Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99.cer
File:                     f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99.cer (raw, json)
Hash identifier:          A0a44K3uw+oRY79ZZetFCXIwx/3tCO+QXCS7o9hil9o=
Subject key identifier:   35:B1:6D:7A:72:65:78:D7:94:68:40:DA:52:E6:EF:EA:FF:C5:C9:9A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E49BCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:08 +0000
Certificate not after:    Sat 11 May 2024 15:04:49 +0000
Subordinate resources:    AS: 270016
                          IP: 131.196.60.0/22
                          IP: 2803:67c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14982093 (0xe49bcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:08 2017 GMT
            Not After : May 11 15:04:49 2024 GMT
        Subject: CN=f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:fc:e0:8c:e0:6f:3e:12:42:d2:79:c3:a3:
                    09:8d:ec:64:1b:22:76:58:c8:33:89:78:8e:ef:79:
                    1d:80:e3:e8:5c:75:09:36:6c:48:9f:15:75:ae:c3:
                    74:c3:45:2b:57:df:76:af:cd:b2:74:0f:38:bd:28:
                    61:c5:65:73:b1:68:e3:e7:6f:c5:64:71:64:18:33:
                    82:a1:9a:b0:60:65:ca:81:94:c3:e4:e9:3a:0a:78:
                    9e:b1:cd:1a:b5:64:48:42:f1:2a:d4:b7:7d:d0:76:
                    05:21:d2:b5:93:75:b3:de:6e:0d:2d:ea:dc:c4:05:
                    87:35:da:e5:eb:03:ee:48:3a:ab:af:f5:39:79:e0:
                    2f:05:5d:a3:57:29:20:fc:41:a5:40:69:fc:30:20:
                    96:e9:36:49:d6:0d:6e:fa:82:8c:b4:e7:23:c4:9c:
                    ff:98:3a:3f:f3:10:b9:2d:02:42:96:92:de:ab:51:
                    39:fc:6d:0d:6d:92:6d:1a:97:0a:d8:43:ce:f5:a6:
                    d0:98:d2:cd:7b:37:4c:68:cb:42:ab:2d:9d:32:a6:
                    b3:bf:f0:78:26:2c:90:bf:30:56:dc:8b:03:8b:86:
                    7c:a9:9d:45:1e:6d:dc:2f:9c:52:49:91:d7:29:0e:
                    46:cd:9e:57:ab:f2:cf:a1:9d:23:a6:e1:f0:9d:e0:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B1:6D:7A:72:65:78:D7:94:68:40:DA:52:E6:EF:EA:FF:C5:C9:9A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.60.0/22
                IPv6:
                  2803:67c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270016

    Signature Algorithm: sha256WithRSAEncryption
         67:8f:f4:97:a1:44:2c:e4:77:ce:19:4d:70:a7:4b:28:a6:8c:
         53:b9:bb:9b:23:45:9b:e3:9f:e3:8a:69:cf:87:48:a3:2d:2c:
         32:3b:28:04:94:8e:5a:14:e7:6d:91:6c:c4:6c:c3:c4:8a:e0:
         4e:8e:be:5b:38:4c:d2:8b:05:bb:8a:8a:d5:15:44:d0:d0:02:
         cf:eb:e7:03:17:09:47:c0:d0:e4:53:cb:cf:cd:06:d4:04:5d:
         1f:e4:44:ef:ab:fe:c8:77:64:7a:23:0b:29:3c:04:9a:3a:47:
         db:be:98:7c:9d:c0:1d:ba:17:c3:d7:cd:89:20:8d:cc:3f:98:
         54:08:6c:25:12:f1:2f:e9:c2:cb:c0:19:6c:48:f4:af:60:ea:
         61:32:f7:11:70:6a:ec:27:0f:7f:a3:40:9f:4c:bd:aa:9c:72:
         9c:9b:d0:64:ef:32:fe:65:1d:e3:1b:40:8c:9c:ad:10:da:76:
         2b:1d:9e:23:54:22:c8:0a:31:3b:ee:88:16:69:92:4d:57:f3:
         08:b0:94:e3:de:b1:e8:f9:0b:eb:bd:b0:61:f7:e8:df:56:8e:
         cc:03:c5:cb:b2:8c:44:f0:a5:0a:26:b5:8b:5e:21:70:e5:f7:
         1f:da:ec:13:88:46:b2:d7:08:01:38:38:9b:00:7c:ee:e8:a4:
         04:9c:4b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----