Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.cer
File:                     bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.cer (raw, json)
Hash identifier:          JCA/N2Y3hnbdtZMY3cESqVgpivkjjaAbQ9asRPSFWlA=
Subject key identifier:   C5:C3:CF:AC:F3:AA:F1:DA:21:2F:18:CC:2D:EB:6B:A9:6C:D0:71:EB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F70180
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:01 +0000
Certificate not after:    Sat 28 Sep 2024 21:11:51 +0000
Subordinate resources:    AS: 264820
                          IP: 170.80.88.0/22
                          IP: 2803:dcc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16187776 (0xf70180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:01 2017 GMT
            Not After : Sep 28 21:11:51 2024 GMT
        Subject: CN=bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:52:8b:42:94:bd:7a:65:da:5a:dc:fd:f2:
                    4d:8b:f3:78:32:06:61:2f:69:7c:bc:61:50:7d:59:
                    f1:1f:9d:23:2e:3a:a3:7f:65:7a:43:b6:e0:e0:1a:
                    07:90:b6:dc:a2:c6:97:ec:43:74:4b:1b:a6:78:e6:
                    32:f5:86:24:48:82:bd:ef:31:7c:05:4f:49:3b:b5:
                    87:40:11:58:cd:e4:48:d5:e0:b6:05:00:36:ef:47:
                    fb:95:4a:09:4f:fc:de:51:4e:fe:81:6e:c6:a7:75:
                    8e:f9:de:1a:67:c7:4c:8a:07:41:07:3a:52:e4:a9:
                    c5:a7:25:8a:e9:51:49:48:d6:8c:a5:69:00:0b:cd:
                    05:5f:2a:58:11:ce:fa:02:3b:89:98:55:a3:23:e8:
                    ac:a3:4f:13:a1:54:8d:59:7e:b3:13:ea:22:37:91:
                    ee:f0:16:c4:0d:58:0c:53:51:5b:6e:4b:06:a3:ba:
                    8a:5a:dc:86:70:d3:e6:51:fb:51:33:a5:fb:de:90:
                    bb:f7:0e:5b:12:eb:59:e9:32:ac:ef:80:a1:0f:12:
                    51:be:29:df:be:06:36:21:70:b0:d2:03:71:f9:46:
                    51:b3:76:ba:d1:f3:74:ea:83:24:b1:94:3b:9f:f9:
                    6e:be:c1:61:a7:43:81:55:39:9e:00:0d:f7:9e:1b:
                    c5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C3:CF:AC:F3:AA:F1:DA:21:2F:18:CC:2D:EB:6B:A9:6C:D0:71:EB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.88.0/22
                IPv6:
                  2803:dcc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264820

    Signature Algorithm: sha256WithRSAEncryption
         38:3f:22:9f:a0:3b:7b:76:dc:e2:70:e1:48:db:f8:ab:68:d4:
         38:3f:ad:02:10:98:6e:56:fc:cc:b8:09:90:ab:c0:49:aa:d7:
         f2:39:5b:ba:13:56:71:ce:bd:7b:b7:f1:5e:81:50:df:e6:23:
         ce:36:0b:28:03:85:4c:97:fd:dc:67:43:3e:42:13:8f:87:d3:
         84:4d:51:07:88:03:5a:5f:6d:13:14:7b:a1:e3:90:68:00:67:
         66:0c:90:21:bf:63:2b:8c:0b:e3:4a:11:b4:f1:41:04:dd:d7:
         13:7f:a6:7e:53:5b:5e:b1:59:a5:b1:db:c2:e8:0f:70:51:32:
         e2:18:1b:bb:7a:4c:d0:a4:33:fe:f6:51:3b:8b:77:d8:e1:24:
         b9:9f:70:8e:ed:d3:7d:90:de:b2:e6:1a:17:f5:c5:1e:49:02:
         78:4e:06:f8:6b:bd:6a:4b:41:4d:ef:e2:14:d9:58:6f:c0:a2:
         e2:e2:e5:80:01:c2:ec:42:16:8a:ea:e4:8a:8c:ee:cf:26:a1:
         74:f4:5b:30:64:6d:10:c3:64:0c:bf:42:90:29:47:9b:2d:f1:
         3e:d4:88:72:ef:a6:3a:a4:4f:60:eb:bb:a4:6e:a4:d7:d7:42:
         ac:5b:cb:0a:90:1e:9d:4a:e3:67:e9:83:0b:7c:c7:bb:e8:f7:
         07:81:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----