Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.cer
File:                     bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.cer (raw, json)
Hash identifier:          U2LOy3u5vZBbzt/jfnuyTPmReQP363q20eZLBhtBJeY=
Subject key identifier:   03:83:6F:62:CD:84:48:90:75:9C:DD:AE:F4:FF:A7:33:CF:5A:B6:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6E182
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:01 +0000
Certificate not after:    Sat 28 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 28022
                          IP: 190.106.64.0/20
                          IP: 2800:510::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16179586 (0xf6e182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:01 2017 GMT
            Not After : Sep 28 15:00:00 2024 GMT
        Subject: CN=bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:06:03:32:be:2b:ec:72:72:0e:30:16:a3:
                    1b:17:27:5c:61:7b:86:00:9c:ea:ba:ee:7d:bf:f7:
                    86:0c:4b:76:54:e5:cf:2b:7f:b9:da:09:d9:64:d9:
                    61:61:08:c6:dc:07:6d:d4:43:20:9a:3d:b1:63:eb:
                    25:89:25:f8:7c:68:7d:78:8b:27:d9:2d:01:76:44:
                    66:88:64:7e:af:0a:d4:d5:9d:0f:f0:db:3c:6b:87:
                    e2:b2:68:0c:ce:f6:1c:e6:bf:ce:41:f6:26:32:d7:
                    ac:35:35:b5:9d:74:d9:c8:92:46:d7:48:40:c9:e3:
                    b9:03:77:ee:21:2b:45:2b:c3:93:2c:84:74:72:48:
                    0a:2b:0c:3a:04:94:9e:43:57:8b:6a:7d:de:bf:5a:
                    84:1d:ee:f2:63:4b:40:21:c6:28:fe:09:fa:d7:d0:
                    42:d5:72:21:62:06:62:57:6f:34:59:e3:cc:88:91:
                    50:72:3a:56:5d:94:f2:a7:58:20:c6:97:bc:9f:72:
                    ba:bd:08:e0:41:18:f7:02:ea:57:04:18:a8:6d:07:
                    56:6b:6a:fa:3a:16:d7:d6:de:7b:4b:70:5a:35:9d:
                    9f:c9:d8:82:ac:33:1b:79:82:bf:cd:ed:60:2f:c0:
                    d6:e9:92:ce:5b:74:d5:f6:d9:48:28:7f:19:92:98:
                    11:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:83:6F:62:CD:84:48:90:75:9C:DD:AE:F4:FF:A7:33:CF:5A:B6:29
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.64.0/20
                IPv6:
                  2800:510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28022

    Signature Algorithm: sha256WithRSAEncryption
         62:d1:7f:22:40:0b:c6:6d:e1:3a:72:2e:bc:ce:a8:d4:85:91:
         99:74:4e:0d:09:ff:75:3e:95:2b:60:f5:48:0f:6b:bd:5e:f6:
         b5:65:47:48:7e:c2:6b:5a:b7:bc:8a:6e:00:be:9b:eb:a3:a7:
         4e:34:fb:16:b4:c8:8c:ef:6a:53:0a:ed:06:6f:27:97:d4:54:
         d2:05:98:5a:ed:a4:2f:1e:41:ee:a1:f9:9e:58:2f:57:bf:9a:
         e7:fa:d3:da:eb:24:e7:08:8b:b1:14:41:4a:19:ac:6c:7a:8f:
         ed:ba:08:f7:3f:80:ca:9a:ec:cc:4b:7b:5e:f5:03:25:4f:7c:
         b4:65:c3:2b:a1:d2:69:50:6c:4f:cf:6c:03:d6:3f:8b:b3:4e:
         0f:ad:90:a9:9f:5d:f5:fb:e5:e3:84:8e:2d:a1:07:47:89:94:
         1c:6f:6d:1b:5d:17:87:83:23:b7:72:c9:48:71:48:82:7b:d2:
         ed:cb:56:f3:35:16:9c:53:7e:7f:47:ea:e7:37:6e:4f:1a:18:
         ec:89:82:ba:dd:23:dc:b2:fa:98:8b:b9:f4:e9:b2:23:bb:01:
         4e:83:ec:0d:64:28:50:75:48:74:ab:2b:91:6a:7c:79:bb:d5:
         29:0e:20:98:85:71:38:4a:d6:3a:7c:5d:b7:32:dd:57:ba:62:
         33:a2:32:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----