Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f678e11049659c38ac02262c4abce83a57481a23.cer
File:                     f678e11049659c38ac02262c4abce83a57481a23.cer (raw, json)
Hash identifier:          XNK3aMW0s9vl+kiBSjYRDwawKoS/RNP19neHhknQ5LQ=
Subject key identifier:   A3:F4:AC:E9:6C:20:E7:A8:66:85:4F:7B:7D:DD:29:4A:2D:B7:58:5F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB0152
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/f678e11049659c38ac02262c4abce83a57481a23.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:28 +0000
Certificate not after:    Mon 28 Oct 2024 20:00:28 +0000
Subordinate resources:    AS: 264843
                          IP: 170.82.247.0/24
                          IP: 2801:14:d000::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16449874 (0xfb0152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:28 2017 GMT
            Not After : Oct 28 20:00:28 2024 GMT
        Subject: CN=f678e11049659c38ac02262c4abce83a57481a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:64:f3:e7:e7:95:df:3e:35:9c:21:8d:54:
                    e4:03:30:73:cf:ff:c6:c9:07:b9:a3:42:6f:46:5f:
                    f0:8c:da:a9:59:ed:bc:d4:4a:d7:ef:e7:44:34:a5:
                    32:7e:ac:51:59:57:f2:43:98:8b:01:c2:75:17:e8:
                    b1:e4:fe:dc:c5:fc:18:64:3d:1a:87:eb:5b:d2:c6:
                    55:3b:4e:57:7b:64:a5:21:29:5c:44:5d:c5:f7:2c:
                    64:3e:f9:50:a9:76:7c:04:e9:3f:f7:6b:61:84:6f:
                    55:1b:13:d7:e5:05:68:9d:ea:dd:1c:5b:ec:9e:7c:
                    da:94:e2:27:40:cd:72:e7:44:06:14:22:0b:15:f5:
                    78:e0:6b:36:de:c6:1e:1f:a6:95:60:92:f0:1d:17:
                    ba:1d:7d:3f:d7:09:32:5e:c4:08:f9:21:27:34:54:
                    38:69:6d:6e:86:29:51:00:90:eb:66:96:90:b2:a8:
                    23:51:ea:34:5d:a3:db:1b:b8:36:b8:8d:cd:e3:76:
                    34:2d:7e:40:df:25:dc:65:b5:3e:ec:56:f5:d2:5b:
                    26:45:d2:f4:67:1d:c8:28:55:db:f9:92:b9:a5:53:
                    28:3f:30:de:42:c2:24:ff:6a:a6:84:42:3e:a8:b6:
                    93:11:8b:97:2b:8e:07:74:85:a7:d9:57:e6:92:19:
                    e4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F4:AC:E9:6C:20:E7:A8:66:85:4F:7B:7D:DD:29:4A:2D:B7:58:5F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/f678e11049659c38ac02262c4abce83a57481a23.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.247.0/24
                IPv6:
                  2801:14:d000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264843

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:87:ae:a9:a5:32:1c:c9:6f:27:82:b2:fd:5c:32:63:74:
         2c:1e:d3:dd:9e:c6:e3:11:14:9b:7a:1c:a7:d7:a9:ab:a0:68:
         f7:b2:32:2f:05:48:0f:05:53:ee:06:b9:80:78:d1:3e:f5:c0:
         25:db:38:1d:da:41:39:b5:34:54:70:27:93:82:44:15:f5:fc:
         c3:c9:5e:45:35:3d:7a:48:c5:88:c5:f0:d3:7f:0d:9b:f2:f1:
         45:54:fe:26:da:5e:f7:e3:cb:49:33:14:31:52:89:93:b3:32:
         83:80:da:60:48:df:4b:b5:1c:ec:2c:5d:55:9d:01:18:a0:97:
         d8:af:fb:d3:3a:0d:0f:bf:39:8f:98:1f:c0:16:d6:2e:81:a5:
         6d:51:9e:fe:91:73:62:5b:f4:0f:5b:91:3a:fc:23:87:c9:e0:
         f8:b3:1d:5e:9a:0b:55:63:3b:97:f7:38:12:ce:7a:76:0f:4f:
         1e:c8:af:97:53:72:8e:2c:c5:c0:69:52:ea:b8:e8:98:89:d9:
         af:08:6b:1d:3c:1b:20:cb:08:f1:9b:50:0c:3d:2b:fc:fa:fc:
         88:8d:96:50:ca:11:91:b3:b5:21:8e:75:15:4f:ce:57:d1:de:
         97:4b:fa:f9:35:e7:a2:34:86:dd:6e:36:a1:e4:d1:6b:a9:c4:
         86:9b:e6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----