Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1e750e661607322fb98ea988d7624f49cbc68cb.cer
File:                     f1e750e661607322fb98ea988d7624f49cbc68cb.cer (raw, json)
Hash identifier:          h8YyQRbOkXAduYpJgGWaLk06k9qwFCbqEd3wKU9e+ko=
Subject key identifier:   F8:B0:D5:31:73:34:5B:2F:37:5D:D4:B4:27:59:C7:B4:BD:4E:BC:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCB866
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/f1e750e661607322fb98ea988d7624f49cbc68cb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 18 May 2018 10:01:19 +0000
Certificate not after:    Thu 22 Feb 2024 06:00:00 +0000
Subordinate resources:    IP: 161.22.64.0/18
                          IP: 2803:1680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14465126 (0xdcb866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 18 10:01:19 2018 GMT
            Not After : Feb 22 06:00:00 2024 GMT
        Subject: CN=f1e750e661607322fb98ea988d7624f49cbc68cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:1f:47:b6:1a:1e:25:25:5b:6e:9c:42:e2:
                    9e:21:0c:4d:3f:6d:81:ad:0b:56:ae:f0:ce:57:79:
                    1a:fa:3b:27:9d:b8:a8:d2:c7:47:7e:03:3e:21:1e:
                    a2:f3:e8:49:86:06:b3:0f:39:84:2c:15:6b:6f:26:
                    e2:c6:98:5f:de:39:79:6a:84:00:df:a5:17:3c:00:
                    5c:ee:64:f1:4d:71:ba:7d:d3:61:04:e7:4d:c3:4d:
                    79:20:aa:ac:0b:38:43:32:7d:ec:2b:5c:a7:ec:8a:
                    04:e3:1c:ec:b1:f5:d7:b2:2b:75:91:14:09:58:2a:
                    a2:3a:5f:5a:83:8f:6c:fc:dc:93:5b:6e:ca:55:14:
                    6e:91:9d:3e:e3:71:76:32:c3:06:6f:fb:b5:20:09:
                    2d:52:e2:d4:62:af:ef:7f:cf:82:04:bc:9d:f1:ea:
                    01:1b:d7:ea:d7:46:0b:48:c8:40:79:84:60:b5:2f:
                    46:46:11:a4:d2:4e:e2:47:62:a1:7e:93:97:24:27:
                    57:d6:70:af:5a:b1:b8:d8:01:db:6c:4a:81:2e:e9:
                    f4:d3:9a:85:af:10:10:ae:0e:ec:60:f6:09:9b:9f:
                    fa:e6:f5:e7:96:28:65:32:cd:88:d6:c5:86:0b:ef:
                    ce:56:58:3b:1a:6e:4c:c0:b6:39:cb:71:7b:b1:04:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B0:D5:31:73:34:5B:2F:37:5D:D4:B4:27:59:C7:B4:BD:4E:BC:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/f1e750e661607322fb98ea988d7624f49cbc68cb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.64.0/18
                IPv6:
                  2803:1680::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:0e:5f:d4:51:ff:d3:ef:0d:bf:5c:f4:87:bf:84:63:03:9b:
         10:45:02:ad:7b:e5:37:0b:8a:3a:0b:70:22:b7:97:2b:4d:0f:
         4a:bd:ae:c4:1f:a3:96:34:0e:d3:a3:5f:17:9b:28:a1:09:3e:
         73:33:75:9b:45:be:8e:63:9d:80:55:2f:5e:c3:06:f1:84:ee:
         ab:ce:19:4f:62:93:b4:e7:1b:9e:58:9d:c2:49:2b:0f:f9:05:
         4a:9e:62:0b:97:9c:99:9d:fb:ec:6d:4f:80:68:5a:cd:7e:6d:
         9f:83:08:e4:8b:75:41:a3:72:08:b5:14:76:96:65:96:37:f0:
         9e:92:3f:02:3a:41:9c:cb:24:b8:cb:c9:f0:01:06:25:13:b1:
         db:4f:f2:58:ea:71:94:ba:86:ec:11:e7:fb:15:a2:44:2f:88:
         4d:40:35:6c:0c:36:3e:07:92:0e:19:89:6f:f1:3e:1b:28:2f:
         ae:c5:9f:f7:9b:1d:87:1a:ad:b7:f4:82:c1:95:92:19:ad:54:
         17:63:10:06:2e:ae:07:68:8e:c6:5d:ba:6f:74:98:3c:9a:c6:
         e6:ec:b9:93:af:3e:c2:35:c9:d1:37:4f:ee:9b:b8:d3:69:1a:
         89:49:80:a9:b1:b0:4a:91:46:6c:c2:c4:fe:23:df:c3:3c:61:
         16:24:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----