Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2683a740023bb6fcad3775a70ae9f2fd3879c3c8.cer
File:                     2683a740023bb6fcad3775a70ae9f2fd3879c3c8.cer (raw, json)
Hash identifier:          M9/S/tPpUXtylMBuhnHWDabg94c1AP7wLoNAYSnhNMg=
Subject key identifier:   4A:6E:AF:01:97:9C:35:DA:40:A4:A9:99:88:52:AE:1B:80:CD:3D:AA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0105788A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/2683a740023bb6fcad3775a70ae9f2fd3879c3c8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:42 +0000
Certificate not after:    Thu 05 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 26210
                          IP: 186.121.192.0/18
                          IP: 190.181.0.0/18
                          IP: 200.105.128.0 -- 200.105.223.255
                          IP: 2800:88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17135754 (0x105788a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:42 2017 GMT
            Not After : Dec  5 04:00:00 2024 GMT
        Subject: CN=2683a740023bb6fcad3775a70ae9f2fd3879c3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e8:f3:32:c9:fb:12:99:1e:a9:3e:00:e8:e5:
                    8a:9e:60:28:86:cd:38:74:7f:53:c4:00:3f:47:a1:
                    bc:a4:ec:2e:3f:55:c8:8b:5c:e4:2c:4d:0f:c6:83:
                    fc:2d:db:ab:d6:fc:9b:2b:c2:05:78:9c:8a:61:e6:
                    ca:14:24:68:fc:6a:93:02:1a:9d:52:46:5a:cf:00:
                    ee:06:a0:53:ab:24:c4:04:86:45:20:7c:dd:da:b7:
                    3a:3a:7b:00:f6:88:5e:ed:57:84:1b:2a:5e:30:d7:
                    d5:98:a2:31:76:61:4c:cf:da:2b:0e:74:3e:16:fe:
                    83:cc:0d:a2:c6:73:08:f2:a0:ab:3f:9d:e5:18:21:
                    96:2d:2c:4c:c5:7f:44:aa:84:13:d3:4b:c2:44:5f:
                    03:44:9b:7e:77:3c:6a:cb:28:86:13:b5:d0:09:04:
                    8a:9d:74:a0:f6:54:11:f0:2a:12:31:83:83:72:9e:
                    eb:0b:b4:03:8b:6d:87:0d:f8:66:e3:81:47:e1:7e:
                    ac:f2:2e:10:df:01:6e:cf:f6:2b:a3:33:15:4d:91:
                    21:58:cf:e9:1d:24:9f:0b:1f:fb:90:9e:9d:f6:a9:
                    6d:dd:f8:b0:87:90:ef:62:13:04:de:5a:3e:08:36:
                    60:bd:45:55:c5:89:82:48:37:5a:36:7a:49:dc:ae:
                    41:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6E:AF:01:97:9C:35:DA:40:A4:A9:99:88:52:AE:1B:80:CD:3D:AA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/2683a740023bb6fcad3775a70ae9f2fd3879c3c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.192.0/18
                  190.181.0.0/18
                  200.105.128.0-200.105.223.255
                IPv6:
                  2800:88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26210

    Signature Algorithm: sha256WithRSAEncryption
         07:b4:13:32:ae:6a:25:80:99:d5:7f:c6:4b:1e:1b:3f:7b:e7:
         6b:4a:49:cf:f9:36:80:cf:26:ed:94:57:45:48:28:ed:7f:98:
         a5:27:72:3b:a6:48:f3:d0:08:bf:d5:b3:65:41:12:19:f9:b0:
         ac:6c:82:07:3f:16:f7:ad:de:2d:bd:82:68:4a:50:a4:f2:af:
         99:bc:64:5a:f7:70:f0:48:49:15:dd:cd:c9:93:a5:ee:42:d2:
         a2:a5:8e:15:a9:c9:1f:e7:5d:61:62:39:4b:94:84:f3:aa:d1:
         63:94:93:39:8b:ea:67:64:01:44:b8:11:7f:e9:e3:65:bf:d2:
         bb:99:5d:02:1f:2e:f9:56:a8:9b:08:19:3c:4b:73:fd:1f:46:
         07:4c:13:25:97:7e:de:2b:a2:08:b8:54:5f:51:44:e2:5c:59:
         0c:c1:61:9c:29:cf:ff:8d:da:3a:da:90:11:d4:83:64:48:b1:
         0e:cb:20:70:68:64:7a:c8:16:87:92:cb:9e:6f:cc:ad:c6:9a:
         d9:b4:8b:fe:4d:fb:d1:3c:dc:67:83:3e:71:91:98:1c:5c:68:
         74:0c:a9:79:ad:ed:1a:d2:fa:80:d4:aa:16:8d:21:16:3f:0b:
         19:ca:15:a6:c5:64:e4:22:a2:e0:76:93:77:8c:e0:61:8c:75:
         a6:ba:4d:1f
-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgIEAQV4ijANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0MloXDTI0MTIwNTA0MDAw
MFowMzExMC8GA1UEAxMoMjY4M2E3NDAwMjNiYjZmY2FkMzc3NWE3MGFlOWYyZmQz
ODc5YzNjODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIXo8zLJ+xKZ
Hqk+AOjlip5gKIbNOHR/U8QAP0ehvKTsLj9VyItc5CxND8aD/C3bq9b8myvCBXic
imHmyhQkaPxqkwIanVJGWs8A7gagU6skxASGRSB83dq3Ojp7APaIXu1XhBsqXjDX
1ZiiMXZhTM/aKw50Phb+g8wNosZzCPKgqz+d5Rghli0sTMV/RKqEE9NLwkRfA0Sb
fnc8assohhO10AkEip10oPZUEfAqEjGDg3Ke6wu0A4tthw34ZuOBR+F+rPIuEN8B
bs/2K6MzFU2RIVjP6R0knwsf+5Cenfapbd34sIeQ72ITBN5aPgg2YL1FVcWJgkg3
WjZ6SdyuQRMCAwEAAaOCAxwwggMYMB0GA1UdDgQWBBRKbq8Bl5w12kCkqZmIUq4b
gM09qjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81NjdmZmE3Zi1lZTNl
LTRlOWItYjYzOS1iYTRjMDQ4OTExNmQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTY3ZmZhN2YtZWUzZS00
ZTliLWI2MzktYmE0YzA0ODkxMTZkLzI2ODNhNzQwMDIzYmI2ZmNhZDM3NzVhNzBh
ZTlmMmZkMzg3OWMzYzgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBC
BggrBgEFBQcBBwEB/wQzMDEwIAQCAAEwGgMEBrp5wAMEBr61ADAMAwQHyGmAAwQF
yGnAMA0EAgACMAcDBQAoAACIMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmZiMA0G
CSqGSIb3DQEBCwUAA4IBAQAHtBMyrmolgJnVf8ZLHhs/e+drSknP+TaAzybtlFdF
SCjtf5ilJ3I7pkjz0Ai/1bNlQRIZ+bCsbIIHPxb3rd4tvYJoSlCk8q+ZvGRa93Dw
SEkV3c3Jk6XuQtKipY4Vqckf511hYjlLlITzqtFjlJM5i+pnZAFEuBF/6eNlv9K7
mV0CHy75VqibCBk8S3P9H0YHTBMll37eK6IIuFRfUUTiXFkMwWGcKc//jdo62pAR
1INkSLEOyyBwaGR6yBaHksueb8ytxprZtIv+TfvRPNxngz5xkZgcXGh0DKl5re0a
0vqA1KoWjSEWPwsZyhWmxWTkIqLgdpN3jOBhjHWmuk0f
-----END CERTIFICATE-----