Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c650f0c3c0630010573b355f3f9cef539336849f.cer
File:                     c650f0c3c0630010573b355f3f9cef539336849f.cer (raw, json)
Hash identifier:          OBnXKoUc3Uq95LUHUx8D+3xzqxgqm5UeSXH/URgyj7s=
Subject key identifier:   0B:F9:A9:F7:63:AB:65:AF:27:17:82:A8:23:E2:52:8B:5B:EC:E6:45
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F97C16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f921deb7-a989-4c83-8a6d-dec0a953a963/c650f0c3c0630010573b355f3f9cef539336849f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f921deb7-a989-4c83-8a6d-dec0a953a963/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Dec 2018 20:59:32 +0000
Certificate not after:    Mon 14 Oct 2024 22:44:20 +0000
Subordinate resources:    IP: 167.250.198.0/24
                          IP: 2803:5da0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16350230 (0xf97c16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 14 20:59:32 2018 GMT
            Not After : Oct 14 22:44:20 2024 GMT
        Subject: CN=c650f0c3c0630010573b355f3f9cef539336849f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:cf:61:5b:e3:28:af:ae:61:76:39:85:85:
                    0f:d3:20:4c:d7:73:00:27:8c:62:d4:0e:37:48:c8:
                    dc:e3:47:62:ca:28:ec:ad:94:af:44:ed:b5:0f:e4:
                    d5:8f:bf:31:b1:83:2b:a7:f2:1e:44:de:a1:77:4d:
                    af:a9:a9:5b:ff:4b:ef:ec:ed:94:26:c9:30:6d:d4:
                    4f:0c:91:76:9e:a5:d2:94:eb:ce:21:ec:f4:28:72:
                    7a:b8:2c:98:bc:54:20:e9:9a:a1:d7:48:28:d8:36:
                    b1:d0:5a:78:23:1e:b5:19:32:44:87:ee:57:8d:26:
                    aa:ba:20:fe:45:98:e0:cb:ff:46:ee:91:41:95:b9:
                    c5:cd:41:c7:5a:a9:ad:21:d8:c3:f5:72:f3:66:8b:
                    54:5b:75:bb:5b:48:25:44:3a:bd:85:8e:d4:0f:ff:
                    ea:48:97:be:63:9f:f7:e9:9c:05:e1:77:d1:68:50:
                    e7:07:57:7e:f5:c0:ae:1f:da:5f:82:05:6c:89:52:
                    e5:12:6a:95:f3:1c:15:b8:fa:a5:41:f4:4c:c4:db:
                    61:d7:f4:aa:37:2e:19:6e:f2:b2:32:c2:f3:61:fc:
                    92:f2:76:79:14:0f:e5:f4:dd:f5:c3:d3:da:3e:cc:
                    80:4a:59:1e:d6:17:f5:e0:2a:cd:f3:57:db:3c:89:
                    87:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F9:A9:F7:63:AB:65:AF:27:17:82:A8:23:E2:52:8B:5B:EC:E6:45
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f921deb7-a989-4c83-8a6d-dec0a953a963/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f921deb7-a989-4c83-8a6d-dec0a953a963/c650f0c3c0630010573b355f3f9cef539336849f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.198.0/24
                IPv6:
                  2803:5da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:6a:1f:b5:b0:f1:20:2c:89:e2:9d:df:3f:8b:81:46:15:4b:
         d3:b1:ca:8d:fc:cf:08:b6:5c:75:77:9a:d4:55:5a:8e:27:4e:
         99:f5:05:1a:9b:88:b3:82:8e:77:d3:c0:4a:bf:eb:94:60:71:
         c7:66:d6:c8:42:10:62:08:6d:de:03:d3:dd:bc:3f:84:cd:f0:
         2f:3d:61:aa:8c:30:53:4b:ec:6d:23:05:eb:a6:67:c2:ae:ef:
         40:b7:d8:17:c6:65:bd:43:8d:4c:9a:4a:28:9b:e7:a0:2e:cb:
         e4:0d:7d:ae:be:26:75:79:69:5f:28:47:3a:9d:74:6e:24:00:
         a5:11:3c:a0:5b:00:a7:11:a9:48:76:8e:ae:ca:a6:16:fc:80:
         44:95:04:0d:96:5d:4b:dc:ff:40:7b:5e:f8:a4:1b:81:3f:87:
         56:87:2f:ca:ba:30:68:76:cf:86:75:b6:dd:77:47:b3:13:7b:
         62:78:33:6d:7a:4f:a8:d1:02:b4:35:0e:14:7f:f5:1c:d7:d8:
         8d:47:ce:ed:3a:d9:50:66:48:25:f1:11:b0:f9:3f:d6:d8:b6:
         50:63:de:a3:55:dd:84:2a:ed:22:80:41:4e:a6:e0:64:d9:92:
         a7:e2:9b:66:7b:9b:21:d9:00:e4:10:af:7f:1a:06:76:0b:bc:
         1e:cd:14:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----