Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be05d4477a08a21f388bc1a263eb3e165d8e7a8f.cer
File:                     be05d4477a08a21f388bc1a263eb3e165d8e7a8f.cer (raw, json)
Hash identifier:          cREwZh6X/Hmdl2Y712iXLw4ap9sn857sRvaTFvhedQw=
Subject key identifier:   82:7E:02:03:A0:E8:51:8C:18:0B:B0:51:65:7B:37:9A:EA:9F:DB:19
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9B55D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c9905e04-2ddf-437c-ab15-fa8bfe779afc/be05d4477a08a21f388bc1a263eb3e165d8e7a8f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c9905e04-2ddf-437c-ab15-fa8bfe779afc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:30 +0000
Certificate not after:    Wed 16 Oct 2024 21:22:17 +0000
Subordinate resources:    AS: 265875
                          IP: 167.250.204.0/22
                          IP: 2803:5940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16364893 (0xf9b55d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:30 2017 GMT
            Not After : Oct 16 21:22:17 2024 GMT
        Subject: CN=be05d4477a08a21f388bc1a263eb3e165d8e7a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:61:60:9d:4f:da:e5:b7:c7:7c:33:29:42:27:
                    67:63:e0:e6:8f:b1:92:44:30:37:36:87:3a:af:32:
                    64:39:f4:b8:54:6c:66:d3:c1:44:a6:db:17:f0:13:
                    ac:ac:9b:2c:79:73:06:8f:c5:e0:53:fa:36:d0:0a:
                    2c:2b:8c:5d:1f:d2:8c:0d:c9:cc:16:ba:d9:fe:26:
                    41:ec:82:69:9e:9e:3e:41:48:36:ec:21:c5:7c:eb:
                    ca:17:7f:86:ad:d9:d2:01:a4:cf:d0:80:09:3f:c6:
                    81:00:72:b3:37:07:f2:20:0a:31:f2:88:92:89:70:
                    8f:b9:fe:6d:34:36:51:4f:35:f8:dd:cb:a8:b8:43:
                    a7:c9:aa:32:d5:9b:2d:1b:37:86:4f:72:f3:17:66:
                    be:99:7a:a4:d6:65:86:8a:9c:56:50:d8:0b:e3:7f:
                    15:4e:d5:b2:84:3e:8a:76:04:37:85:e0:ef:bc:8f:
                    c9:d0:46:7c:b0:6a:ef:66:99:bc:04:b9:33:cb:42:
                    77:7c:ba:5e:2c:01:76:2c:31:46:0d:05:bc:ea:05:
                    17:21:d0:8e:99:b8:c4:24:4e:5e:5b:64:7c:dc:8f:
                    73:24:d3:81:a4:a3:ba:0c:f6:72:eb:60:59:1b:da:
                    69:f2:aa:c4:3b:3d:2e:75:d6:ca:41:57:b6:a8:5b:
                    e1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7E:02:03:A0:E8:51:8C:18:0B:B0:51:65:7B:37:9A:EA:9F:DB:19
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c9905e04-2ddf-437c-ab15-fa8bfe779afc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c9905e04-2ddf-437c-ab15-fa8bfe779afc/be05d4477a08a21f388bc1a263eb3e165d8e7a8f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.204.0/22
                IPv6:
                  2803:5940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265875

    Signature Algorithm: sha256WithRSAEncryption
         bc:9d:78:3c:82:97:ec:8f:b4:d1:99:d2:15:6f:e6:fc:e0:45:
         c0:f7:7e:3d:14:37:2d:30:47:51:e4:19:2b:94:f7:4d:e4:16:
         31:bf:fc:ca:09:ed:9a:55:a8:78:6c:c3:4b:05:79:9c:6d:24:
         7a:69:57:ea:6d:41:19:91:1c:85:31:63:d5:3f:c6:9f:de:97:
         dd:4b:6f:25:f4:ef:59:93:91:ac:61:f6:c7:d2:34:b3:4a:1a:
         e8:1c:c6:43:fd:43:97:83:0d:46:a8:aa:c3:4a:dc:39:47:dd:
         fe:ec:03:a2:e1:74:ef:bd:5b:7b:0e:3b:32:32:7f:33:9d:be:
         67:0e:9c:b5:09:cf:d9:46:63:f6:b6:87:4d:71:5b:f5:b4:d4:
         61:1d:bf:6a:21:ab:a9:00:24:99:7d:f1:0d:11:10:cc:f3:84:
         11:3b:01:ae:42:58:14:18:03:15:7b:12:87:02:96:54:ab:93:
         f9:6d:c0:f5:30:5f:89:ac:79:c5:d4:01:00:2c:f3:8f:1d:e4:
         98:66:18:fb:73:34:88:2b:4e:8d:4e:9d:7f:14:79:26:ad:8a:
         5b:68:ba:78:d9:75:a0:45:dc:70:27:a8:dc:f2:7f:29:88:0d:
         c6:1c:2a:72:6f:5a:5e:01:02:c1:24:9e:cc:c1:89:49:7a:db:
         9f:73:a0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----