Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84f15bb8fc65ad58e3221ec58ae660440f51d9b.cer
File:                     e84f15bb8fc65ad58e3221ec58ae660440f51d9b.cer (raw, json)
Hash identifier:          28cN+bhfOvndFOxwXomyMtTx4UgxDMuEZCfSQj2Qs+o=
Subject key identifier:   47:A9:44:70:25:77:92:94:9E:17:93:CD:BC:31:49:8C:70:58:9E:62
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F14638
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4f727fd8-bab8-4e88-86dc-0e2e8ad48ebb/e84f15bb8fc65ad58e3221ec58ae660440f51d9b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4f727fd8-bab8-4e88-86dc-0e2e8ad48ebb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:44 +0000
Certificate not after:    Sat 10 Aug 2024 18:07:29 +0000
Subordinate resources:    AS: 263709
                          IP: 201.131.45.0/24
                          IP: 2801:14:6000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15812152 (0xf14638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:44 2017 GMT
            Not After : Aug 10 18:07:29 2024 GMT
        Subject: CN=e84f15bb8fc65ad58e3221ec58ae660440f51d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:69:b5:fb:41:35:8f:71:29:f2:2a:67:b6:
                    ca:1c:b9:e4:f7:f7:8c:ec:e9:16:96:3b:74:5d:14:
                    c6:54:f3:f2:08:86:fa:1d:4c:9a:6d:73:6e:c5:49:
                    0e:5e:b9:31:b1:1b:24:3c:dd:43:be:a2:6e:9b:05:
                    40:f1:ef:cd:6e:ac:c3:e9:2d:3f:a5:e6:c2:65:67:
                    1b:38:eb:50:2c:3f:62:4c:e3:b9:37:3e:4a:10:4b:
                    f1:2f:c6:7c:84:0b:6e:67:6e:7c:79:50:11:7a:6c:
                    e5:7f:bd:d3:5e:f3:77:2a:24:f8:c7:7e:58:32:73:
                    b3:43:8a:2a:fd:66:c6:95:a1:1d:6c:f5:7c:b7:0e:
                    ea:25:4d:ba:66:ce:02:9e:a2:c8:f8:fe:56:d9:85:
                    71:3d:a6:7c:aa:47:41:e9:94:da:62:61:59:f3:2f:
                    0a:96:8c:32:95:52:8f:bc:40:c0:e7:40:8d:6b:f1:
                    49:e7:bf:d1:ee:ae:e2:2c:f4:77:df:fb:e9:2f:57:
                    9e:a1:62:34:da:1e:94:d4:e1:4f:d5:91:c0:19:e3:
                    8e:c2:f9:c0:a4:2f:da:17:da:de:c2:8b:74:04:27:
                    d0:17:2b:da:eb:42:17:a2:93:df:93:8f:40:33:02:
                    ef:31:a9:20:6c:21:13:50:97:a0:ee:4f:c2:4b:41:
                    37:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A9:44:70:25:77:92:94:9E:17:93:CD:BC:31:49:8C:70:58:9E:62
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4f727fd8-bab8-4e88-86dc-0e2e8ad48ebb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4f727fd8-bab8-4e88-86dc-0e2e8ad48ebb/e84f15bb8fc65ad58e3221ec58ae660440f51d9b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.45.0/24
                IPv6:
                  2801:14:6000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263709

    Signature Algorithm: sha256WithRSAEncryption
         1d:42:36:34:19:db:de:d5:9e:65:da:ab:03:c3:b5:52:6f:0c:
         13:3a:fc:a0:62:cb:0e:e8:f0:81:a9:a2:48:81:fa:9c:33:7a:
         53:26:9c:5f:f2:7b:7e:72:3a:fe:b3:09:f7:8f:33:7e:dc:94:
         6b:8e:98:a0:5d:48:56:d7:40:d2:d7:79:e2:13:f0:8b:3d:d1:
         95:d8:56:e8:04:9e:d3:67:18:33:e3:0e:27:6e:8b:cb:35:2e:
         5a:fc:88:4d:a2:17:1c:09:11:9d:28:e2:18:41:d2:e5:17:ed:
         71:ce:76:c0:38:48:c0:d6:da:89:c1:9d:e9:5e:88:7b:b3:88:
         99:18:67:62:4e:a5:95:16:e9:52:f2:87:7c:8a:94:72:6c:b6:
         6e:52:f7:dd:46:96:81:21:8b:5c:bc:35:ea:2d:51:68:c9:1a:
         1c:3b:31:35:97:fd:70:5d:ca:64:ae:38:c6:c1:ca:79:86:00:
         0d:63:fe:58:74:4e:0e:bd:aa:c1:74:78:1b:15:c8:49:91:0b:
         c2:a1:23:7f:6c:32:f5:77:bf:9a:25:18:9f:6f:6f:8e:22:48:
         4a:40:23:71:fe:b6:9d:a6:73:16:3d:a9:a8:d7:aa:ed:a4:db:
         61:1f:7d:18:3d:97:3f:f5:f4:e8:2e:1b:e6:26:a1:c0:71:af:
         c5:16:40:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----