Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer
File:                     c6e6abb9e295aea3473895245eb2e4f25f175b38.cer (raw, json)
Hash identifier:          xGImOWK5wmXY+9VJjhTU6YNBE4kRnL4YFHJZgAUIJZI=
Subject key identifier:   C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA3396
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/c6e6abb9e295aea3473895245eb2e4f25f175b38.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:08 +0000
Certificate not after:    Sun 21 Jan 2024 14:00:00 +0000
Subordinate resources:    AS: 27814
                          AS: 52482 -- 52483
                          IP: 200.1.6.0/24
                          IP: 200.110.112.0/20
                          IP: 2001:13c7:6006::/48
                          IP: 2001:13c7:6f00::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14300054 (0xda3396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:08 2017 GMT
            Not After : Jan 21 14:00:00 2024 GMT
        Subject: CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:85:cf:b5:53:29:87:b4:a3:b9:d5:13:13:c4:
                    66:30:b7:3d:eb:b8:2b:45:18:a6:15:fa:f6:14:de:
                    09:f0:fb:3d:a7:23:48:58:22:38:63:60:f3:db:e5:
                    69:68:60:cf:2e:d0:15:ec:dd:00:b5:be:e3:a9:bf:
                    98:c0:79:e7:38:f5:ca:8e:38:b5:d4:45:32:12:23:
                    58:3a:83:c1:e8:aa:26:7a:40:dd:d3:a9:9c:ca:07:
                    2f:02:5c:53:da:e5:84:30:f9:8f:fe:0e:83:57:55:
                    dd:1c:40:75:4e:e8:98:ae:af:51:5e:23:bc:5f:20:
                    a1:f6:18:9b:29:f6:71:ee:04:3f:c3:67:f8:cf:b2:
                    15:18:82:ed:4b:fd:90:0e:fb:80:f6:35:d5:ec:72:
                    8b:34:4a:87:43:8b:8a:0c:83:13:74:f5:21:d5:53:
                    b5:bf:49:0e:21:f2:90:7b:f0:86:81:2a:a3:04:ff:
                    da:e3:64:29:d0:51:45:0c:30:d3:42:fa:67:e1:7f:
                    e4:c3:99:ae:8f:dc:7b:aa:35:9c:7f:b2:62:f9:9a:
                    ed:6f:00:dc:ff:a5:ff:b1:9f:57:ca:f3:ea:75:71:
                    32:d4:a3:61:10:4a:c8:b5:8d:da:94:c4:ff:bd:17:
                    78:19:f7:aa:c7:6b:e5:94:a0:9f:bc:79:63:5f:f4:
                    fa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/c6e6abb9e295aea3473895245eb2e4f25f175b38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.6.0/24
                  200.110.112.0/20
                IPv6:
                  2001:13c7:6006::/48
                  2001:13c7:6f00::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27814
                  52482-52483

    Signature Algorithm: sha256WithRSAEncryption
         97:b9:17:ba:5c:e9:2f:3f:31:da:37:3b:a1:bc:94:0a:a3:6f:
         d1:31:4d:35:7c:6b:c1:86:f6:38:9a:27:10:f5:90:f9:f4:d3:
         1b:27:0f:2d:31:b1:12:c1:2d:f1:81:55:88:98:20:90:b3:21:
         39:67:55:d2:68:3e:75:f8:f3:7d:9d:f3:1d:79:21:cf:c6:3b:
         1b:19:71:2b:39:71:cc:ee:ed:e4:dd:d4:75:ce:bb:94:66:61:
         83:e1:3b:03:0b:19:4b:0c:61:58:ca:a3:11:99:8a:af:8c:41:
         cc:e8:75:35:60:eb:33:3a:64:c4:a7:9a:9c:28:68:2e:bf:90:
         c1:d6:95:5a:a9:d6:17:26:9c:40:99:17:68:83:96:0b:ec:c3:
         b2:bc:df:dd:bf:48:e1:12:2e:3d:0e:18:60:e7:3d:a3:68:17:
         48:f1:15:56:ac:28:94:59:6c:f2:f4:dc:04:e2:1c:6c:2b:2c:
         a7:fd:11:bb:ea:fa:8a:38:cc:95:e6:af:b8:14:59:20:8c:42:
         e4:9e:f9:a5:45:b2:f9:05:aa:0d:47:fb:f4:f2:33:53:0b:28:
         a1:f9:9c:d5:fa:e3:63:6e:70:d7:18:4e:37:64:42:bc:ed:ed:
         3b:a8:e5:a6:8f:0e:29:ae:86:cd:0e:14:38:55:72:dd:3d:dd:
         4b:01:7e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----