Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer
File:                     d21f7315b565f88e18de69169de5a1119c25988f.cer (raw, json)
Hash identifier:          UinBSaMzpLdsPzuM2hYL98+GKR0hKn2pQylJTx6xBuA=
Subject key identifier:   9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDEC96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/d21f7315b565f88e18de69169de5a1119c25988f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:30 +0000
Certificate not after:    Fri 08 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 52245
                          AS: 52468
                          IP: 186.148.96.0/20
                          IP: 2803:2b00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14544022 (0xddec96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:30 2017 GMT
            Not After : Mar  8 06:00:00 2024 GMT
        Subject: CN=d21f7315b565f88e18de69169de5a1119c25988f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c6:f5:83:d3:6f:76:c1:d1:ee:2e:f4:5e:bc:
                    73:45:13:3b:b0:19:6d:2f:ab:f1:7a:07:a5:20:38:
                    92:33:69:12:2c:f3:b5:42:b8:8f:f5:6c:e4:58:da:
                    0d:8d:09:0b:be:36:45:59:83:90:05:9f:36:28:d2:
                    8f:db:6d:08:41:23:9d:a7:ed:d7:7b:11:63:50:21:
                    11:30:1e:fa:a5:c3:29:5a:65:55:53:d1:9b:db:fa:
                    6f:13:aa:25:96:7a:ca:5e:2a:8e:4d:c0:3d:ea:97:
                    ee:ba:db:08:20:fc:ff:58:f5:2f:3b:b1:f3:2a:ac:
                    f2:db:cc:73:94:b2:d7:ac:d6:ec:e0:f8:11:77:da:
                    04:99:fe:f3:6d:23:8a:4c:88:81:6f:1f:74:33:e3:
                    8d:9c:4c:30:c8:26:c0:52:5f:4f:c0:94:7f:c4:e0:
                    a9:49:b7:f5:b4:e9:22:c2:3f:b6:dd:84:b8:87:06:
                    5f:a1:9e:0c:20:39:7e:ba:7d:02:aa:fa:8f:c1:97:
                    90:4e:86:fe:7e:51:e4:17:90:b3:e7:19:f7:64:a2:
                    fc:3e:3d:39:bf:f6:9c:0e:d8:5f:cd:89:81:4d:ca:
                    82:0c:a9:18:64:ac:f2:4b:d9:59:06:24:17:99:5f:
                    4e:be:f8:0c:5e:7d:0c:d7:4a:07:68:68:ba:86:98:
                    88:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/d21f7315b565f88e18de69169de5a1119c25988f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.96.0/20
                IPv6:
                  2803:2b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52245
                  52468

    Signature Algorithm: sha256WithRSAEncryption
         52:27:3e:a7:32:b7:5e:b5:d6:c5:03:57:8b:b3:53:7c:15:97:
         ac:b4:e6:26:82:6a:16:3c:d7:1f:14:da:e5:fe:7a:e7:d6:58:
         a7:cf:b8:08:c8:a9:f6:a2:58:9a:d4:1b:ac:28:d2:e2:eb:1b:
         f8:1a:a4:22:66:9f:ea:e8:eb:bf:0c:b1:4c:2e:1f:c6:2e:74:
         11:37:fc:3b:fe:5a:5e:bb:9b:ca:3f:87:9c:d0:bd:3d:76:92:
         01:d4:5d:d5:2a:8d:f1:24:cf:b7:27:0b:fc:13:bd:b7:a8:63:
         b8:38:11:7b:e3:01:05:3b:19:80:67:57:fb:a2:34:ab:ff:37:
         a3:3b:21:5f:a4:76:89:bd:87:58:ed:5a:0f:17:94:e2:65:fe:
         37:7e:4a:f3:59:6e:52:80:8c:c7:6a:f5:92:cc:37:c2:a8:d1:
         34:e1:00:b1:ea:db:6f:18:4e:71:dc:d7:a1:cf:a9:78:b8:fb:
         ec:4d:4d:58:2f:f8:5b:71:d8:8f:a7:c0:72:43:1f:2d:7f:02:
         be:7a:fa:e8:8b:63:7b:6d:5f:09:ff:7e:03:15:3a:13:69:b1:
         8e:95:16:c1:ff:0b:0b:2f:2f:e1:a7:84:ac:6e:3a:78:98:84:
         91:7c:c5:46:7c:1f:02:40:29:90:3b:d8:13:73:de:aa:f5:62:
         6b:1b:73:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----