d:63:9a:
         62:be:b4:4f:1c:16:21:a2:d4:1d:e6:69:3f:1b:81:f3:83:d3:
         6b:e4:6b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----