Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c402a9a6a7d206670319a5692be8577f996a3072.cer
File:                     c402a9a6a7d206670319a5692be8577f996a3072.cer (raw, json)
Hash identifier:          ipyyEHyKe5S7tD6zvxumSmVV5yDFjL+j/Xht/NP9HLE=
Subject key identifier:   50:61:90:77:BC:A3:B6:CE:64:76:F9:52:7C:E8:AB:C4:1B:C1:63:8C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6D365
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0e09ac67-1281-4f69-90cb-795ea83e99e7/c402a9a6a7d206670319a5692be8577f996a3072.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0e09ac67-1281-4f69-90cb-795ea83e99e7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:46 +0000
Certificate not after:    Thu 23 May 2024 20:54:51 +0000
Subordinate resources:    AS: 267906
                          IP: 131.0.108.0/22
                          IP: 2803:d580::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15127397 (0xe6d365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:46 2017 GMT
            Not After : May 23 20:54:51 2024 GMT
        Subject: CN=c402a9a6a7d206670319a5692be8577f996a3072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:69:bc:92:cf:bd:7d:8e:f7:b2:70:0e:ac:a7:
                    3e:e3:4f:49:8f:b5:87:21:b3:48:3f:48:9a:70:cb:
                    f5:79:52:4f:b4:9e:68:22:f7:e4:72:a6:c0:c9:69:
                    6d:37:0f:c6:c6:0b:a8:5b:d6:39:64:24:1a:92:2a:
                    32:18:aa:91:30:43:1e:b1:d8:68:d8:98:3f:eb:cb:
                    64:5e:5d:8c:63:f2:78:d3:7f:f4:3a:02:5e:a5:52:
                    22:56:51:95:3c:f3:e1:ff:eb:55:7b:8a:5b:36:71:
                    10:e9:95:27:2f:74:2f:6a:46:24:1e:72:42:b1:33:
                    eb:7b:b4:3a:34:45:4a:1b:92:56:aa:2d:ba:77:75:
                    aa:21:78:cb:ef:c2:e8:11:85:b0:cf:28:9e:1f:9f:
                    09:8e:d9:da:14:54:0d:19:ec:05:8e:17:10:1d:00:
                    69:d6:46:81:49:43:cf:15:88:d6:d3:f4:0d:20:e7:
                    82:91:01:87:a3:d4:fe:47:ad:d9:8e:5c:0c:79:fb:
                    89:cc:be:5a:19:05:38:8e:b2:20:89:bf:c2:b5:f2:
                    77:96:5d:32:91:31:9d:e0:48:1d:73:39:f4:f0:ce:
                    d2:11:96:91:01:4e:8b:40:46:26:5a:ad:46:99:eb:
                    cc:c1:1e:91:bf:70:4e:34:27:e3:b4:88:36:54:d9:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:61:90:77:BC:A3:B6:CE:64:76:F9:52:7C:E8:AB:C4:1B:C1:63:8C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0e09ac67-1281-4f69-90cb-795ea83e99e7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0e09ac67-1281-4f69-90cb-795ea83e99e7/c402a9a6a7d206670319a5692be8577f996a3072.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.108.0/22
                IPv6:
                  2803:d580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267906

    Signature Algorithm: sha256WithRSAEncryption
         8e:fd:c8:de:1e:0a:31:23:20:ce:2d:67:68:0a:a3:0a:dc:5f:
         20:85:3e:a3:c0:70:74:32:53:9b:a1:ba:41:23:f6:52:09:32:
         83:84:6f:87:5f:37:b1:b5:60:07:b2:ae:52:41:ed:37:18:02:
         0f:90:69:91:12:1f:47:7f:e6:10:5a:bf:7c:70:06:7f:87:25:
         78:25:4e:c9:e9:d5:1a:d7:01:dc:08:9f:19:84:00:7c:70:59:
         12:25:eb:c1:ca:5f:87:79:ec:93:2a:ed:b2:cd:48:85:72:d1:
         d1:9a:4b:3e:99:ff:ff:50:17:da:a1:02:28:a1:fc:e5:d6:2c:
         68:ed:87:0d:72:4e:8a:5c:bf:09:34:1b:17:6a:43:60:59:99:
         ea:17:15:a4:ba:40:50:0d:ce:99:bf:e4:9a:ae:ec:85:21:6a:
         8a:f2:fb:ae:c0:44:d8:4e:31:88:2b:a0:68:fa:b8:3a:15:58:
         9c:f3:a8:6c:4f:b3:0b:64:15:30:d8:40:eb:b4:f2:17:97:db:
         e6:27:80:3f:24:f2:89:c1:e4:41:51:fb:cc:28:77:43:a2:6c:
         3f:26:a8:22:58:f9:50:8e:51:75:70:03:72:14:d9:7c:ec:a3:
         ea:7b:f5:fc:fd:cc:b2:c7:be:00:49:d6:8d:0d:cf:6c:f7:b8:
         ff:d6:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----