Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c8dc9c7b56a3910b29571a9d05048fb64b1d6ed.cer
File:                     0c8dc9c7b56a3910b29571a9d05048fb64b1d6ed.cer (raw, json)
Hash identifier:          r5nSu08glkvvsU5z5gQSEpC2ytFBdhiuBQQcOrfiuNM=
Subject key identifier:   01:87:AE:64:3C:48:2C:85:C9:B9:6B:91:65:30:78:4C:C1:08:63:51
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E67CB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/620d490f-5438-422a-94c4-5e366931d325/0c8dc9c7b56a3910b29571a9d05048fb64b1d6ed.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/620d490f-5438-422a-94c4-5e366931d325/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2019 18:51:37 +0000
Certificate not after:    Sat 31 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 265874
                          IP: 45.226.172.0/23
                          IP: 2803:c620::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15105204 (0xe67cb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  7 18:51:37 2019 GMT
            Not After : Aug 31 05:00:00 2024 GMT
        Subject: CN=0c8dc9c7b56a3910b29571a9d05048fb64b1d6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:16:26:a9:8a:08:37:ba:c1:3b:c2:37:a9:6e:
                    9b:b5:ef:cb:70:cb:69:cf:fc:7b:19:c8:1c:8c:79:
                    dd:87:98:f9:e5:13:8d:56:02:69:23:1c:48:09:10:
                    cb:e3:df:27:d9:3c:ec:7b:2b:d0:3a:8d:1a:90:25:
                    c5:f9:40:57:d9:a7:50:b0:3a:2e:3c:5c:5a:33:9e:
                    03:92:d4:9c:2b:95:46:dc:19:3c:00:bc:76:19:01:
                    67:ac:bb:88:58:af:1e:fb:12:f2:37:6f:9d:18:8e:
                    55:94:7e:56:0f:19:6d:0e:75:a6:af:ea:83:39:23:
                    af:43:c5:13:cc:2b:5c:95:71:57:b6:57:83:b2:72:
                    4d:9b:13:22:2a:fc:49:cf:36:f8:c3:12:1a:4f:d3:
                    7f:fc:ac:05:9c:4d:cd:81:b6:15:56:42:9e:82:4a:
                    31:50:d5:8c:cf:0a:cd:8f:68:7e:98:6c:16:1f:a0:
                    95:c3:9e:38:97:b4:f5:7b:c6:da:c7:e1:74:70:89:
                    7a:53:1f:6e:ca:40:de:74:55:24:65:dc:47:27:fa:
                    86:f8:e1:77:35:49:f8:cd:07:3f:d7:f2:b3:a2:2e:
                    ad:5a:89:46:86:97:d6:2a:c2:ae:23:2c:c2:7c:59:
                    c8:87:d7:86:2b:ed:39:72:4c:cb:00:b3:76:b1:47:
                    9e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:87:AE:64:3C:48:2C:85:C9:B9:6B:91:65:30:78:4C:C1:08:63:51
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/620d490f-5438-422a-94c4-5e366931d325/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/620d490f-5438-422a-94c4-5e366931d325/0c8dc9c7b56a3910b29571a9d05048fb64b1d6ed.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.172.0/23
                IPv6:
                  2803:c620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265874

    Signature Algorithm: sha256WithRSAEncryption
         80:9f:03:a6:bc:39:ac:ce:92:13:f1:41:d1:46:fb:99:40:a4:
         7c:e6:d0:74:c2:63:ed:a2:18:cf:c9:8f:ad:20:de:9b:8f:2e:
         3a:4e:a0:4a:f0:d2:d4:93:1e:df:a0:2d:46:95:e9:4b:b2:5d:
         95:2d:6f:90:c2:c9:10:1a:d3:15:65:4f:71:53:b1:79:25:2e:
         57:db:db:cd:a5:81:c5:60:0c:03:da:e0:43:32:17:a5:77:dc:
         ba:34:cb:2d:b4:bf:78:ba:a4:51:78:c0:3d:05:c2:21:09:fe:
         61:65:85:55:d0:43:34:70:99:50:9f:87:34:1b:d2:5c:4a:41:
         9e:c7:f9:eb:ee:85:9e:c1:9b:45:96:0a:55:5c:7c:96:c3:a2:
         12:97:34:8e:71:7a:fd:d5:4a:41:1c:d9:5d:6c:b6:50:92:2c:
         c3:9e:17:28:61:bd:e2:4d:e9:8a:54:65:16:a9:da:d3:35:c0:
         18:18:3f:ed:52:62:e3:68:a8:64:d6:14:88:84:1f:37:0e:9f:
         fd:e3:b5:0c:9b:42:5b:98:d4:ab:5f:d8:10:a6:11:4d:c1:59:
         3a:be:2f:c2:61:4e:2b:38:8c:ee:55:29:b0:36:de:a4:66:c4:
         24:d7:fc:2d:6e:df:84:1d:e5:e3:a6:de:e6:5b:20:31:e9:d7:
         46:50:e2:04
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOZ8tDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDMwNzE4NTEzN1oXDTI0MDgzMTA1MDAw
MFowMzExMC8GA1UEAxMoMGM4ZGM5YzdiNTZhMzkxMGIyOTU3MWE5ZDA1MDQ4ZmI2
NGIxZDZlZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIIWJqmKCDe6
wTvCN6lum7Xvy3DLac/8exnIHIx53YeY+eUTjVYCaSMcSAkQy+PfJ9k87Hsr0DqN
GpAlxflAV9mnULA6LjxcWjOeA5LUnCuVRtwZPAC8dhkBZ6y7iFivHvsS8jdvnRiO
VZR+Vg8ZbQ51pq/qgzkjr0PFE8wrXJVxV7ZXg7JyTZsTIir8Sc82+MMSGk/Tf/ys
BZxNzYG2FVZCnoJKMVDVjM8KzY9ofphsFh+glcOeOJe09XvG2sfhdHCJelMfbspA
3nRVJGXcRyf6hvjhdzVJ+M0HP9fys6IurVqJRoaX1irCriMswnxZyIfXhivtOXJM
ywCzdrFHnkMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQBh65kPEgshcm5a5FlMHhM
wQhjUTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82MjBkNDkwZi01NDM4
LTQyMmEtOTRjNC01ZTM2NjkzMWQzMjUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjIwZDQ5MGYtNTQzOC00
MjJhLTk0YzQtNWUzNjY5MzFkMzI1LzBjOGRjOWM3YjU2YTM5MTBiMjk1NzFhOWQw
NTA0OGZiNjRiMWQ2ZWQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAS3irDANBAIAAjAHAwUAKAPGIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDpIwDQYJKoZIhvcNAQELBQADggEBAICf
A6a8OazOkhPxQdFG+5lApHzm0HTCY+2iGM/Jj60g3puPLjpOoErw0tSTHt+gLUaV
6UuyXZUtb5DCyRAa0xVlT3FTsXklLlfb282lgcVgDAPa4EMyF6V33Lo0yy20v3i6
pFF4wD0FwiEJ/mFlhVXQQzRwmVCfhzQb0lxKQZ7H+evuhZ7Bm0WWClVcfJbDohKX
NI5xev3VSkEc2V1stlCSLMOeFyhhveJN6YpUZRap2tM1wBgYP+1SYuNoqGTWFIiE
HzcOn/3jtQybQluY1Ktf2BCmEU3BWTq+L8JhTis4jO5VKbA23qRmxCTX/C1u34Qd
5eOm3uZbIDHp10ZQ4gQ=
-----END CERTIFICATE-----