Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba.cer
File:                     ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba.cer (raw, json)
Hash identifier:          Gy6oIemUt10piQ0sbRF8+ncluOhbUh28XmqLQwOy+Ok=
Subject key identifier:   49:A3:4F:5C:E1:4F:A1:E4:9D:E6:5E:E9:10:16:62:25:A9:3A:E0:A4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA2580
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:46 +0000
Certificate not after:    Sat 09 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 272014
                          IP: 138.0.120.0/23
                          IP: 2803:d780::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15345024 (0xea2580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:46 2017 GMT
            Not After : Nov  9 04:00:00 2024 GMT
        Subject: CN=ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:87:3f:b0:58:11:25:a6:75:e0:9f:80:de:5f:
                    29:b4:6e:d4:ed:b5:0a:b3:59:72:d1:e3:e6:bc:74:
                    28:c2:4c:99:13:a5:b6:51:ca:2b:ce:46:8a:09:10:
                    c9:28:1e:8f:ec:85:43:e1:19:62:a5:a8:0b:c5:6f:
                    48:e3:a3:54:b3:e4:4e:4d:41:b3:56:e6:5c:86:5a:
                    90:22:1b:58:9a:16:ad:1c:f6:97:38:56:26:92:ab:
                    bf:4d:46:ac:2e:3b:91:6c:03:5b:af:96:08:1b:8e:
                    60:af:8f:10:e5:96:4d:ab:4e:05:3d:a3:44:8c:2a:
                    8a:e8:bb:f5:40:d3:bb:21:34:3a:0d:31:49:ca:53:
                    e3:42:2e:ef:a1:22:c8:ec:51:07:78:c7:96:cf:45:
                    6e:41:94:39:51:66:6a:a2:86:58:c2:cd:e8:b5:c3:
                    96:87:96:70:7e:7f:e8:2c:7a:66:5c:ec:60:43:d4:
                    8b:71:4f:c5:fe:6e:34:c6:47:93:9b:87:42:3e:e8:
                    da:16:e1:c9:84:ea:2b:2b:f6:5a:71:a7:be:28:d0:
                    1b:0d:fd:85:27:7e:9b:09:f0:11:f4:13:33:62:28:
                    a0:0b:c2:82:b1:3b:23:3e:bb:e7:2e:5e:7a:20:26:
                    95:96:2a:a2:59:27:63:8d:f0:79:19:be:76:58:0a:
                    19:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A3:4F:5C:E1:4F:A1:E4:9D:E6:5E:E9:10:16:62:25:A9:3A:E0:A4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.120.0/23
                IPv6:
                  2803:d780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272014

    Signature Algorithm: sha256WithRSAEncryption
         54:b1:69:de:99:cd:c4:17:74:58:b1:24:c7:fa:ce:92:d8:56:
         31:6c:75:f3:eb:9d:eb:b3:20:4f:a5:67:93:8b:31:f7:0d:f2:
         12:cd:93:be:4a:0c:03:5d:44:f9:d2:24:66:e9:8a:fc:ae:81:
         b6:4e:e6:97:67:2b:11:04:a6:17:9f:a7:ff:e9:bd:82:4f:9d:
         e5:70:e4:ff:c2:69:31:b5:ef:13:37:a3:bb:eb:9e:8c:18:f7:
         ad:24:14:e9:78:d7:77:43:59:41:2d:0d:52:83:cb:94:83:83:
         63:34:29:a0:b5:8c:23:75:65:ba:60:ef:8a:18:83:74:b3:6b:
         9d:36:56:0b:a1:9c:43:e1:82:d0:2a:51:80:a9:38:d9:38:f4:
         15:12:d0:84:e1:dd:67:97:68:ee:2a:85:98:c8:06:2d:69:2a:
         2b:ec:fa:60:59:86:0d:f9:57:e3:1d:ad:3d:75:7b:59:4a:7b:
         91:ea:15:9f:67:18:89:4f:e3:28:b7:96:9c:a8:36:d8:3b:1d:
         0c:fb:ed:59:1b:34:9f:87:47:aa:5b:8a:9d:db:35:9c:dd:ce:
         65:c1:8b:50:cc:ec:07:a6:66:57:30:1c:1a:ac:4f:44:b3:74:
         d7:38:8f:6c:11:d7:b0:f8:9d:96:87:50:e1:cf:b1:5c:57:d9:
         dd:36:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----