Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dea69d17f69cb16670c3de7e90eb53b0676eecf5.cer
File:                     dea69d17f69cb16670c3de7e90eb53b0676eecf5.cer (raw, json)
Hash identifier:          F+n7I0q431+V02xEf1MGjLZwy/Ych5/uFia7bnjNlV4=
Subject key identifier:   E8:B0:57:1D:83:6D:69:AD:18:3E:CC:82:FC:12:BB:BF:6A:45:82:BC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA1457
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/02bb3bb3-5a9b-4fdc-8f3f-5cde8a4f58cb/dea69d17f69cb16670c3de7e90eb53b0676eecf5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/02bb3bb3-5a9b-4fdc-8f3f-5cde8a4f58cb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:53 +0000
Certificate not after:    Mon 17 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 14867
                          AS: 27975
                          IP: 190.7.96.0/20
                          IP: 190.102.160.0/19
                          IP: 200.31.64.0/19
                          IP: 2800:5b0::/32
                          IP: 2803:b000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15340631 (0xea1457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:53 2017 GMT
            Not After : Jun 17 06:00:00 2024 GMT
        Subject: CN=dea69d17f69cb16670c3de7e90eb53b0676eecf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:9d:32:0a:87:e5:82:f2:a1:9f:cb:fa:4b:
                    12:4f:cd:67:01:78:bc:79:3d:24:30:5b:74:99:e2:
                    eb:12:7f:8a:91:bb:c3:fb:eb:ac:6e:81:d2:9a:8a:
                    ac:b0:57:c7:f7:51:fa:b7:ff:d4:24:b8:b3:bd:c9:
                    c2:d7:af:31:c3:92:a6:58:7d:99:30:57:c7:2d:9f:
                    69:30:83:b6:27:5a:a7:1e:41:0d:2b:b9:d2:9c:60:
                    bd:ba:d0:7b:96:07:17:a1:34:85:3b:22:d1:40:09:
                    3d:cc:4f:90:5e:4c:be:bb:8a:1c:b8:1c:9e:0d:f6:
                    30:24:bb:b3:22:1b:80:6b:65:2e:72:62:d9:ff:11:
                    b8:55:5a:20:41:08:eb:55:ad:15:52:82:c5:74:a0:
                    78:4e:14:59:ff:0a:b3:a8:ab:a0:dd:81:f2:82:06:
                    34:3c:11:01:24:3b:4a:d7:8e:30:4e:71:2a:1f:e3:
                    d0:32:62:99:d8:24:ee:f3:ac:c3:cf:bf:01:00:3a:
                    b1:3e:05:44:4e:e5:46:9b:c8:9f:b1:78:3f:cb:26:
                    25:22:6c:2f:da:3b:1c:43:40:5d:49:01:87:5d:57:
                    5e:57:9b:bd:ac:30:52:f5:c5:89:bd:5a:1e:2a:ca:
                    af:d6:15:c0:a7:ec:1b:5f:ec:b9:75:a6:bc:21:9a:
                    ce:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B0:57:1D:83:6D:69:AD:18:3E:CC:82:FC:12:BB:BF:6A:45:82:BC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/02bb3bb3-5a9b-4fdc-8f3f-5cde8a4f58cb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/02bb3bb3-5a9b-4fdc-8f3f-5cde8a4f58cb/dea69d17f69cb16670c3de7e90eb53b0676eecf5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.96.0/20
                  190.102.160.0/19
                  200.31.64.0/19
                IPv6:
                  2800:5b0::/32
                  2803:b000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14867
                  27975

    Signature Algorithm: sha256WithRSAEncryption
         a1:d8:a1:44:bc:88:6e:b3:6a:d4:f8:87:8e:af:df:8f:27:26:
         1b:94:b5:69:2c:01:b8:54:19:25:99:b5:0d:17:5a:5b:2b:c3:
         f2:ca:f0:22:15:5b:11:b2:a4:0a:d3:59:17:eb:6e:3d:08:00:
         cd:01:59:82:91:02:f6:2c:01:94:34:f9:ac:83:57:45:ac:9f:
         ba:6a:97:4a:44:e4:1e:de:6f:71:15:9e:fb:e6:c3:dc:3d:00:
         67:89:f4:69:b0:dd:08:28:bc:d7:56:8b:e0:fd:20:96:a8:73:
         34:95:18:55:f8:39:f3:d4:d9:94:29:82:dc:e5:72:3c:bc:19:
         ac:45:41:1f:19:63:f9:0f:1f:70:69:3d:02:70:18:2a:96:30:
         b0:12:b1:09:46:8f:18:9f:e7:08:c3:a2:e2:39:2f:ec:60:66:
         5a:66:62:2a:19:e7:90:80:60:06:54:70:01:35:b7:39:7d:f7:
         df:0f:eb:b6:a2:de:56:24:59:4d:6b:ba:90:6c:6b:12:32:3c:
         70:79:63:d9:bd:3b:78:a3:fa:17:d6:a0:ab:c3:fd:ae:37:18:
         da:91:de:51:90:3b:ff:b9:93:59:35:f5:27:d3:31:0b:42:95:
         d7:d1:53:1a:4a:fe:81:0f:3c:11:38:c2:df:7d:de:f7:0a:20:
         09:cb:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----