Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
File:                     d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer (raw, json)
Hash identifier:          rHRbkGyseOYOmdMNiC3nmhSGPTMy3qZiH6vq/p6zuFs=
Subject key identifier:   EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C0FA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:18 +0000
Certificate not after:    Wed 20 Aug 2025 21:38:16 +0000
Subordinate resources:    AS: 273190
                          IP: 45.225.104.0/22
                          IP: 2803:aa20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17567655 (0x10c0fa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:18 2017 GMT
            Not After : Aug 20 21:38:16 2025 GMT
        Subject: CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:d3:53:29:7a:36:2b:f0:69:69:38:9d:08:
                    ad:3c:c1:a9:6e:a5:33:e8:dd:9c:8e:8c:0b:74:28:
                    41:18:f3:7f:60:c5:d9:e4:65:14:77:20:8d:d9:8a:
                    e0:35:0a:39:96:f2:6d:9d:4f:ed:be:d7:c8:78:cd:
                    0a:c9:e1:29:32:ef:37:0a:35:df:ea:9a:a8:19:d5:
                    65:72:0c:e8:fe:32:a9:c8:9b:2a:b8:d3:d8:6d:63:
                    da:d0:59:db:86:94:22:31:a4:85:2f:7a:b0:73:8e:
                    e0:32:97:89:cc:9b:6c:5d:85:4b:ee:1e:a0:5f:63:
                    fc:08:5b:db:ff:9e:11:ea:6c:3d:97:5f:40:d5:b3:
                    dc:fc:b9:32:a9:3d:85:ca:2e:a6:e9:5f:8f:90:1b:
                    ba:e4:5f:8e:b8:08:c9:11:a2:15:de:78:49:2c:a4:
                    29:48:73:bf:17:46:28:86:1e:16:5c:43:7c:ea:e9:
                    bf:50:6e:8d:77:23:33:bf:a2:a2:06:cf:fb:c8:78:
                    2d:fd:d8:af:e9:20:c3:68:99:ce:7e:af:a9:07:7a:
                    38:0b:aa:80:ee:e2:2f:ef:ee:f7:cc:f6:39:dc:0c:
                    12:26:6d:db:6c:43:2b:19:35:75:e4:4d:8a:7a:46:
                    32:18:3f:45:af:29:0b:7e:d9:3b:c3:bd:6d:60:04:
                    8e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.104.0/22
                IPv6:
                  2803:aa20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273190

    Signature Algorithm: sha256WithRSAEncryption
         6e:a8:d2:a6:e0:e0:a9:36:05:b2:42:da:ab:17:70:87:4f:49:
         98:55:ee:2f:aa:b9:8f:74:3c:56:6c:49:d5:a0:de:41:4a:96:
         1c:ce:33:42:b8:a1:4c:9f:98:f5:0b:a4:46:26:62:46:50:ef:
         cf:37:05:1c:2e:eb:1a:32:0f:d3:dd:2c:4c:33:12:f0:a1:c2:
         95:99:fe:77:85:d8:e3:b2:4f:91:a6:ad:7b:9c:e1:f7:b6:84:
         f9:7c:a4:40:18:79:22:95:f8:03:be:a9:90:11:4c:04:0a:ba:
         1f:be:3d:f0:cc:9e:72:86:14:f4:32:f8:91:30:65:b4:25:b5:
         c9:4c:ef:a8:80:06:c1:af:71:d8:23:09:23:65:4e:7c:e2:e0:
         87:5c:d2:b6:38:0b:24:49:52:89:4e:38:4b:bb:23:50:36:5f:
         ac:68:80:db:1c:09:e7:8b:38:29:74:d8:2e:0d:ab:89:e3:14:
         68:0b:14:55:00:fa:73:1a:91:4d:fa:86:ce:62:c0:5d:4a:81:
         82:1e:0e:62:15:5b:73:8d:09:2c:a2:48:11:b9:b1:9c:75:a1:
         e0:43:80:7f:fb:62:fc:b8:63:09:b5:7a:db:01:a4:ef:78:e2:
         92:cd:ef:50:78:f4:06:f3:c9:4b:07:16:95:55:9b:f5:8d:77:
         27:c2:4b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----