Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c231597aa248659e9e4fedab41e88ad573fbfa17.cer
File:                     c231597aa248659e9e4fedab41e88ad573fbfa17.cer (raw, json)
Hash identifier:          P0FAwT4GVn0c1qQpmRk0ZTZPVV94DDL2b3b7fruuzF4=
Subject key identifier:   92:C4:51:D3:C1:7B:A1:A8:80:A4:73:D7:E2:20:D1:58:66:3B:EB:EA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF9387
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a76961c7-b6b1-4747-9f2c-ed9dbdb28df1/c231597aa248659e9e4fedab41e88ad573fbfa17.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a76961c7-b6b1-4747-9f2c-ed9dbdb28df1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 21 May 2018 14:59:34 +0000
Certificate not after:    Mon 25 Mar 2024 16:58:19 +0000
Subordinate resources:    AS: 262222
                          IP: 190.185.100.0/22
                          IP: 2803:e1a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14652295 (0xdf9387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 21 14:59:34 2018 GMT
            Not After : Mar 25 16:58:19 2024 GMT
        Subject: CN=c231597aa248659e9e4fedab41e88ad573fbfa17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:b9:40:1b:6c:e7:9e:b9:98:98:bc:36:41:
                    75:19:af:3e:ea:b0:53:d0:60:62:be:c7:71:9c:41:
                    b4:df:7f:bb:f2:9c:e2:54:39:ee:e4:27:7b:57:54:
                    71:a7:42:e3:4e:d9:b6:3d:5f:32:4c:e0:35:c2:3d:
                    11:4a:a5:4e:08:f7:e7:15:4f:23:72:05:83:18:9d:
                    ae:92:24:93:7f:d2:1a:ed:43:89:f2:54:9a:ce:9d:
                    3d:08:6f:97:4f:c2:2b:d5:d8:55:d9:de:a6:e9:49:
                    96:28:66:00:18:75:5f:ab:bb:83:67:85:1a:2b:88:
                    2b:43:7d:c3:4f:93:ea:78:bc:45:bd:d7:75:7e:d3:
                    d3:7f:19:69:4d:ca:6f:15:58:9f:66:37:ab:71:52:
                    a4:22:fb:e9:42:73:fe:b3:2c:cf:3f:c6:15:0b:0c:
                    65:de:64:ba:0a:44:2b:cf:3f:55:f5:f7:f0:1f:2d:
                    e0:19:0c:1d:b7:69:bc:27:c9:02:8b:b8:5b:c0:17:
                    cb:d7:ad:a6:4e:a6:e2:e3:1c:5b:bf:29:68:41:8a:
                    a4:c9:ef:e9:46:05:6b:bc:6e:5d:2a:d1:eb:0c:45:
                    df:0e:09:31:6e:79:c3:a1:07:5f:02:aa:a6:a9:ed:
                    c9:d7:99:a1:5f:7f:90:84:c4:af:4d:c9:ea:5c:6e:
                    27:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C4:51:D3:C1:7B:A1:A8:80:A4:73:D7:E2:20:D1:58:66:3B:EB:EA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a76961c7-b6b1-4747-9f2c-ed9dbdb28df1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a76961c7-b6b1-4747-9f2c-ed9dbdb28df1/c231597aa248659e9e4fedab41e88ad573fbfa17.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.100.0/22
                IPv6:
                  2803:e1a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262222

    Signature Algorithm: sha256WithRSAEncryption
         6f:51:c0:80:0d:b2:22:0a:6b:49:26:d0:55:f0:21:4a:7f:b4:
         89:94:ae:0a:53:0b:11:42:bb:cd:a9:85:97:28:29:a0:24:4b:
         04:4a:92:9f:14:2a:dd:6a:52:7c:ba:cb:82:39:1e:8d:25:94:
         7b:3f:bc:82:01:2c:49:1b:39:af:b9:81:e8:7d:f6:2b:db:31:
         e1:aa:17:d5:cd:51:61:3a:05:10:b7:c1:c1:13:a6:bd:13:d1:
         14:35:2b:d4:69:22:8c:93:04:44:bb:ad:5e:e2:bd:99:27:e1:
         3d:c1:b3:82:a6:9a:64:84:a3:d1:27:17:bc:30:ca:16:e6:14:
         fd:69:fb:cc:7a:04:10:2b:5c:ec:95:87:1c:d7:46:7b:cb:95:
         a0:f1:22:2a:de:5a:98:40:c2:9e:24:60:a3:67:a6:2a:9d:b2:
         c2:76:75:e5:30:0e:da:39:d5:b5:98:f4:58:9d:dd:9e:97:b8:
         e5:d7:57:3b:87:78:9a:09:e8:84:f7:18:87:14:39:db:b3:73:
         84:ad:72:1d:1e:ce:39:33:54:d8:3f:ed:cf:b9:62:83:fe:bb:
         e5:42:9d:4a:c6:d8:42:4b:85:94:60:29:ac:56:f5:bb:2a:fa:
         07:a7:a8:1e:9d:77:42:28:3d:f0:67:57:05:3e:84:92:e7:48:
         0e:8c:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----