Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer
File:                     17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer (raw, json)
Hash identifier:          XS7Tbexsf7LNqgV4BUswWpAEb/H+x9ul8GkCOQWhgkw=
Subject key identifier:   7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0110F9FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:10 +0000
Certificate not after:    Mon 19 May 2025 06:00:00 +0000
Subordinate resources:    AS: 27841
                          AS: 61468
                          IP: 143.255.248.0/22
                          IP: 187.251.160.0/19
                          IP: 190.15.128.0/20
                          IP: 201.159.220.0/22
                          IP: 2800:68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17889786 (0x110f9fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:10 2017 GMT
            Not After : May 19 06:00:00 2025 GMT
        Subject: CN=17e63b4149d0b23e7b741a7cccfb0b544a043d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:31:ad:36:c8:0c:8a:68:1b:e8:28:8b:05:80:
                    66:29:9a:69:33:ec:de:16:76:60:50:d8:e3:73:c9:
                    b0:a5:e9:91:ca:45:be:d8:3b:b6:ad:0d:46:12:cd:
                    d1:44:8e:65:a0:5b:92:79:c5:65:1b:bd:5e:9e:c8:
                    68:83:4e:3d:f4:0a:bb:b4:7a:06:76:5f:07:9a:1a:
                    b1:63:5d:7e:21:80:c2:e3:db:ac:be:c0:53:e0:03:
                    3c:95:d3:c8:30:57:bb:d0:69:8a:7b:da:6b:22:bb:
                    1e:a3:26:92:39:a8:57:e7:65:9e:43:bf:4b:81:2c:
                    5a:ed:06:1e:3a:b3:92:6a:6f:64:90:dc:c9:0c:e1:
                    d9:3e:d7:e0:83:88:62:bc:a7:6d:84:ca:33:2c:c3:
                    18:da:49:5f:30:d5:aa:52:bc:3e:d6:b9:fb:61:82:
                    82:b8:7e:3b:f5:5a:08:ff:bb:29:a6:67:eb:5c:48:
                    b2:91:c2:6e:9a:ac:fd:30:03:90:89:e3:ac:48:37:
                    3a:83:54:0c:cd:b6:10:b2:51:bf:f5:24:e1:71:2d:
                    fe:b4:fe:6f:a8:45:ed:1d:3e:dc:99:51:95:d7:38:
                    ae:49:7a:bd:fc:48:47:07:d5:d3:d6:a2:16:5b:38:
                    86:99:ca:84:02:61:4c:7b:bd:08:88:54:a7:82:06:
                    64:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.248.0/22
                  187.251.160.0/19
                  190.15.128.0/20
                  201.159.220.0/22
                IPv6:
                  2800:68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27841
                  61468

    Signature Algorithm: sha256WithRSAEncryption
         25:00:fe:bd:27:ac:71:5b:5f:e4:be:c1:9f:fb:3c:56:ca:d6:
         ba:96:59:ca:c7:fb:2b:91:de:7b:88:1f:39:69:d2:ee:81:17:
         7d:e5:80:76:12:32:c3:4d:9d:32:0b:3b:b3:91:f0:d6:17:b9:
         80:dc:88:9e:86:00:a8:2f:e6:6c:4a:50:51:40:a4:a0:da:fb:
         e0:92:c3:0a:d8:f2:c2:58:f0:27:d5:62:b4:16:36:01:e1:d3:
         0e:cd:9b:00:34:cd:70:21:24:e9:45:ff:aa:77:e2:00:24:32:
         2e:bf:16:cb:59:f6:e6:64:aa:02:94:10:fa:fd:b5:40:de:3a:
         2b:c2:52:a9:6e:76:f5:3e:23:92:82:0a:a6:f3:1f:8e:75:40:
         98:97:cd:ae:4a:f9:af:a3:d7:10:cf:8f:df:5d:cb:fe:7f:51:
         a0:3c:06:c2:f3:55:ea:d8:1e:96:a4:60:68:d0:17:38:bf:e1:
         1c:28:70:03:38:61:75:e7:ee:74:af:ab:81:59:46:8d:6b:ce:
         c6:6e:35:30:98:24:a5:b0:4a:e9:11:21:b3:58:04:f2:7d:67:
         da:cc:7a:d6:70:ee:f3:0b:de:df:50:e8:a9:6a:39:92:06:39:
         55:a3:85:16:52:f1:c2:42:c0:d9:f6:29:a3:a2:75:b3:1d:44:
         78:aa:30:0f
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgIEARD5+jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcxMFoXDTI1MDUxOTA2MDAw
MFowMzExMC8GA1UEAxMoMTdlNjNiNDE0OWQwYjIzZTdiNzQxYTdjY2NmYjBiNTQ0
YTA0M2Q3YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgxrTbIDIpo
G+goiwWAZimaaTPs3hZ2YFDY43PJsKXpkcpFvtg7tq0NRhLN0USOZaBbknnFZRu9
Xp7IaINOPfQKu7R6BnZfB5oasWNdfiGAwuPbrL7AU+ADPJXTyDBXu9BpinvaayK7
HqMmkjmoV+dlnkO/S4EsWu0GHjqzkmpvZJDcyQzh2T7X4IOIYrynbYTKMyzDGNpJ
XzDVqlK8Pta5+2GCgrh+O/VaCP+7KaZn61xIspHCbpqs/TADkInjrEg3OoNUDM22
ELJRv/Uk4XEt/rT+b6hF7R0+3JlRldc4rkl6vfxIRwfV09aiFls4hpnKhAJhTHu9
CIhUp4IGZAkCAwEAAaOCAx8wggMbMB0GA1UdDgQWBBR9vzbckaJM5h3qj0ck55yI
2mkD0zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84Yzc5NGJkMC03ZDk0
LTQ0NWYtODIzMy0xMjAwYzljNmYyZWMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOGM3OTRiZDAtN2Q5NC00
NDVmLTgyMzMtMTIwMGM5YzZmMmVjLzE3ZTYzYjQxNDlkMGIyM2U3Yjc0MWE3Y2Nj
ZmIwYjU0NGEwNDNkN2IubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAo//+AMEBbv7oAMEBL4PgAMEAsmf
3DANBAIAAjAHAwUAKAAAaDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJswQIDAPAc
MA0GCSqGSIb3DQEBCwUAA4IBAQAlAP69J6xxW1/kvsGf+zxWyta6llnKx/srkd57
iB85adLugRd95YB2EjLDTZ0yCzuzkfDWF7mA3IiehgCoL+ZsSlBRQKSg2vvgksMK
2PLCWPAn1WK0FjYB4dMOzZsANM1wISTpRf+qd+IAJDIuvxbLWfbmZKoClBD6/bVA
3jorwlKpbnb1PiOSggqm8x+OdUCYl82uSvmvo9cQz4/fXcv+f1GgPAbC81Xq2B6W
pGBo0Bc4v+EcKHADOGF15+50r6uBWUaNa87GbjUwmCSlsErpESGzWATyfWfazHrW
cO7zC97fUOipajmSBjlVo4UWUvHCQsDZ9imjonWzHUR4qjAP
-----END CERTIFICATE-----