Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cab6fb04adee0738d3e5a3d1bade4f4643eebb77.cer
File:                     cab6fb04adee0738d3e5a3d1bade4f4643eebb77.cer (raw, json)
Hash identifier:          OfY4SgLzbMKsEmyffYnaq2lIzxkT4hwk+vXmt/H5qi0=
Subject key identifier:   0D:7B:30:57:A4:93:ED:06:D8:BF:63:8B:CE:60:B9:0A:ED:41:E1:DB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1539F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2c158c3a-6b20-48ae-bd4f-de3260213708/cab6fb04adee0738d3e5a3d1bade4f4643eebb77.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2c158c3a-6b20-48ae-bd4f-de3260213708/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:29 +0000
Certificate not after:    Fri 12 Apr 2024 19:29:12 +0000
Subordinate resources:    AS: 263782
                          IP: 138.121.228.0/22
                          IP: 2803:9440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14767007 (0xe1539f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:29 2017 GMT
            Not After : Apr 12 19:29:12 2024 GMT
        Subject: CN=cab6fb04adee0738d3e5a3d1bade4f4643eebb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5b:f0:05:4a:e2:10:cd:df:1c:f2:e0:b8:78:
                    62:4b:7a:21:05:0f:ad:dd:c9:94:d7:4b:82:9d:50:
                    1b:ff:ed:88:4e:39:eb:95:41:b3:68:a4:16:b4:30:
                    71:0f:75:ae:38:d0:e9:12:d5:b9:7e:19:41:4c:d9:
                    bc:bf:71:18:a0:d5:22:00:b4:58:90:32:3f:18:3e:
                    a0:fa:4d:5a:3b:bc:3d:10:a6:66:c1:07:44:b6:62:
                    ca:5c:6f:81:93:7f:54:97:e4:de:37:f8:12:b0:87:
                    8f:0d:b2:b4:21:66:54:4c:51:56:39:44:29:f2:2b:
                    36:d7:5e:6c:a1:a4:6d:0b:f9:83:81:5e:14:c2:69:
                    39:1a:9d:14:33:e8:c0:69:4c:67:0a:8b:ab:90:6f:
                    f0:f8:75:a8:f2:69:75:ec:bc:47:8d:22:d0:bc:e1:
                    7b:fe:8a:1c:85:a7:6c:ef:34:4f:f4:bb:e8:64:99:
                    d8:41:49:8b:a8:0f:0a:02:e9:ba:af:a7:ff:d7:92:
                    ad:32:a8:37:08:a1:bb:09:7e:75:39:11:d5:9d:54:
                    7b:a5:e9:6c:05:d1:4e:7f:59:87:b8:da:97:c2:bc:
                    61:25:d3:52:72:d4:10:3c:12:2a:1e:0d:44:4d:4f:
                    7d:96:e5:4f:68:33:ef:b7:9b:93:e0:52:20:9c:37:
                    ef:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7B:30:57:A4:93:ED:06:D8:BF:63:8B:CE:60:B9:0A:ED:41:E1:DB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2c158c3a-6b20-48ae-bd4f-de3260213708/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2c158c3a-6b20-48ae-bd4f-de3260213708/cab6fb04adee0738d3e5a3d1bade4f4643eebb77.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.228.0/22
                IPv6:
                  2803:9440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263782

    Signature Algorithm: sha256WithRSAEncryption
         59:e5:de:f4:16:92:2e:90:ef:5d:7d:ad:bb:76:ee:43:a1:5d:
         48:d1:a4:ad:af:19:fd:15:05:eb:fd:52:7a:6d:02:6b:d1:35:
         9a:84:16:3f:1d:9e:cf:f0:c1:8d:55:26:da:ae:2b:b2:4c:36:
         b3:70:87:66:46:c1:53:7a:e3:95:05:7b:83:45:b9:20:8c:57:
         d4:55:d0:16:c4:fc:6f:33:2b:10:55:02:66:aa:cf:2c:23:93:
         89:66:de:ba:4e:22:1e:84:f2:21:95:dc:88:a3:69:1f:3f:bf:
         40:f9:78:23:97:f5:b0:f3:ab:ba:81:a5:48:f4:58:ab:8d:97:
         14:20:6c:e2:1b:8b:0d:c9:51:17:3e:cd:e7:30:a2:c9:67:9d:
         e2:cd:db:a0:01:6b:68:cd:0c:fb:86:cb:3e:d8:ab:fa:28:25:
         31:27:b6:79:6e:50:69:b4:f1:2e:3b:09:fc:31:3a:0d:38:6f:
         2d:db:5c:db:5b:7d:ad:75:d0:55:1b:88:bc:6d:83:4e:6b:b9:
         42:2b:a4:1d:8a:28:be:25:5b:3d:fe:09:c9:99:ea:88:71:2f:
         c7:7b:65:3a:08:d1:48:18:02:74:3d:45:a5:1c:ca:a8:d2:d0:
         e5:55:77:3e:f3:ff:2d:1c:71:0b:8c:e2:32:35:ba:b8:3e:02:
         66:9e:11:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----