Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.cer
File:                     bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.cer (raw, json)
Hash identifier:          tzV6+j02NzcQohqoLTO27KsFO7RXBmgEJjJXu2yBFyM=
Subject key identifier:   AE:9E:EC:1F:99:E0:2B:A2:C6:29:B6:30:2B:64:53:48:51:64:3C:DF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5EE51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/66437d42-1b8f-464c-8edc-1e6564e618a8/bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/66437d42-1b8f-464c-8edc-1e6564e618a8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:28 +0000
Certificate not after:    Fri 20 Sep 2024 16:00:37 +0000
Subordinate resources:    AS: 264643
                          IP: 143.255.152.0/22
                          IP: 2803:4940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16117329 (0xf5ee51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:28 2017 GMT
            Not After : Sep 20 16:00:37 2024 GMT
        Subject: CN=bd9cc6efd7eedf3240948db53c9cc6f0a17bad04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:74:04:41:5e:80:46:13:86:03:0a:d0:87:
                    08:89:10:1b:e2:de:57:01:91:69:df:b3:a3:5e:06:
                    70:86:7c:02:d9:28:c8:c6:67:74:11:b6:4b:5a:c0:
                    23:66:4c:6d:e6:72:f7:b0:ce:71:e7:44:a9:f3:9d:
                    70:d3:c9:13:be:f9:10:64:86:04:f6:76:4c:19:df:
                    29:db:b8:4a:79:08:9c:42:03:99:8d:c8:13:cd:10:
                    44:7b:d3:33:23:7c:b5:5e:ca:09:63:84:e2:58:05:
                    a5:dd:fa:eb:38:51:10:83:f9:bf:e0:f1:d8:d2:85:
                    17:fa:a3:17:a5:77:9a:43:d6:eb:b2:18:65:84:27:
                    db:33:c4:91:58:34:fe:5c:bd:98:d5:8d:9e:a2:82:
                    69:bb:4d:4e:4e:7a:a1:29:5f:63:ca:32:9f:f8:5d:
                    9f:b8:ea:59:41:c7:c8:40:61:bb:86:c1:bc:1d:95:
                    d8:ba:f5:b7:eb:a3:60:aa:fa:3a:81:7c:9d:d7:b7:
                    ea:99:12:76:9f:f2:d4:d1:e3:e6:6e:00:ac:f3:39:
                    d3:eb:35:9b:db:cb:5e:b3:d3:79:de:67:c2:6d:f2:
                    e0:d9:3e:72:e7:d8:61:16:a7:80:37:3b:00:dc:e4:
                    2f:33:1d:fa:2b:89:e8:27:5d:a7:32:d5:5d:f3:ee:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9E:EC:1F:99:E0:2B:A2:C6:29:B6:30:2B:64:53:48:51:64:3C:DF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/66437d42-1b8f-464c-8edc-1e6564e618a8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/66437d42-1b8f-464c-8edc-1e6564e618a8/bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.152.0/22
                IPv6:
                  2803:4940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264643

    Signature Algorithm: sha256WithRSAEncryption
         55:7f:7b:c3:66:d8:e9:7c:63:76:b0:c7:77:d3:f2:7d:a0:dd:
         fe:3b:2c:37:29:5d:2a:9f:e0:61:16:4d:52:f3:9b:74:a5:c4:
         45:4b:fd:6a:77:15:8b:8c:88:4f:77:34:67:e2:ab:3d:44:3b:
         72:8e:3c:2f:f8:64:0c:c6:ef:69:62:20:5d:8c:1d:d1:07:e3:
         f9:40:05:9a:52:ae:35:70:a7:bc:9e:1e:38:84:35:95:8f:af:
         24:de:46:f5:88:4d:62:fa:dc:22:ef:c0:2f:31:eb:73:11:73:
         b4:bf:e1:f5:86:1e:6c:0e:15:58:55:25:06:82:fe:de:a5:35:
         af:aa:d7:29:4b:85:35:9a:43:19:6f:5b:3e:66:73:93:58:4d:
         99:d9:56:12:99:73:8c:b1:02:e1:0b:34:d8:32:9c:07:67:83:
         c7:9b:77:5c:04:f1:ed:2b:82:a0:c1:30:06:be:e1:2f:7c:4e:
         62:92:43:d7:2d:7f:9e:c8:9d:f6:25:4a:03:4d:e7:fe:4b:a3:
         0c:19:24:05:44:7c:d9:b1:c0:ae:ed:57:5d:4c:4c:01:ed:fe:
         ba:8e:72:d0:0b:12:02:53:74:7d:8d:84:5c:2e:22:d1:63:c5:
         fd:c7:c9:03:3d:c5:e3:c0:ca:69:14:0c:4b:5f:72:53:c8:5c:
         96:57:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----