Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfba2f644c32a04220d0345745022ddbc3a8a05a.cer
File:                     cfba2f644c32a04220d0345745022ddbc3a8a05a.cer (raw, json)
Hash identifier:          0sSbm5PmJhqof1XbbbNpehd68j9NV+OXB8STUjvPdaM=
Subject key identifier:   9D:76:4E:19:9C:DE:89:A1:12:E2:95:76:1B:05:6B:AE:9B:79:D3:BF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F59C76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/cfba2f644c32a04220d0345745022ddbc3a8a05a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:38:00 +0000
Certificate not after:    Tue 17 Sep 2024 15:21:50 +0000
Subordinate resources:    IP: 131.255.104.0/22
                          IP: 2803:780::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16096374 (0xf59c76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:38:00 2017 GMT
            Not After : Sep 17 15:21:50 2024 GMT
        Subject: CN=cfba2f644c32a04220d0345745022ddbc3a8a05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:8d:d9:5a:79:3d:90:0b:d8:aa:1e:93:44:
                    27:22:fb:85:85:7e:30:db:d0:93:3e:e5:77:fa:40:
                    36:79:f0:08:ca:31:f2:46:18:3b:28:c2:c1:69:1d:
                    43:dc:b1:92:84:fd:74:bb:58:e1:6b:5e:15:25:71:
                    dc:a3:6a:7d:92:54:f5:15:98:61:04:9f:82:8c:3e:
                    c1:83:5c:a7:73:3c:73:d6:33:44:35:26:c0:e3:eb:
                    6c:5e:0f:43:ac:22:be:5d:37:3a:b7:51:22:95:58:
                    b0:c4:a3:1d:2f:10:f9:5c:4e:e7:70:8e:19:e0:6f:
                    e4:56:eb:52:9c:96:f8:2b:57:f0:80:80:56:d5:eb:
                    65:6b:95:31:61:7a:db:36:90:65:fe:4f:f5:0f:b9:
                    c0:e5:6c:c7:ba:81:b2:03:f9:9a:42:c4:a2:c9:b9:
                    37:12:99:ac:5c:95:79:d1:69:e6:c4:10:17:0e:83:
                    52:e3:da:a6:7f:d9:f8:b1:9a:a7:0b:36:38:c9:13:
                    29:66:33:de:08:8b:ae:34:4c:3d:4b:89:bb:f9:1e:
                    63:79:6c:30:1b:2f:bf:04:89:5d:6a:f6:49:50:36:
                    39:cf:83:de:3e:6f:15:80:b8:84:f8:fc:a4:07:4d:
                    6b:39:ed:b3:5d:c9:64:db:51:1f:35:65:f4:30:55:
                    5c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:76:4E:19:9C:DE:89:A1:12:E2:95:76:1B:05:6B:AE:9B:79:D3:BF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/cfba2f644c32a04220d0345745022ddbc3a8a05a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.104.0/22
                IPv6:
                  2803:780::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:c9:66:01:34:03:af:3a:df:a9:d5:35:d6:f7:6e:73:b8:8d:
         a6:1a:85:92:9a:fb:f1:b9:6a:73:56:74:ca:fe:d0:2d:dd:17:
         c5:6b:91:f3:66:b4:d6:c4:76:8d:16:f4:bb:34:89:2e:e2:cb:
         0a:9b:6a:58:f3:1f:b1:c0:b2:4a:34:1b:b1:d1:77:f4:a5:1f:
         4d:d3:7f:e7:59:54:ff:f2:22:60:9d:01:ed:10:08:eb:c5:f0:
         33:ce:f1:d7:35:03:bc:e3:78:82:65:dc:89:77:8f:83:51:2b:
         8a:67:c8:b4:1a:37:73:fb:f3:21:65:ba:11:8c:cb:f7:53:f3:
         8c:8e:74:dc:98:1f:27:2e:7b:b4:9c:4a:30:88:18:87:cf:42:
         e4:36:1c:f0:bb:bd:67:ec:91:88:c0:28:08:19:ea:60:bc:63:
         4e:ba:c5:89:61:0e:30:2c:9c:d9:fd:71:b7:de:f9:40:78:0c:
         14:9e:db:c7:2b:a6:a9:d2:2a:2f:5c:a2:54:e2:56:79:9c:6c:
         f8:3c:72:83:78:a6:1a:de:92:fc:77:62:84:e1:e8:b3:e3:2d:
         4a:b8:2d:43:8d:1d:9f:bd:71:e8:06:74:d0:7c:e5:cb:40:7d:
         8e:5c:08:8b:c0:6e:ae:19:0d:c9:b7:6f:10:e9:49:c5:38:ef:
         19:bc:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----