Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
File:                     d62baf1d43712ef5f3860b21d04e8534536fa164.cer (raw, json)
Hash identifier:          BVBDxVhuwQB2Y4R9J3zOcFiNVycrWrKXy2v0PsdfDOA=
Subject key identifier:   87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF11EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:45 +0000
Certificate not after:    Tue 23 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 27995
                          IP: 179.2.0.0 -- 179.4.255.255
                          IP: 186.20.0.0/15
                          IP: 186.172.0.0/14
                          IP: 190.110.128.0/19
                          IP: 191.116.0.0/14
                          IP: 2800:540::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15667690 (0xef11ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:45 2017 GMT
            Not After : Jul 23 06:00:00 2024 GMT
        Subject: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e3:f6:f8:88:c0:46:22:df:97:6c:45:56:ad:
                    c7:0c:3b:56:fc:ed:99:6b:e7:36:8a:0f:32:18:93:
                    45:9d:be:22:fd:d0:87:80:7a:a5:7a:53:c0:4b:d1:
                    0a:f7:a1:a2:d0:3c:7c:a4:d8:02:e1:a5:da:e0:4b:
                    ea:41:ba:98:61:e2:3b:c6:8d:8a:6c:65:b6:dd:c3:
                    cd:6b:b3:4b:17:3b:cf:87:18:98:22:25:c1:01:49:
                    7e:4e:ec:07:b6:1a:46:ea:62:cd:7d:00:61:8e:42:
                    65:74:4d:1f:48:31:94:be:c2:38:8f:14:62:f2:0c:
                    f6:da:e0:67:eb:a3:8f:7f:81:7c:8e:7c:81:e3:f5:
                    de:94:9d:28:25:3e:34:e9:0f:a2:4e:2a:4f:fe:c0:
                    4c:57:40:02:c6:12:e7:80:e6:ca:22:c7:67:0c:33:
                    3e:cb:1f:ea:9f:0a:c1:94:f1:00:ba:74:ff:38:77:
                    6e:53:f2:ef:58:77:b9:27:92:f2:b3:22:c2:6c:89:
                    1a:32:80:17:80:cb:24:57:d1:78:92:fe:da:2f:61:
                    0d:76:51:c4:66:be:b2:99:85:17:f0:a4:23:93:58:
                    9e:b2:43:79:b0:29:63:9f:f0:08:aa:c3:a6:d5:fb:
                    6a:94:f9:65:a9:6b:af:8c:4e:48:92:e4:ae:66:b9:
                    7d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.2.0.0-179.4.255.255
                  186.20.0.0/15
                  186.172.0.0/14
                  190.110.128.0/19
                  191.116.0.0/14
                IPv6:
                  2800:540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27995

    Signature Algorithm: sha256WithRSAEncryption
         4e:5f:1f:0d:41:bf:6a:00:f8:e7:eb:0d:83:f1:9b:5a:cc:e4:
         a0:0a:33:69:8c:90:85:8c:dc:02:ed:b8:fd:c2:b7:84:1a:fe:
         6d:98:32:06:d7:13:55:50:82:5c:58:ef:1b:2a:2b:1e:1f:e5:
         e1:cd:bc:fa:28:b4:5b:a5:3d:d3:97:14:7e:55:8a:89:66:3f:
         43:5a:0e:58:25:5a:d3:b1:4b:bc:ac:4d:31:c3:43:22:0a:02:
         23:7d:42:ce:35:52:f6:53:02:d0:e1:07:69:fc:eb:43:14:65:
         3b:9f:e7:2a:6f:75:ed:8e:51:47:04:b0:11:ba:49:24:fa:7a:
         5f:d8:d5:6e:d5:c9:01:f4:2c:df:80:db:d4:42:36:7d:3c:0d:
         28:b3:d5:be:13:91:75:2a:c8:25:49:35:b6:81:a4:d1:e1:9d:
         c6:79:dc:80:f2:e1:2f:d3:62:8a:4c:78:71:8c:fe:ab:ce:2c:
         fc:a6:47:f4:8e:85:9a:9a:0c:fc:29:d9:67:88:e9:7a:77:1d:
         06:27:40:7a:ee:77:04:88:c5:b1:d4:aa:b9:7c:dc:02:9a:80:
         12:05:b9:9a:8b:92:f9:04:63:83:2e:06:94:54:59:e2:05:41:
         20:17:6b:fc:63:06:b7:e0:50:a7:c4:62:77:21:db:33:b1:07:
         a7:4f:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----