Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6d69c211172a6cc052b3c46866fb5c345948217.cer
File:                     c6d69c211172a6cc052b3c46866fb5c345948217.cer (raw, json)
Hash identifier:          KmEatHOuW55cGJ5iq/7AMFTPC6gCYwcjdaN+XJJp1T0=
Subject key identifier:   B7:92:B3:CA:CE:67:BC:DC:D6:7F:12:1E:BF:0A:B2:A3:CB:35:F2:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBAEC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2f91cefb-9999-46a4-bb53-859be45b4515/c6d69c211172a6cc052b3c46866fb5c345948217.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2f91cefb-9999-46a4-bb53-859be45b4515/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:25 +0000
Certificate not after:    Sat 29 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 27927
                          IP: 168.0.184.0/22
                          IP: 170.78.220.0/22
                          IP: 181.114.32.0 -- 181.114.55.255
                          IP: 190.11.96.0/19
                          IP: 190.120.48.0/20
                          IP: 190.120.144.0/20
                          IP: 2803:c080::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15445702 (0xebaec6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:25 2017 GMT
            Not After : Jun 29 15:00:00 2024 GMT
        Subject: CN=c6d69c211172a6cc052b3c46866fb5c345948217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:7d:74:8a:c8:63:98:6f:44:a7:16:00:3e:
                    a7:8e:02:c6:c7:e3:0f:3a:f1:cb:58:bb:d4:55:b5:
                    7c:86:20:b8:79:e7:fc:8f:95:e0:b3:aa:d6:e1:4b:
                    0b:4e:c4:6e:cc:c3:d3:26:d1:06:7f:fe:44:d0:18:
                    bf:cb:fd:53:76:32:f7:b2:a5:f0:b9:1f:e7:73:15:
                    5b:d7:62:da:43:53:c1:96:ea:82:43:19:c0:2d:21:
                    fe:9c:db:1e:c4:da:1c:2f:f4:b1:3c:03:c4:83:80:
                    6b:b7:5f:9e:1a:b1:a8:be:dd:f1:99:52:23:c0:a3:
                    a9:54:7d:c6:11:83:c0:b1:4a:58:f6:e9:de:b0:4e:
                    11:2b:6d:e5:5e:0d:5e:29:b0:ad:66:56:a8:84:7f:
                    a0:0c:69:c4:94:10:f4:88:9c:00:94:c9:bb:00:0d:
                    82:b4:31:8b:ae:4e:bc:0e:22:44:4b:fe:40:d6:7c:
                    d5:71:8d:ee:97:38:fe:02:0f:9e:e1:84:50:14:8a:
                    c1:9e:b5:24:4d:93:15:72:cb:c8:9b:d3:78:dc:32:
                    c7:5a:3d:b5:e7:e3:f3:10:dd:fc:19:81:a4:85:4c:
                    dd:80:bf:2f:36:a7:c5:96:6a:29:73:bd:ba:5b:11:
                    16:03:89:b9:d8:b6:6b:9f:9b:8f:25:38:22:ea:7b:
                    05:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:92:B3:CA:CE:67:BC:DC:D6:7F:12:1E:BF:0A:B2:A3:CB:35:F2:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2f91cefb-9999-46a4-bb53-859be45b4515/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2f91cefb-9999-46a4-bb53-859be45b4515/c6d69c211172a6cc052b3c46866fb5c345948217.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.184.0/22
                  170.78.220.0/22
                  181.114.32.0-181.114.55.255
                  190.11.96.0/19
                  190.120.48.0/20
                  190.120.144.0/20
                IPv6:
                  2803:c080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27927

    Signature Algorithm: sha256WithRSAEncryption
         c3:a7:83:fe:3e:70:c4:9b:9c:3f:87:9f:63:72:d1:4e:a8:92:
         cd:f4:29:b6:84:ad:b3:12:ef:ee:40:da:d9:81:df:f6:da:6a:
         bf:11:36:46:8a:d5:11:8d:1a:79:0c:48:b6:e6:93:7f:0b:c6:
         cf:4f:ff:cb:1d:95:8e:ff:99:f3:09:bf:97:7d:7a:af:7b:89:
         d1:c1:91:63:58:ea:09:d9:11:88:e9:f8:67:ca:aa:9e:c0:7a:
         e6:7d:7d:c6:78:b8:9d:75:5c:67:81:7a:49:2f:8f:7e:31:85:
         90:ff:07:5d:39:b8:37:e2:e4:45:92:20:46:1f:94:af:b7:4e:
         99:30:7b:17:85:96:36:4c:d0:ef:bd:d8:58:d6:db:67:c5:11:
         11:cf:64:b3:b0:f9:32:df:a2:8e:16:f4:65:2b:b6:78:fb:4f:
         58:18:89:81:14:b7:a7:e1:2a:a9:66:d4:2b:45:86:2a:0e:3d:
         49:c8:35:e0:42:e5:13:2b:26:d4:dc:57:ba:a3:17:fc:cd:e7:
         63:c4:da:6c:44:a3:e5:f0:f0:6b:c4:8a:13:72:59:ed:e4:6f:
         36:d6:a5:cf:98:77:1c:cb:2c:f8:88:08:30:13:87:8c:ad:49:
         c2:8d:8a:8d:3a:80:e9:9f:95:57:d5:c0:a9:8e:98:50:8a:9e:
         b5:d7:12:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----