Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd8df723b27ad8f4fd8d44a08c80601e45809074.cer
File:                     fd8df723b27ad8f4fd8d44a08c80601e45809074.cer (raw, json)
Hash identifier:          NA6KRjZ6owl59m/Pux7wbe70UraMXfWCF1J/d+beesQ=
Subject key identifier:   6D:22:E5:A5:5A:34:C2:41:E7:87:BA:41:1E:4D:98:97:FC:89:C9:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3265A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1e530701-9320-432a-a3b4-497154afc524/fd8df723b27ad8f4fd8d44a08c80601e45809074.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1e530701-9320-432a-a3b4-497154afc524/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:41 +0000
Certificate not after:    Fri 03 May 2024 06:00:00 +0000
Subordinate resources:    AS: 27980
                          IP: 200.1.7.0/24
                          IP: 2801:10:8000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14886490 (0xe3265a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:41 2017 GMT
            Not After : May  3 06:00:00 2024 GMT
        Subject: CN=fd8df723b27ad8f4fd8d44a08c80601e45809074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3f:a7:7e:b6:06:8e:21:2b:bc:75:65:e5:67:
                    51:d5:5c:28:43:16:cf:5e:b9:b1:33:18:bd:65:93:
                    7c:6f:88:49:39:95:90:ec:2b:ad:f7:82:64:93:24:
                    0b:d0:a4:b1:94:0b:ce:d7:2f:6a:1e:8d:4b:da:81:
                    cb:38:ec:6b:9a:53:f8:72:3a:e0:43:0c:3a:72:01:
                    c0:bd:82:d5:1e:a4:60:2e:d3:90:0c:d0:a5:1c:80:
                    ea:cf:cb:9a:12:47:73:23:a7:24:4c:5f:ad:41:a5:
                    17:9e:64:bb:e5:d8:51:d3:61:b6:a9:bc:15:e8:f4:
                    2d:87:fd:db:de:56:ad:70:68:b3:be:e6:c1:c0:64:
                    15:67:35:e5:64:ce:7a:9c:05:b4:e4:48:a6:2c:9a:
                    77:8d:36:4a:e2:95:5e:04:90:b1:07:82:9e:fe:10:
                    8a:fa:2e:b2:42:96:1c:7a:a4:aa:24:64:95:72:8f:
                    75:4d:2f:f6:0e:26:f7:12:b3:24:c9:2b:7b:67:98:
                    fa:60:51:18:c1:89:3b:d4:93:bb:d3:ce:e3:2f:ff:
                    1c:e2:73:63:63:91:f7:8c:b6:f4:d4:ac:5c:38:3f:
                    e7:50:0e:20:1f:0b:62:a1:00:46:77:60:41:f5:12:
                    b3:af:e1:da:c3:6f:f3:44:eb:2a:ce:ba:63:b8:a7:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:22:E5:A5:5A:34:C2:41:E7:87:BA:41:1E:4D:98:97:FC:89:C9:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1e530701-9320-432a-a3b4-497154afc524/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1e530701-9320-432a-a3b4-497154afc524/fd8df723b27ad8f4fd8d44a08c80601e45809074.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.7.0/24
                IPv6:
                  2801:10:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27980

    Signature Algorithm: sha256WithRSAEncryption
         6c:ce:6c:07:dd:52:38:fd:b7:91:39:39:3a:f8:6d:fd:72:17:
         87:5c:76:36:5d:75:53:09:e2:aa:94:ec:21:8d:7a:c5:98:44:
         b8:e6:8f:7d:3e:fd:d4:b0:c4:88:a7:1c:77:75:a0:53:35:4e:
         55:a9:a1:96:59:24:fd:ed:6a:14:9d:82:66:ab:68:20:ff:e0:
         15:87:bc:42:84:43:b9:97:2b:54:b6:20:3a:8b:65:fa:0b:26:
         2a:2e:8c:c9:bb:8a:fe:f9:04:82:b7:1a:a8:67:51:e4:4e:30:
         b4:08:53:ec:02:b8:48:b6:c0:b5:f8:a9:4f:c0:a7:e0:a4:eb:
         6b:57:f1:1c:22:cd:c5:12:48:e8:74:17:b3:bb:1b:8f:dd:0b:
         86:dd:d0:9b:a5:f6:7c:01:12:62:c4:1f:d3:f4:02:c9:8a:b1:
         53:d5:75:df:f7:1c:d8:fc:17:d5:83:72:ca:79:97:f4:a0:84:
         b4:ae:4a:84:ea:bf:ee:bb:5b:b6:84:6e:8e:fa:a6:85:eb:b8:
         e4:9a:3d:11:86:4d:19:77:76:81:32:a1:02:ee:85:af:ea:eb:
         c1:f0:71:59:44:ba:55:11:52:ed:c9:37:96:34:e3:04:5a:08:
         0a:a6:cd:0f:0b:13:59:00:e7:4a:ad:e7:95:48:1d:c9:5b:6c:
         a7:36:ab:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----