Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7470bf15ce9876c85e0d7efef9582f422f82e6.cer
File:                     bd7470bf15ce9876c85e0d7efef9582f422f82e6.cer (raw, json)
Hash identifier:          eN8GAOJWvc+vqDpeFxZa4UoipliFnJDPZoR1HNb0Bmk=
Subject key identifier:   30:B2:26:EA:4A:C4:E7:5D:C4:06:92:9D:C2:E8:55:9B:BE:08:F6:6B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E65189
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8be7c618-7a86-475a-9a4a-20cfd59ee66b/bd7470bf15ce9876c85e0d7efef9582f422f82e6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8be7c618-7a86-475a-9a4a-20cfd59ee66b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:59 +0000
Certificate not after:    Mon 20 May 2024 21:39:15 +0000
Subordinate resources:    AS: 262226
                          IP: 200.115.181.0/24
                          IP: 2801:0:340::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15094153 (0xe65189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:59 2017 GMT
            Not After : May 20 21:39:15 2024 GMT
        Subject: CN=bd7470bf15ce9876c85e0d7efef9582f422f82e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:51:0f:e1:d8:08:11:a8:f2:0d:fc:09:09:
                    b4:8d:d6:d3:63:2d:ab:61:21:6a:9e:0b:cb:8d:ff:
                    7f:fa:60:b8:c4:28:92:e9:8b:0d:c4:02:66:1e:60:
                    d0:6c:7f:6d:11:17:8c:3c:82:18:c8:79:c1:39:19:
                    80:02:09:63:f6:44:54:e0:fa:ba:98:35:a3:69:2b:
                    2b:2c:16:5d:f2:fd:f7:e2:46:e9:80:bd:a6:c9:bd:
                    b4:eb:f4:7f:2c:1b:fe:e7:05:d9:10:de:15:0a:62:
                    18:0f:13:82:85:ba:c4:e2:d5:a8:a5:9b:89:39:08:
                    31:da:f2:ad:bf:77:33:9f:ed:0c:54:11:c6:a8:09:
                    58:1f:4a:62:1b:52:72:5d:75:ff:c8:b3:79:3c:79:
                    68:49:b9:46:12:1f:30:bc:d4:3d:a4:5a:ad:b0:10:
                    f4:a8:b9:ca:ba:ff:0b:7e:ab:55:0c:ec:6e:ac:2f:
                    6d:74:66:a7:e3:55:bf:8c:74:ba:76:36:fd:32:3c:
                    9a:88:e5:13:cd:b5:3d:71:b3:16:42:6b:19:1e:c0:
                    50:72:f1:15:14:8f:f3:49:15:0c:b9:56:63:a0:ed:
                    23:e1:00:8e:45:79:bf:0d:46:7e:68:48:1f:f8:ca:
                    01:16:f5:37:eb:d7:01:64:a5:14:75:29:1e:5c:94:
                    0f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B2:26:EA:4A:C4:E7:5D:C4:06:92:9D:C2:E8:55:9B:BE:08:F6:6B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8be7c618-7a86-475a-9a4a-20cfd59ee66b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8be7c618-7a86-475a-9a4a-20cfd59ee66b/bd7470bf15ce9876c85e0d7efef9582f422f82e6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.181.0/24
                IPv6:
                  2801:0:340::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262226

    Signature Algorithm: sha256WithRSAEncryption
         32:9e:f8:20:a8:bb:5a:2b:12:ed:f8:c8:2a:c9:43:86:e7:9b:
         d1:4f:92:bc:aa:dc:3a:0a:05:29:0d:f9:56:65:08:7c:18:01:
         04:b8:bb:39:e8:20:84:5c:3e:1e:9e:1c:d2:6a:98:82:8b:03:
         db:96:97:a1:bd:65:91:bc:c3:de:a2:24:7a:1a:5f:47:8f:e8:
         88:45:64:ca:d8:e1:0c:c5:ee:55:b5:d4:73:72:fd:45:35:bf:
         04:4f:8a:5b:94:47:ea:d7:94:49:e5:38:c0:7d:b1:5c:49:0d:
         4a:b0:25:28:f8:81:c4:32:62:18:c1:05:10:4c:10:9b:bf:c9:
         08:91:78:0a:27:b4:62:98:c3:ff:26:78:58:78:e7:02:ef:cf:
         3a:69:7e:6c:f8:74:ad:09:33:3a:9a:be:e3:1e:ad:b5:70:fc:
         80:a7:10:84:2e:99:83:a1:a4:29:5e:8b:0e:73:82:1b:a0:47:
         df:0e:d3:fa:a2:49:40:79:6f:d7:0c:8c:ec:76:44:7d:52:70:
         fe:51:75:be:17:d6:1b:61:b1:ee:ea:b0:97:91:58:d2:7e:ac:
         ef:d2:ae:1e:8c:e7:e3:07:31:4d:cb:27:e1:85:23:e4:d4:27:
         b2:89:e5:b3:43:4f:ff:63:7f:1d:07:67:82:e1:c9:c9:ba:95:
         e7:06:a8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----