Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf72872c5eecd6f45edcdd9476fc812c8d336a98.cer
File:                     cf72872c5eecd6f45edcdd9476fc812c8d336a98.cer (raw, json)
Hash identifier:          mFrIJ/pX1n6SoydpreK7NdOzH4VvJm8W97iwgFMbooM=
Subject key identifier:   9F:C6:4A:C8:65:40:64:9D:1E:E9:8F:1B:5F:48:22:CA:46:99:07:DB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB5105
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3e7f8a1e-dfb6-497f-9677-aa4953c2e096/cf72872c5eecd6f45edcdd9476fc812c8d336a98.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3e7f8a1e-dfb6-497f-9677-aa4953c2e096/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:25 +0000
Certificate not after:    Tue 25 Jun 2024 15:00:00 +0000
Subordinate resources:    IP: 200.23.32.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15421701 (0xeb5105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:25 2017 GMT
            Not After : Jun 25 15:00:00 2024 GMT
        Subject: CN=cf72872c5eecd6f45edcdd9476fc812c8d336a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:b3:5c:15:b8:8c:bb:9c:3e:f5:56:5e:e3:
                    f8:f1:cc:34:9b:63:ee:2d:6a:44:ce:c6:96:1e:a3:
                    9e:94:59:61:ac:b2:24:11:3f:19:84:38:31:71:61:
                    49:af:14:d2:19:54:a4:6b:cd:f2:54:7f:ff:ef:2e:
                    47:0b:c3:6b:50:04:ea:2c:13:be:c6:64:84:9c:e0:
                    77:80:10:79:5e:8d:31:cc:e7:ca:4b:0a:f7:22:d6:
                    67:16:5b:df:6c:81:aa:24:a1:a3:85:6a:c4:ad:a0:
                    bb:21:16:86:59:c8:f1:d3:20:14:ed:97:8b:e0:fc:
                    af:fb:f7:20:2f:59:2b:b4:75:43:fd:c8:83:01:62:
                    ba:03:7a:c5:fc:31:2f:bf:09:6d:06:36:0c:44:4e:
                    30:35:51:90:bb:38:25:d1:3b:11:20:9d:9d:a6:d6:
                    10:ad:d0:e9:1f:17:93:12:83:d1:07:f9:50:eb:af:
                    cf:cc:d1:6e:47:04:b8:15:0c:90:9b:1e:6e:b6:a5:
                    94:c4:81:04:72:07:50:d7:a7:2b:09:b4:68:91:b9:
                    41:75:23:6c:fa:2e:bc:43:94:0b:c0:97:09:7d:66:
                    21:ed:17:3c:fe:17:bf:61:1c:55:b3:a9:38:67:a9:
                    4d:20:27:b8:c2:2b:3c:1c:02:d8:72:b9:8d:69:2e:
                    a8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C6:4A:C8:65:40:64:9D:1E:E9:8F:1B:5F:48:22:CA:46:99:07:DB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3e7f8a1e-dfb6-497f-9677-aa4953c2e096/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3e7f8a1e-dfb6-497f-9677-aa4953c2e096/cf72872c5eecd6f45edcdd9476fc812c8d336a98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:3c:9b:f3:f8:09:8f:05:e6:ca:2e:e7:3a:87:72:38:ed:17:
         75:85:23:9e:e0:c2:f4:77:c5:51:63:88:bc:f3:1f:03:33:4b:
         06:8a:29:7e:f8:11:c9:dc:2c:a2:86:52:25:70:95:d1:29:35:
         33:42:b5:67:18:9d:5c:d6:96:fb:a1:55:99:68:43:b1:49:b3:
         71:cf:be:5e:41:59:bb:c0:82:a3:2a:8e:bd:fb:ae:58:b3:bb:
         22:2d:c7:f5:f1:89:bd:1e:0b:eb:be:d2:4d:aa:04:d8:7d:fc:
         30:40:d3:5b:77:43:6a:50:ed:95:b8:d2:d5:4f:a2:50:63:b1:
         0b:3f:65:8b:e5:9d:83:af:a1:44:29:a4:b6:a2:e4:1f:96:65:
         f6:fb:f6:b8:99:e9:18:95:20:38:39:bc:6f:89:4a:63:f0:4d:
         91:4e:1d:86:5e:50:e1:9c:87:8e:ad:9d:c2:42:b5:3e:63:32:
         4f:3d:f4:13:60:03:51:04:b5:27:51:79:a3:01:ed:58:44:9e:
         eb:26:69:ec:48:0e:ec:55:37:fd:7c:a0:95:ca:f3:4f:e2:a9:
         fc:61:ca:b6:96:e0:3c:93:af:5f:39:91:2a:88:e4:0e:e3:39:
         bf:49:18:97:1c:25:89:1f:22:5e:33:a7:9e:45:0a:6a:2f:26:
         3d:52:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----