Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f996736b1fa10fc86d7dcd8f0972181fe443fb10.cer
File:                     f996736b1fa10fc86d7dcd8f0972181fe443fb10.cer (raw, json)
Hash identifier:          qFqt8XuLUzTKpsH/PJxTxZSVVb7o/0XFoT5vSiSP+w0=
Subject key identifier:   75:57:10:2A:06:F8:53:89:F2:A4:FB:49:FB:0D:BB:55:9D:77:29:FA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0D666
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/f996736b1fa10fc86d7dcd8f0972181fe443fb10.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:14 +0000
Certificate not after:    Mon 05 Aug 2024 21:49:36 +0000
Subordinate resources:    IP: 45.224.148.0/22
                          IP: 2803:7c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15783526 (0xf0d666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:14 2017 GMT
            Not After : Aug  5 21:49:36 2024 GMT
        Subject: CN=f996736b1fa10fc86d7dcd8f0972181fe443fb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:23:da:f6:ac:65:48:ee:c7:9c:ae:c1:01:
                    8d:db:8d:c3:2a:f7:ef:da:aa:c2:06:32:2c:56:ff:
                    14:3c:72:ed:50:27:da:3f:66:51:ce:69:27:24:dd:
                    1f:ca:30:2e:b5:37:48:c4:41:7d:c1:14:fe:d2:6e:
                    4b:e3:d6:95:1b:73:5a:66:31:bc:2d:73:e9:d9:f2:
                    ad:42:26:39:96:71:35:90:46:35:75:bb:03:bc:18:
                    86:8e:cf:ed:a0:28:b3:6c:75:60:15:32:dc:a8:52:
                    92:31:a8:44:23:c9:e7:8b:b1:46:94:af:1e:5d:9c:
                    0e:9e:b1:24:6f:d4:dc:99:e4:64:23:b2:6c:eb:2e:
                    f9:f9:9e:38:40:e4:42:c4:7d:ec:a1:13:f3:af:b8:
                    0f:db:b7:e5:7e:a1:21:d5:e5:d6:07:c5:c8:16:62:
                    4d:18:4a:82:aa:ea:34:e9:1e:4d:ff:2f:98:2f:7f:
                    eb:46:5a:ec:c2:91:ea:e3:b9:8b:d0:62:88:fc:2e:
                    9a:9b:d5:e6:5b:9c:82:68:8d:61:c1:3c:c5:3d:25:
                    e9:30:4c:97:c3:cb:1e:e6:11:21:68:a6:2d:06:c7:
                    4a:3b:96:a7:b1:76:a9:3f:7a:49:20:96:ca:87:0e:
                    61:c1:10:f9:91:c7:6a:0e:c2:c9:e4:4e:18:e9:20:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:57:10:2A:06:F8:53:89:F2:A4:FB:49:FB:0D:BB:55:9D:77:29:FA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/f996736b1fa10fc86d7dcd8f0972181fe443fb10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.148.0/22
                IPv6:
                  2803:7c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:d8:cb:e6:41:37:dc:bd:8e:6e:7c:81:7f:28:47:04:ef:09:
         7f:2b:6e:62:8a:3f:65:d2:b9:93:42:50:76:99:7f:e0:40:b8:
         36:25:f0:a0:a6:70:f3:3e:81:6f:dd:a2:ff:3b:b0:a5:33:fa:
         54:f8:99:c7:d1:b4:7c:ef:d3:c7:9f:bc:29:28:9a:f6:38:a2:
         72:c5:44:bb:d0:d9:03:f9:c8:d3:e0:22:b2:d5:8a:fc:29:69:
         7e:62:b0:23:8e:29:98:50:8c:33:81:42:23:33:8f:9f:b0:83:
         0e:7b:a3:28:7f:90:68:49:44:3f:e1:77:3d:64:d1:0f:a0:58:
         74:be:16:f7:e0:62:6a:cd:ff:b3:40:af:26:79:3d:b7:e0:3a:
         f3:fe:5e:56:1e:da:09:1a:07:17:6a:14:58:c9:54:c2:86:f8:
         3e:e6:d1:2c:23:78:47:bc:e9:0f:bf:75:6e:1f:a8:97:1b:b8:
         e9:f5:e1:b2:9c:f4:d1:8c:92:95:50:28:3d:52:de:a3:74:c3:
         17:91:81:6b:cc:da:0b:d5:b8:b5:10:f6:52:f8:3a:f2:a5:b3:
         fb:cd:69:82:c2:77:47:4e:c3:8b:14:14:84:fc:c9:4d:75:1e:
         ad:fb:d9:28:a7:3c:24:55:41:a7:3a:c6:92:1a:4b:2b:70:f1:
         c2:07:24:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----