Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/304e8917ab983f54e780557b73be5b7d97bb375f.cer
File:                     304e8917ab983f54e780557b73be5b7d97bb375f.cer (raw, json)
Hash identifier:          y0Y0yjGfPYMxeKcC4/OU4PdTM8h8JBJ+5vySxxa/52k=
Subject key identifier:   DE:88:F7:6E:8F:76:10:55:DD:3F:D0:F9:14:DA:95:30:FD:28:7B:D2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFC6CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6550d2c9-cdea-40c1-8b15-bf59456680f2/304e8917ab983f54e780557b73be5b7d97bb375f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6550d2c9-cdea-40c1-8b15-bf59456680f2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:46 +0000
Certificate not after:    Sun 28 Jul 2024 15:20:53 +0000
Subordinate resources:    AS: 265830
                          IP: 45.71.44.0/22
                          IP: 2803:6c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15713996 (0xefc6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:46 2017 GMT
            Not After : Jul 28 15:20:53 2024 GMT
        Subject: CN=304e8917ab983f54e780557b73be5b7d97bb375f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:b5:76:38:58:48:73:1d:ba:79:72:9c:4c:
                    24:60:6c:63:89:fe:3f:2b:3e:8e:4c:f4:b9:42:3c:
                    43:97:f4:ad:17:93:10:cb:03:e1:0a:e3:55:bc:cd:
                    d3:4c:b2:20:33:c4:3b:44:b5:c1:52:86:fd:cd:8a:
                    03:e7:9f:4b:79:8e:8a:86:32:05:2f:f2:e8:aa:08:
                    fc:1b:d7:b9:9d:47:90:4f:2f:c1:59:c2:7e:e5:bf:
                    3d:88:bc:c5:3c:84:69:64:5f:f6:8a:11:8b:f8:9c:
                    92:f3:91:b4:e8:7c:f3:72:f3:28:b7:db:cb:28:f8:
                    ad:6d:78:27:f7:b1:93:aa:7c:42:c3:fb:36:d1:32:
                    c2:9b:53:6f:95:83:29:30:f6:1e:bc:c0:df:b3:64:
                    60:77:d8:8d:f1:e3:39:e5:b0:4c:77:90:e4:31:e0:
                    16:83:a6:cd:96:34:c5:2d:68:0e:88:b3:2b:83:5d:
                    30:c4:9a:4d:76:b5:e2:9b:0d:04:06:e6:0a:52:81:
                    f4:07:9e:20:dc:02:02:f6:62:ae:2f:0c:d1:c4:6a:
                    bb:be:06:ab:54:e1:43:78:97:19:5b:8d:9b:5d:b0:
                    d7:8f:66:f0:b5:d8:0f:2b:39:bd:1d:44:41:21:ba:
                    5f:5c:f1:cd:2a:52:b9:30:18:97:0a:b5:c4:b6:ad:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:88:F7:6E:8F:76:10:55:DD:3F:D0:F9:14:DA:95:30:FD:28:7B:D2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6550d2c9-cdea-40c1-8b15-bf59456680f2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6550d2c9-cdea-40c1-8b15-bf59456680f2/304e8917ab983f54e780557b73be5b7d97bb375f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.44.0/22
                IPv6:
                  2803:6c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265830

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:4a:a6:52:67:4d:31:98:e3:87:b8:5d:03:03:93:54:55:
         ea:ac:9f:d5:e5:d0:ef:52:44:70:f6:22:e0:f2:6a:ed:a8:81:
         b8:42:3f:0d:34:52:7f:eb:d7:1b:c9:86:39:4f:84:77:d4:3d:
         87:60:4a:7b:b9:3e:b6:12:9f:4b:1a:6f:2d:41:7e:85:ce:69:
         25:4b:ae:63:76:fd:8d:a3:ce:0e:11:1e:c6:03:58:05:1d:31:
         3d:ce:87:d9:fd:17:88:dd:31:ba:c2:95:06:da:d6:11:90:dd:
         62:66:01:90:9b:83:e8:51:a6:e0:9c:ec:86:83:e6:08:6c:43:
         b4:dd:f8:57:a2:3e:c2:51:e4:4b:ae:44:ab:bf:78:af:b8:69:
         bb:e9:7d:06:49:ab:7d:01:c8:31:1f:1d:01:6b:5a:9c:93:f3:
         db:ac:46:f5:4c:57:a9:2a:29:6f:21:e7:55:6b:4d:ae:3a:6c:
         b9:44:b6:02:59:4f:3b:ed:37:08:f0:50:10:ef:a9:5a:df:4d:
         ec:75:e8:20:9d:67:a8:a2:a8:0e:fe:44:53:63:c3:e4:3d:b1:
         e4:84:aa:e0:0f:df:1f:db:0c:e5:44:24:ac:90:3a:24:5b:cd:
         5c:ec:f2:5a:4c:80:61:24:9b:50:6f:9c:18:64:63:f1:23:06:
         76:93:a5:30
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAO/GzDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0NloXDTI0MDcyODE1MjA1
M1owMzExMC8GA1UEAxMoMzA0ZTg5MTdhYjk4M2Y1NGU3ODA1NTdiNzNiZTViN2Q5
N2JiMzc1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMe6tXY4WEhz
Hbp5cpxMJGBsY4n+Pys+jkz0uUI8Q5f0rReTEMsD4QrjVbzN00yyIDPEO0S1wVKG
/c2KA+efS3mOioYyBS/y6KoI/BvXuZ1HkE8vwVnCfuW/PYi8xTyEaWRf9ooRi/ic
kvORtOh883LzKLfbyyj4rW14J/exk6p8QsP7NtEywptTb5WDKTD2HrzA37NkYHfY
jfHjOeWwTHeQ5DHgFoOmzZY0xS1oDoizK4NdMMSaTXa14psNBAbmClKB9AeeINwC
AvZiri8M0cRqu74Gq1ThQ3iXGVuNm12w149m8LXYDys5vR1EQSG6X1zxzSpSuTAY
lwq1xLatezcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTeiPduj3YQVd0/0PkU2pUw
/Sh70jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82NTUwZDJjOS1jZGVh
LTQwYzEtOGIxNS1iZjU5NDU2NjgwZjIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjU1MGQyYzktY2RlYS00
MGMxLThiMTUtYmY1OTQ1NjY4MGYyLzMwNGU4OTE3YWI5ODNmNTRlNzgwNTU3Yjcz
YmU1YjdkOTdiYjM3NWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi1HLDANBAIAAjAHAwUAKANsIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDmYwDQYJKoZIhvcNAQELBQADggEBACjQ
SqZSZ00xmOOHuF0DA5NUVeqsn9Xl0O9SRHD2IuDyau2ogbhCPw00Un/r1xvJhjlP
hHfUPYdgSnu5PrYSn0saby1BfoXOaSVLrmN2/Y2jzg4RHsYDWAUdMT3Oh9n9F4jd
MbrClQba1hGQ3WJmAZCbg+hRpuCc7IaD5ghsQ7Td+FeiPsJR5EuuRKu/eK+4abvp
fQZJq30ByDEfHQFrWpyT89usRvVMV6kqKW8h51VrTa46bLlEtgJZTzvtNwjwUBDv
qVrfTex16CCdZ6iiqA7+RFNjw+Q9seSEquAP3x/bDOVEJKyQOiRbzVzs8lpMgGEk
m1BvnBhkY/EjBnaTpTA=
-----END CERTIFICATE-----