Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5402bfe1ad870c061abac12431f9dd6da475fb9.cer
File:                     e5402bfe1ad870c061abac12431f9dd6da475fb9.cer (raw, json)
Hash identifier:          iNDcn6p24behNe3ckldpwgeNSRHmQgmWGtnsnEJ3HEk=
Subject key identifier:   7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB178A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/e5402bfe1ad870c061abac12431f9dd6da475fb9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:59 +0000
Certificate not after:    Fri 02 Feb 2024 22:19:44 +0000
Subordinate resources:    AS: 28050
                          IP: 200.74.248.0/21
                          IP: 2803:2040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14358410 (0xdb178a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:59 2017 GMT
            Not After : Feb  2 22:19:44 2024 GMT
        Subject: CN=e5402bfe1ad870c061abac12431f9dd6da475fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e3:cc:82:3a:8c:ef:12:15:b7:89:ee:dc:7e:
                    96:2b:ad:3f:8b:46:0c:a3:d3:88:5b:69:0b:df:95:
                    28:c8:5d:73:f6:d1:1c:1d:15:4c:ff:5f:9b:ac:40:
                    7b:29:4f:0c:2c:b4:e9:dc:46:ac:26:8b:95:6f:cf:
                    a5:52:06:2c:0f:6a:32:46:2e:35:28:04:a1:e0:0b:
                    3d:1e:ad:8a:bc:84:a0:38:4b:cf:a5:26:c1:21:61:
                    7d:4f:88:68:2a:00:16:f5:fb:74:46:3e:21:e2:d4:
                    55:f7:9b:ff:5d:f1:10:28:75:31:dd:2b:b3:eb:68:
                    7e:d4:c5:cc:55:2c:81:19:b9:03:b1:d5:9b:6b:ac:
                    e7:b5:70:ea:46:9e:0d:9c:98:03:19:a1:c8:37:7b:
                    63:2a:9b:c6:d1:9a:3f:2a:a6:46:22:bc:67:3c:06:
                    03:ae:ad:b1:b9:be:5d:5d:a5:26:e5:54:95:99:a2:
                    6f:d2:14:0c:a9:a7:8c:5e:e5:c9:c4:4f:05:f5:97:
                    25:ce:c0:0c:91:55:79:16:2e:93:16:b5:a5:6f:99:
                    6e:b3:60:32:db:0a:a3:cc:32:0e:4a:a8:72:9a:5f:
                    84:13:0e:97:f7:70:b1:c7:db:82:d5:38:4e:d6:36:
                    3f:8d:99:ab:13:8a:bf:1e:70:9f:68:93:89:b2:04:
                    ee:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/e5402bfe1ad870c061abac12431f9dd6da475fb9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.248.0/21
                IPv6:
                  2803:2040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28050

    Signature Algorithm: sha256WithRSAEncryption
         2a:b8:d1:9f:e8:2a:a3:6c:df:09:6a:ca:42:ea:71:e9:a0:a1:
         38:62:b0:8c:f5:3c:67:b2:78:a2:02:87:a1:26:8b:b7:9f:7e:
         a2:b5:e8:71:4b:7f:34:64:87:29:b5:dc:de:cd:28:a8:c0:29:
         15:7e:de:a9:81:6f:d8:2a:b4:2f:9c:cb:ac:b4:6f:ad:32:3c:
         48:4f:5e:0a:1c:e4:0e:2a:59:02:a4:44:97:f1:60:1b:07:25:
         fe:d1:4d:00:45:3a:6b:80:7a:aa:d1:a5:74:50:af:03:05:89:
         10:98:fd:1e:8e:d0:96:bf:ff:c9:97:e1:6a:e3:03:46:f4:6a:
         17:fa:66:e0:ba:79:5a:bb:ee:3f:68:fc:02:22:55:9f:d5:5f:
         11:cd:e9:21:ca:87:71:b0:e1:fd:70:1b:61:86:8a:a4:3f:06:
         e8:d0:16:a0:a4:c3:c8:c0:18:25:b4:78:6c:02:8f:45:46:1c:
         d4:43:be:81:0c:fc:6d:ca:6f:b3:ee:7d:f1:ae:75:2f:42:53:
         f1:67:2c:cd:55:34:f4:15:07:c8:b0:9d:06:fa:63:c6:19:36:
         84:76:12:d1:da:0c:66:2a:c4:ad:09:6e:b2:40:c9:1b:e0:57:
         87:ed:e9:8d:d1:e4:25:cd:64:2a:ca:be:36:e2:d6:c2:4d:62:
         8f:59:09:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----