Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e11ec0a0b43ef57ac407a6c5051281adb24eb48d.cer
File:                     e11ec0a0b43ef57ac407a6c5051281adb24eb48d.cer (raw, json)
Hash identifier:          0CrC3EOH1yGCLTcHiBWxcRzLVPFK79QaVze+a3zNHrw=
Subject key identifier:   F8:73:26:40:20:33:30:20:14:9B:00:A0:A2:2E:BE:5F:F8:AB:5E:19
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF5607
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5ee70b8a-3beb-482a-a0eb-3d566f3931db/e11ec0a0b43ef57ac407a6c5051281adb24eb48d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5ee70b8a-3beb-482a-a0eb-3d566f3931db/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:03 +0000
Certificate not after:    Fri 22 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 52476
                          IP: 190.113.84.0/22
                          IP: 2803:5b00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14636551 (0xdf5607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:03 2017 GMT
            Not After : Mar 22 06:00:00 2024 GMT
        Subject: CN=e11ec0a0b43ef57ac407a6c5051281adb24eb48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6e:60:6e:85:f5:73:30:5f:e2:e6:3d:bf:29:
                    e7:71:00:b2:df:01:7f:0f:65:97:a8:90:37:26:52:
                    79:52:8e:56:9d:91:b9:37:07:a8:4d:c8:ed:f2:9d:
                    e2:fc:26:c1:44:04:ba:ee:88:ed:4b:bc:8c:e1:89:
                    04:28:6b:9b:9b:6e:3f:69:04:01:ad:1b:3c:9e:86:
                    46:0b:01:50:dd:e6:3e:f3:5a:9a:ea:b5:74:3f:e4:
                    69:34:9b:ea:89:3d:85:cc:de:5d:8d:15:0d:3e:cc:
                    9f:15:61:e8:39:a9:a0:65:86:62:20:39:73:e7:ad:
                    40:40:c6:9f:50:87:bd:bb:5f:78:25:37:26:e0:20:
                    57:35:b1:9b:d7:69:64:fd:58:3a:e8:8e:6d:f9:1b:
                    5e:3f:20:b3:de:c0:c3:ff:17:35:97:3b:42:35:3f:
                    97:72:35:07:17:ff:70:77:99:0e:47:25:3b:0c:10:
                    c1:f9:93:f2:92:42:c6:0e:e4:d6:ef:8f:22:8c:d1:
                    b2:b3:49:62:f7:47:ff:c3:b3:f7:5b:e5:85:3f:56:
                    2b:e4:1b:8c:ea:0d:0f:f6:31:8d:e3:fa:f9:ed:4c:
                    b7:25:e1:e9:d8:3e:68:af:67:1b:5f:b8:ca:6f:31:
                    f8:70:12:58:62:82:f0:2f:0f:38:5f:17:76:e1:88:
                    cd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:73:26:40:20:33:30:20:14:9B:00:A0:A2:2E:BE:5F:F8:AB:5E:19
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee70b8a-3beb-482a-a0eb-3d566f3931db/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee70b8a-3beb-482a-a0eb-3d566f3931db/e11ec0a0b43ef57ac407a6c5051281adb24eb48d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.84.0/22
                IPv6:
                  2803:5b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52476

    Signature Algorithm: sha256WithRSAEncryption
         aa:23:35:d6:a7:60:ce:1b:cd:ce:61:7d:4b:6e:98:ff:2d:6c:
         58:15:73:66:09:8f:e6:ce:98:c5:ab:9d:cf:08:fd:e8:fa:36:
         3f:00:f5:e9:93:1e:d8:32:44:83:80:d1:6e:12:66:37:7c:40:
         3a:97:59:96:25:e4:d3:8b:62:2a:c0:8b:7f:8b:b3:3d:21:92:
         06:11:fc:4f:22:21:c9:93:38:e6:6b:96:94:7d:5e:9d:14:a0:
         bf:3d:90:e8:74:4d:44:a9:a5:81:86:72:0a:00:fc:ad:5a:87:
         56:04:b0:10:81:1b:62:68:5a:f7:a7:66:99:f3:b6:83:9f:a6:
         17:2d:a2:34:b1:86:b1:e9:49:1c:8c:37:76:3e:12:de:a1:f6:
         c4:b0:48:63:8b:a9:90:f0:fa:85:8f:7a:ad:d0:d8:76:ec:d2:
         09:dc:f5:69:79:b0:30:b6:82:01:4e:d0:cb:84:fb:3f:e7:fb:
         38:a4:f7:ee:96:92:34:f3:ab:74:15:25:3a:87:87:7c:82:4d:
         db:60:57:21:44:22:96:0c:20:5c:53:ef:f3:7b:55:2a:b7:37:
         de:ec:25:8d:54:74:85:8d:5d:01:89:3b:c7:39:d8:77:69:42:
         5e:a1:c2:d3:da:f7:63:37:49:5d:2e:51:d3:63:4d:ec:0e:94:
         35:e4:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----