Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer
File:                     2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer (raw, json)
Hash identifier:          ofaF3kc82E48FPpEykQamz/ydqRAp7ZiPIpvnlBHv2A=
Subject key identifier:   9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6F02C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:12 +0000
Certificate not after:    Sat 28 Sep 2024 17:45:13 +0000
Subordinate resources:    AS: 265629
                          IP: 170.239.204.0/22
                          IP: 2803:9cc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16183340 (0xf6f02c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:12 2017 GMT
            Not After : Sep 28 17:45:13 2024 GMT
        Subject: CN=2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:c3:16:1a:a2:f6:79:c3:d9:82:00:d2:1b:
                    99:20:85:14:8e:72:10:63:78:3e:ee:f2:1e:01:8c:
                    05:50:76:e4:48:cf:72:c3:6b:c8:c8:09:05:62:8b:
                    b2:2a:58:bf:54:11:ec:bf:90:e1:70:38:c9:9f:04:
                    6c:34:3a:f1:09:c1:a1:16:93:e6:54:3f:d7:9d:a8:
                    42:6c:38:aa:69:6b:ac:ee:a5:5f:97:fb:e7:39:47:
                    72:fb:6c:e0:3d:46:d0:5c:81:c3:15:cd:1b:02:cc:
                    52:97:2b:6b:7c:7f:8a:34:92:b9:b6:6f:49:f0:0c:
                    8a:25:de:89:22:4f:3f:d0:28:ed:b8:c4:ba:4f:93:
                    f4:05:7b:7c:12:5b:75:25:b7:c7:19:89:60:72:dd:
                    47:49:5f:08:25:4b:13:9b:f7:87:42:74:c1:58:0e:
                    3c:64:37:15:e6:cd:f8:7b:3f:9d:6c:b8:72:0a:34:
                    c9:72:1a:c9:db:b6:81:1a:b9:6d:e0:d3:51:67:b4:
                    1d:b4:7c:2f:6b:40:17:fe:58:12:ba:f3:2d:8f:ba:
                    a1:97:88:98:20:14:0f:35:b3:8c:8a:44:c2:8a:fe:
                    7f:10:3f:0f:ed:c5:b2:d2:d8:6a:1b:c9:cd:d6:1f:
                    36:ff:72:54:b2:01:ec:85:d9:fd:d8:11:31:d4:16:
                    0f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.204.0/22
                IPv6:
                  2803:9cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265629

    Signature Algorithm: sha256WithRSAEncryption
         c4:66:42:ec:fa:4c:3f:da:88:5a:9c:cf:c7:bd:77:1a:b7:64:
         b4:5b:c2:2e:b3:66:69:0d:28:04:03:1b:1a:51:f7:e6:af:75:
         51:6d:18:a5:6d:9f:16:67:e1:fd:f1:5a:c5:0c:96:b3:eb:b5:
         37:70:78:f6:e9:b3:62:31:8b:cc:88:b5:66:17:03:21:9d:6e:
         a3:46:c9:ed:5a:e3:47:26:9c:61:9a:d9:82:bb:32:3b:d2:e1:
         71:61:15:f7:93:eb:d0:bb:e0:7a:14:23:9b:c2:f2:17:4b:71:
         75:23:d7:e7:e4:ea:d5:e9:8d:c0:c6:82:77:f2:1e:79:ba:a1:
         76:1a:35:73:a3:53:81:b5:e1:8b:27:43:9f:1d:c9:f7:cd:ad:
         0e:5b:05:93:95:59:46:b8:28:9f:6f:d1:d7:a2:46:20:66:30:
         99:ab:1d:b6:b2:1a:64:71:1a:8a:58:6d:85:37:0e:df:f6:4c:
         89:e2:c9:6f:02:1b:d3:e6:0d:4e:5b:eb:ab:66:aa:9e:16:91:
         82:0b:da:d0:b8:13:74:a3:13:14:d1:b0:90:39:94:e2:db:1e:
         fa:c2:8d:01:d0:9c:25:f3:1f:a7:5b:cf:6f:fb:af:b4:4c:09:
         a5:27:49:27:c8:b3:22:bc:b2:b7:0a:db:ba:7a:be:9a:1e:70:
         24:e7:4f:d4
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPbwLDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcxMloXDTI0MDkyODE3NDUx
M1owMzExMC8GA1UEAxMoMmM3NTMzNmJmZjA4ZDJjYjYyZDdiYzBmMGY0OGI0YWE0
MDRmMGFhYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANRJwxYaovZ5
w9mCANIbmSCFFI5yEGN4Pu7yHgGMBVB25EjPcsNryMgJBWKLsipYv1QR7L+Q4XA4
yZ8EbDQ68QnBoRaT5lQ/152oQmw4qmlrrO6lX5f75zlHcvts4D1G0FyBwxXNGwLM
Upcra3x/ijSSubZvSfAMiiXeiSJPP9Ao7bjEuk+T9AV7fBJbdSW3xxmJYHLdR0lf
CCVLE5v3h0J0wVgOPGQ3FebN+Hs/nWy4cgo0yXIaydu2gRq5beDTUWe0HbR8L2tA
F/5YErrzLY+6oZeImCAUDzWzjIpEwor+fxA/D+3FstLYahvJzdYfNv9yVLIB7IXZ
/dgRMdQWDyMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSa8RLr8PNGuh71sugRhsre
i/C+4jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mMzU0Yjc0Yi1hZDQ4
LTQxODYtOWFjMC02YmQ5ZmYxMTUwYzMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjM1NGI3NGItYWQ0OC00
MTg2LTlhYzAtNmJkOWZmMTE1MGMzLzJjNzUzMzZiZmYwOGQyY2I2MmQ3YmMwZjBm
NDhiNGFhNDA0ZjBhYWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqrvzDANBAIAAjAHAwUAKAOcwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDZ0wDQYJKoZIhvcNAQELBQADggEBAMRm
Quz6TD/aiFqcz8e9dxq3ZLRbwi6zZmkNKAQDGxpR9+avdVFtGKVtnxZn4f3xWsUM
lrPrtTdwePbps2Ixi8yItWYXAyGdbqNGye1a40cmnGGa2YK7MjvS4XFhFfeT69C7
4HoUI5vC8hdLcXUj1+fk6tXpjcDGgnfyHnm6oXYaNXOjU4G14YsnQ58dyffNrQ5b
BZOVWUa4KJ9v0deiRiBmMJmrHbayGmRxGopYbYU3Dt/2TIniyW8CG9PmDU5b66tm
qp4WkYIL2tC4E3SjExTRsJA5lOLbHvrCjQHQnCXzH6dbz2/7r7RMCaUnSSfIsyK8
srcK27p6vpoecCTnT9Q=
-----END CERTIFICATE-----