Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b7cd011cb92d7bcdc0d171ef2438570e26f0259.cer
File:                     1b7cd011cb92d7bcdc0d171ef2438570e26f0259.cer (raw, json)
Hash identifier:          Xc6O8VOjeRbu6d9T/agLVpjrcifnenv2THBz1oBGwGY=
Subject key identifier:   61:15:32:78:73:AB:8F:16:BB:E9:6B:2C:FF:7D:48:E0:2A:F0:AD:43
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DAB137
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bcace1f2-688c-441b-9e31-007e18d52115/1b7cd011cb92d7bcdc0d171ef2438570e26f0259.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bcace1f2-688c-441b-9e31-007e18d52115/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:31 +0000
Certificate not after:    Sun 28 Jan 2024 18:59:17 +0000
Subordinate resources:    AS: 262934
                          IP: 168.227.144.0/22
                          IP: 191.102.248.0/21
                          IP: 2803:fa80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14332215 (0xdab137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:31 2017 GMT
            Not After : Jan 28 18:59:17 2024 GMT
        Subject: CN=1b7cd011cb92d7bcdc0d171ef2438570e26f0259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:dc:47:07:7d:a4:03:ac:9f:43:e8:e8:cb:
                    12:00:6b:51:33:6e:c8:a7:09:30:7c:48:05:34:05:
                    50:b1:53:3a:e8:27:9a:2e:94:a7:ea:33:6b:51:76:
                    9b:30:f8:ae:e9:95:88:1f:93:43:31:2f:0c:22:56:
                    41:43:f8:bc:56:a8:31:cf:d4:ad:4a:76:3a:d3:9d:
                    15:0c:5e:8a:38:fd:8c:80:e0:43:fb:24:bd:b1:51:
                    3a:98:90:20:32:79:ba:9e:80:e4:20:04:65:cf:cf:
                    c7:2f:de:5b:30:d0:94:ba:58:2e:3f:a8:2b:3f:27:
                    c6:e6:57:2b:52:93:69:e0:f3:b2:5f:b4:6d:29:b8:
                    ff:a0:58:4a:17:ea:30:11:de:2a:ad:0a:38:13:0b:
                    f2:17:07:11:b9:c3:6a:29:32:e2:5a:67:35:70:6c:
                    24:e6:f0:18:ab:29:e9:aa:dc:74:2e:9f:1e:d5:9a:
                    df:fc:e4:06:98:c1:e1:cd:0c:10:85:d0:83:f5:d9:
                    17:d1:20:5c:5b:cf:e8:f3:c8:a9:a7:6b:45:da:35:
                    39:f6:3c:b2:f0:b8:3d:db:06:0c:67:78:69:22:98:
                    a3:ba:64:a6:82:e6:2e:71:2e:31:ac:76:39:2b:ad:
                    80:c4:79:50:ba:60:e3:d6:81:eb:a0:1f:58:ae:bf:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:15:32:78:73:AB:8F:16:BB:E9:6B:2C:FF:7D:48:E0:2A:F0:AD:43
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bcace1f2-688c-441b-9e31-007e18d52115/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bcace1f2-688c-441b-9e31-007e18d52115/1b7cd011cb92d7bcdc0d171ef2438570e26f0259.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.144.0/22
                  191.102.248.0/21
                IPv6:
                  2803:fa80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262934

    Signature Algorithm: sha256WithRSAEncryption
         07:72:79:9f:96:60:fe:ea:c6:f4:7f:2b:53:b9:75:69:25:0a:
         1b:d0:fc:b1:aa:8a:f1:00:15:ae:c1:fd:54:46:55:18:01:c6:
         6c:09:f0:bf:22:dc:8d:49:d6:53:f6:64:f7:20:71:3a:92:71:
         d3:b8:d9:6c:9f:36:d9:2e:44:89:f0:5e:15:bd:fe:30:2b:82:
         10:19:8e:6f:89:55:29:ad:ab:95:b8:c8:75:24:83:89:ee:cb:
         7e:e5:c2:64:2b:f0:25:a9:2f:59:94:f1:f6:71:85:2c:4a:48:
         8b:f9:0c:a5:6b:42:f3:ae:f8:50:4d:4c:b8:d2:8e:c5:5c:fd:
         87:ab:9e:cc:1c:18:ad:46:e9:07:c6:07:00:ab:6f:39:bd:b6:
         96:a4:54:97:f5:cc:f7:57:6d:de:4f:78:aa:a9:6a:c7:98:d0:
         e3:cf:22:d3:ed:44:e1:3c:11:d2:c2:30:ff:ab:7b:89:f1:70:
         a6:ed:06:26:b6:91:85:4f:fb:cc:45:55:60:c5:d7:af:23:8e:
         c5:68:5b:d7:69:96:ab:41:1f:7d:c0:7a:7c:ba:bb:e8:bd:83:
         16:e8:1c:c6:39:b8:51:ef:b4:3d:b3:be:d6:6a:78:b2:28:d2:
         5f:40:78:7e:44:d4:a2:c2:f1:8f:9a:26:4e:7d:89:cd:cf:00:
         77:fd:31:bb
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEANqxNzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzMVoXDTI0MDEyODE4NTkx
N1owMzExMC8GA1UEAxMoMWI3Y2QwMTFjYjkyZDdiY2RjMGQxNzFlZjI0Mzg1NzBl
MjZmMDI1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKIE3EcHfaQD
rJ9D6OjLEgBrUTNuyKcJMHxIBTQFULFTOugnmi6Up+oza1F2mzD4rumViB+TQzEv
DCJWQUP4vFaoMc/UrUp2OtOdFQxeijj9jIDgQ/skvbFROpiQIDJ5up6A5CAEZc/P
xy/eWzDQlLpYLj+oKz8nxuZXK1KTaeDzsl+0bSm4/6BYShfqMBHeKq0KOBML8hcH
EbnDaiky4lpnNXBsJObwGKsp6arcdC6fHtWa3/zkBpjB4c0MEIXQg/XZF9EgXFvP
6PPIqadrRdo1OfY8svC4PdsGDGd4aSKYo7pkpoLmLnEuMax2OSutgMR5ULpg49aB
66AfWK6/CG8CAwEAAaOCAw8wggMLMB0GA1UdDgQWBBRhFTJ4c6uPFrvpayz/fUjg
KvCtQzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iY2FjZTFmMi02ODhj
LTQ0MWItOWUzMS0wMDdlMThkNTIxMTUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYmNhY2UxZjItNjg4Yy00
NDFiLTllMzEtMDA3ZTE4ZDUyMTE1LzFiN2NkMDExY2I5MmQ3YmNkYzBkMTcxZWYy
NDM4NTcwZTI2ZjAyNTkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqjjkAMEA79m+DANBAIAAjAHAwUA
KAP6gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAxYwDQYJKoZIhvcNAQELBQAD
ggEBAAdyeZ+WYP7qxvR/K1O5dWklChvQ/LGqivEAFa7B/VRGVRgBxmwJ8L8i3I1J
1lP2ZPcgcTqScdO42WyfNtkuRInwXhW9/jArghAZjm+JVSmtq5W4yHUkg4nuy37l
wmQr8CWpL1mU8fZxhSxKSIv5DKVrQvOu+FBNTLjSjsVc/YernswcGK1G6QfGBwCr
bzm9tpakVJf1zPdXbd5PeKqpaseY0OPPItPtROE8EdLCMP+re4nxcKbtBia2kYVP
+8xFVWDF168jjsVoW9dplqtBH33Aeny6u+i9gxboHMY5uFHvtD2zvtZqeLIo0l9A
eH5E1KLC8Y+aJk59ic3PAHf9Mbs=
-----END CERTIFICATE-----