Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1732d7ce406bd7aa01b8752602eec7239b41c506.cer
File:                     1732d7ce406bd7aa01b8752602eec7239b41c506.cer (raw, json)
Hash identifier:          jf/slsEcY4Un3yqoDZc3An3/5avfUTQ3KhCHzS6sc8E=
Subject key identifier:   F1:FF:2F:A9:D2:24:F1:13:1B:DF:F3:B6:84:4D:84:98:31:4E:19:6B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCE52F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5ee0927b-ef75-430b-9bf2-be0e84a77fa8/1732d7ce406bd7aa01b8752602eec7239b41c506.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5ee0927b-ef75-430b-9bf2-be0e84a77fa8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 06 Dec 2019 17:07:49 +0000
Certificate not after:    Fri 23 Feb 2024 18:40:13 +0000
Subordinate resources:    AS: 269867
                          IP: 45.189.119.0/24
                          IP: 2801:15:7000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14476591 (0xdce52f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  6 17:07:49 2019 GMT
            Not After : Feb 23 18:40:13 2024 GMT
        Subject: CN=1732d7ce406bd7aa01b8752602eec7239b41c506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:59:ec:17:07:8f:c5:47:b0:0a:4b:69:e0:6c:
                    52:3f:01:f1:3f:5f:4d:8e:1e:fb:9c:cf:81:51:50:
                    34:55:bb:5f:83:84:a2:0c:82:3d:0f:d5:09:d8:2c:
                    d6:24:a3:e3:3c:c5:dc:38:03:be:cd:f2:3d:05:b8:
                    7c:5e:94:e4:e1:87:64:b9:5a:a3:45:7a:ae:19:fa:
                    f3:84:a8:f4:2e:22:3f:8b:18:5c:72:54:37:ce:f0:
                    05:4b:0e:2b:4b:70:ef:eb:76:97:03:0d:78:4f:00:
                    f5:53:4b:01:60:fa:d9:12:e8:8d:a6:70:78:fc:44:
                    f3:83:97:52:60:3a:01:9d:c3:4b:e0:e9:95:f0:5d:
                    03:67:1c:a1:eb:6e:6b:cf:de:37:57:21:dc:b8:22:
                    f4:d5:d4:59:3e:9c:ad:b5:74:1f:02:8f:19:20:98:
                    17:5f:86:c8:cb:47:48:9c:4b:86:fa:93:f9:46:07:
                    1c:cf:65:86:56:fb:ce:fb:0b:e5:f4:27:26:fb:dc:
                    77:c1:16:df:17:ba:98:cc:6f:b6:95:f9:40:33:d2:
                    1d:4c:cc:68:ab:16:c5:55:b6:53:90:b1:a7:87:83:
                    73:23:5e:3d:54:52:28:f7:3a:0e:16:c5:49:14:3f:
                    e3:e3:54:a1:c6:94:bf:f1:86:34:f7:8d:76:2a:36:
                    10:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FF:2F:A9:D2:24:F1:13:1B:DF:F3:B6:84:4D:84:98:31:4E:19:6B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee0927b-ef75-430b-9bf2-be0e84a77fa8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee0927b-ef75-430b-9bf2-be0e84a77fa8/1732d7ce406bd7aa01b8752602eec7239b41c506.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.119.0/24
                IPv6:
                  2801:15:7000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269867

    Signature Algorithm: sha256WithRSAEncryption
         41:bb:21:f7:5a:25:8a:cb:84:c0:0d:44:52:3a:1e:83:d8:8a:
         46:3f:e7:32:a5:06:e2:c2:17:ff:8b:00:74:f8:1b:6c:13:f8:
         e1:5f:26:d2:e6:0c:f3:d0:75:4f:5c:e5:f0:16:5f:96:62:11:
         ba:8f:79:eb:a4:63:f6:8f:d3:93:f1:59:94:fc:36:79:35:2f:
         e7:9b:39:71:0b:1d:a3:98:5c:61:a8:d6:ed:d6:1c:2b:dc:39:
         04:75:dc:c2:be:8c:3c:5b:9d:46:5f:43:5a:3d:2e:64:62:a3:
         ee:b9:32:76:65:73:46:d9:27:9a:a0:4c:78:81:dc:16:41:b1:
         71:13:55:ed:2c:41:7f:74:0f:ba:20:06:f5:d7:c7:36:3f:4d:
         d8:21:65:87:82:56:dc:d4:d7:56:57:11:9b:0e:2e:17:53:98:
         8b:fb:77:ed:f8:a2:36:2e:75:55:f6:1e:8a:c0:4b:96:5b:3e:
         85:05:85:58:d5:b2:40:bc:b6:cd:33:89:a8:ea:80:19:09:ae:
         80:cc:a5:4f:54:d4:b6:16:b1:73:3b:54:11:ad:49:40:c2:c4:
         07:3c:a5:4f:5e:a5:13:7b:26:fd:02:06:24:21:9e:48:f3:56:
         ca:5e:e3:c6:79:0a:9c:2a:3a:ef:bd:4b:86:55:5c:14:33:3b:
         20:40:a7:8b
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEANzlLzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MTIwNjE3MDc0OVoXDTI0MDIyMzE4NDAx
M1owMzExMC8GA1UEAxMoMTczMmQ3Y2U0MDZiZDdhYTAxYjg3NTI2MDJlZWM3MjM5
YjQxYzUwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJZZ7BcHj8VH
sApLaeBsUj8B8T9fTY4e+5zPgVFQNFW7X4OEogyCPQ/VCdgs1iSj4zzF3DgDvs3y
PQW4fF6U5OGHZLlao0V6rhn684So9C4iP4sYXHJUN87wBUsOK0tw7+t2lwMNeE8A
9VNLAWD62RLojaZwePxE84OXUmA6AZ3DS+DplfBdA2ccoetua8/eN1ch3Lgi9NXU
WT6crbV0HwKPGSCYF1+GyMtHSJxLhvqT+UYHHM9lhlb7zvsL5fQnJvvcd8EW3xe6
mMxvtpX5QDPSHUzMaKsWxVW2U5Cxp4eDcyNePVRSKPc6DhbFSRQ/4+NUocaUv/GG
NPeNdio2EIECAwEAAaOCAwswggMHMB0GA1UdDgQWBBTx/y+p0iTxExvf87aETYSY
MU4ZazAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81ZWUwOTI3Yi1lZjc1
LTQzMGItOWJmMi1iZTBlODRhNzdmYTgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWVlMDkyN2ItZWY3NS00
MzBiLTliZjItYmUwZTg0YTc3ZmE4LzE3MzJkN2NlNDA2YmQ3YWEwMWI4NzUyNjAy
ZWVjNzIzOWI0MWM1MDYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAC29dzAPBAIAAjAJAwcAKAEAFXAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeKzANBgkqhkiG9w0BAQsFAAOCAQEA
Qbsh91olisuEwA1EUjoeg9iKRj/nMqUG4sIX/4sAdPgbbBP44V8m0uYM89B1T1zl
8BZflmIRuo9566Rj9o/Tk/FZlPw2eTUv55s5cQsdo5hcYajW7dYcK9w5BHXcwr6M
PFudRl9DWj0uZGKj7rkydmVzRtknmqBMeIHcFkGxcRNV7SxBf3QPuiAG9dfHNj9N
2CFlh4JW3NTXVlcRmw4uF1OYi/t37fiiNi51VfYeisBLlls+hQWFWNWyQLy2zTOJ
qOqAGQmugMylT1TUthaxcztUEa1JQMLEBzylT16lE3sm/QIGJCGeSPNWyl7jxnkK
nCo6771LhlVcFDM7IECniw==
-----END CERTIFICATE-----