Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/165a2310cc55bf775bd8c9d5ba1511fd34da54bb.cer
File:                     165a2310cc55bf775bd8c9d5ba1511fd34da54bb.cer (raw, json)
Hash identifier:          XK03JQMSnjAhA7iTADI+2hOYyObvbytYivTNu++fXLI=
Subject key identifier:   DA:44:6C:0C:D9:07:C6:5B:29:A9:D9:77:FC:7B:CD:9D:FA:62:92:B6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3E9B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cc6e842f-d789-4308-9f67-dc3fe4311837/165a2310cc55bf775bd8c9d5ba1511fd34da54bb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cc6e842f-d789-4308-9f67-dc3fe4311837/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:50 +0000
Certificate not after:    Tue 03 Sep 2024 22:51:03 +0000
Subordinate resources:    AS: 264806
                          IP: 170.79.232.0/22
                          IP: 2803:34c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15985077 (0xf3e9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:50 2017 GMT
            Not After : Sep  3 22:51:03 2024 GMT
        Subject: CN=165a2310cc55bf775bd8c9d5ba1511fd34da54bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:62:6a:bf:63:12:9a:5d:99:7b:3d:04:16:b9:
                    fe:62:01:54:10:78:30:81:0c:4e:5e:ad:21:c1:03:
                    e0:8c:6b:38:68:93:9b:2a:dc:4c:32:a4:4e:87:5a:
                    bb:39:86:c5:cb:d8:f4:77:75:d6:8c:a8:08:e2:a6:
                    8b:2e:ef:d1:34:42:06:77:90:53:3e:47:a2:49:4f:
                    3f:9d:fb:8e:41:b0:95:98:01:a6:49:45:dc:48:a3:
                    db:ef:41:f5:62:4c:ba:f0:5c:b9:1f:a8:c5:14:33:
                    aa:0c:a1:3e:3a:bd:11:4a:28:09:f8:54:dd:0a:f4:
                    a4:5f:2f:e5:73:2d:1e:df:c9:5a:c3:a4:75:a1:12:
                    c9:59:9c:d2:28:fd:52:ad:f1:32:77:a7:50:39:4b:
                    b1:2b:fb:73:e2:1f:58:c1:c4:ad:27:ba:fd:66:f2:
                    7b:b3:47:c5:bf:5b:a1:3d:53:7a:df:4b:ed:bb:50:
                    68:cf:88:c1:b6:a2:15:a0:2d:e2:d4:c1:94:32:a2:
                    fc:74:03:89:ee:42:1a:83:7e:de:51:3a:9b:e5:af:
                    2a:4c:d4:1b:90:b0:88:b9:b7:53:58:da:28:ef:f5:
                    b0:4d:13:a8:1a:7d:83:07:8d:40:ab:ac:46:d4:91:
                    ca:1d:ce:3f:34:f8:87:43:07:16:ef:ff:d9:6d:d3:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:44:6C:0C:D9:07:C6:5B:29:A9:D9:77:FC:7B:CD:9D:FA:62:92:B6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cc6e842f-d789-4308-9f67-dc3fe4311837/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cc6e842f-d789-4308-9f67-dc3fe4311837/165a2310cc55bf775bd8c9d5ba1511fd34da54bb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.232.0/22
                IPv6:
                  2803:34c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264806

    Signature Algorithm: sha256WithRSAEncryption
         a9:35:ae:34:3e:06:d4:ca:fb:26:bf:8f:5a:6e:2c:f5:35:86:
         7c:33:89:6b:62:01:2c:96:6a:a9:e0:2d:3e:0f:2e:d2:17:40:
         76:ad:25:7c:60:31:ba:9c:3a:41:df:36:4a:a2:1b:97:1e:46:
         36:29:4f:d6:98:a0:83:1b:ba:f4:1a:22:c8:06:75:47:96:88:
         1c:2a:ea:54:09:37:6e:2b:39:62:53:57:40:b1:de:3e:8d:20:
         a5:e5:ce:6f:2c:f4:ca:c9:b3:f5:e2:8c:67:8b:95:22:86:20:
         cb:46:c6:64:b3:64:3c:77:2d:b9:80:27:89:92:93:e4:00:a0:
         24:eb:20:5f:64:00:1f:ce:47:c8:79:f6:97:5c:9f:18:56:bc:
         d3:17:07:5a:e0:f7:0e:b2:07:c7:92:f2:03:84:ee:1a:2c:5f:
         81:8c:f2:14:e2:f4:cc:9b:83:0c:b9:51:5f:c2:84:02:5f:a6:
         ac:be:b8:50:80:f8:4a:8d:7e:26:87:93:20:12:3a:75:40:d3:
         92:64:a9:3a:e7:15:04:b0:e4:e1:5b:9f:68:b9:d7:60:ab:6d:
         51:06:e3:46:71:43:a8:66:ae:b7:2e:02:18:80:70:26:69:c6:
         d0:92:b0:1b:48:70:ea:c9:9f:96:1e:82:bf:c0:81:08:0f:92:
         f0:9e:ef:36
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPPptTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1MFoXDTI0MDkwMzIyNTEw
M1owMzExMC8GA1UEAxMoMTY1YTIzMTBjYzU1YmY3NzViZDhjOWQ1YmExNTExZmQz
NGRhNTRiYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIJiar9jEppd
mXs9BBa5/mIBVBB4MIEMTl6tIcED4IxrOGiTmyrcTDKkTodauzmGxcvY9Hd11oyo
COKmiy7v0TRCBneQUz5HoklPP537jkGwlZgBpklF3Eij2+9B9WJMuvBcuR+oxRQz
qgyhPjq9EUooCfhU3Qr0pF8v5XMtHt/JWsOkdaESyVmc0ij9Uq3xMnenUDlLsSv7
c+IfWMHErSe6/Wbye7NHxb9boT1Tet9L7btQaM+IwbaiFaAt4tTBlDKi/HQDie5C
GoN+3lE6m+WvKkzUG5CwiLm3U1jaKO/1sE0TqBp9gweNQKusRtSRyh3OPzT4h0MH
Fu//2W3TzRsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTaRGwM2QfGWymp2Xf8e82d
+mKStjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jYzZlODQyZi1kNzg5
LTQzMDgtOWY2Ny1kYzNmZTQzMTE4MzcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvY2M2ZTg0MmYtZDc4OS00
MzA4LTlmNjctZGMzZmU0MzExODM3LzE2NWEyMzEwY2M1NWJmNzc1YmQ4YzlkNWJh
MTUxMWZkMzRkYTU0YmIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqpP6DANBAIAAjAHAwUAKAM0wDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECmYwDQYJKoZIhvcNAQELBQADggEBAKk1
rjQ+BtTK+ya/j1puLPU1hnwziWtiASyWaqngLT4PLtIXQHatJXxgMbqcOkHfNkqi
G5ceRjYpT9aYoIMbuvQaIsgGdUeWiBwq6lQJN24rOWJTV0Cx3j6NIKXlzm8s9MrJ
s/XijGeLlSKGIMtGxmSzZDx3LbmAJ4mSk+QAoCTrIF9kAB/OR8h59pdcnxhWvNMX
B1rg9w6yB8eS8gOE7hosX4GM8hTi9Mybgwy5UV/ChAJfpqy+uFCA+EqNfiaHkyAS
OnVA05JkqTrnFQSw5OFbn2i512CrbVEG40ZxQ6hmrrcuAhiAcCZpxtCSsBtIcOrJ
n5Yegr/AgQgPkvCe7zY=
-----END CERTIFICATE-----