Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec26d796feff013fc3a15572c1aa63c868c10fa2.cer
File:                     ec26d796feff013fc3a15572c1aa63c868c10fa2.cer (raw, json)
Hash identifier:          zpFhF0oZpjiYQ9qzLfdeBoSf6H7krqcZEBR/5QCU1FE=
Subject key identifier:   68:A4:D9:F1:FA:A1:EA:6A:52:4C:01:E5:6E:E6:9F:00:4A:48:87:9B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED8CB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e7b3dc65-79c6-457e-9b87-b821fff8fe8f/ec26d796feff013fc3a15572c1aa63c868c10fa2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e7b3dc65-79c6-457e-9b87-b821fff8fe8f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:32 +0000
Certificate not after:    Sat 13 Jul 2024 22:31:15 +0000
Subordinate resources:    AS: 264784
                          IP: 168.197.216.0/22
                          IP: 2803:88c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15568056 (0xed8cb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:32 2017 GMT
            Not After : Jul 13 22:31:15 2024 GMT
        Subject: CN=ec26d796feff013fc3a15572c1aa63c868c10fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:7d:6f:df:b4:33:4e:c2:fd:53:35:ce:05:
                    81:41:f7:bb:31:82:2e:94:00:3c:ba:cb:0c:79:99:
                    1b:eb:ef:78:ad:7d:b9:81:92:89:44:31:e3:2a:6d:
                    e4:aa:7e:cd:63:cf:d5:a5:66:ae:78:ad:3e:bf:64:
                    d2:34:99:66:23:d0:49:22:3b:9d:82:dd:1b:74:83:
                    52:c8:45:a8:ce:2b:55:41:df:8c:b3:db:a5:c3:de:
                    d4:6b:bf:5c:36:82:ae:47:ae:e7:5b:72:d3:39:b9:
                    c7:e1:89:42:39:1f:1f:12:5d:11:8a:1d:6a:ca:06:
                    79:ad:e4:d1:a6:af:90:3a:83:4f:ed:9d:2f:5c:b4:
                    93:8f:55:3c:7c:62:71:ee:bb:80:ac:11:27:31:46:
                    61:32:6c:36:82:e2:0c:85:85:54:eb:17:4a:51:66:
                    13:5d:03:85:94:f5:67:b0:8f:25:16:b1:ae:0e:a2:
                    42:29:88:68:43:b0:4e:dd:3f:51:6b:81:b9:b2:05:
                    74:f3:07:f3:b0:5c:ad:14:63:4d:ef:83:2d:46:2e:
                    80:62:7d:a8:b9:6b:fe:80:0e:5d:03:7f:24:a1:cc:
                    d8:0b:c7:56:0e:40:1c:b7:07:a5:a6:45:26:05:a0:
                    f1:ac:a7:14:a7:2a:8b:5a:6e:a5:86:ba:b2:be:9b:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A4:D9:F1:FA:A1:EA:6A:52:4C:01:E5:6E:E6:9F:00:4A:48:87:9B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e7b3dc65-79c6-457e-9b87-b821fff8fe8f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e7b3dc65-79c6-457e-9b87-b821fff8fe8f/ec26d796feff013fc3a15572c1aa63c868c10fa2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.216.0/22
                IPv6:
                  2803:88c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264784

    Signature Algorithm: sha256WithRSAEncryption
         9e:f3:3e:c5:4c:46:7e:32:6d:91:36:c2:4f:69:ab:3c:e8:19:
         05:83:74:fb:fe:d1:63:06:cf:6c:13:e3:d4:fe:d7:c9:8f:4a:
         7c:08:c6:20:4f:7e:5f:ed:af:22:cf:09:1d:53:40:e3:1e:28:
         b1:0f:bc:e7:2d:93:58:25:69:f0:9d:bb:ec:fc:a1:4f:2c:97:
         b5:60:14:0d:3b:89:9e:50:fb:ba:48:87:63:96:fb:07:91:14:
         52:1c:28:a3:ba:43:8b:94:a5:74:bf:bf:64:5a:3f:e7:83:ad:
         21:ed:69:3b:a8:66:c6:24:b4:1e:9a:15:44:3c:75:ae:4a:6b:
         a8:2c:f4:da:8c:94:32:ff:8e:40:ff:cd:da:aa:88:67:0d:7a:
         b8:db:bc:af:e7:be:dc:c1:33:2a:0f:a9:2b:66:e2:1c:a3:4a:
         8f:81:bb:61:ba:48:07:e8:bc:26:d3:6e:28:9e:d5:ce:2f:31:
         49:53:ab:18:ca:ba:9d:11:08:f8:f2:f1:10:11:02:c1:4a:75:
         81:1a:d7:63:15:8c:3c:01:49:bb:f3:27:e4:87:82:3e:93:66:
         2d:94:e6:31:6c:01:8a:1c:d8:3d:91:20:b3:f9:1b:81:00:3e:
         39:1e:b2:48:05:b6:50:54:9b:90:3e:67:d7:d1:3a:48:60:b1:
         2d:18:cd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----