Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c38f01673d434851bd500c39034d2c366cf4a2.cer
File:                     39c38f01673d434851bd500c39034d2c366cf4a2.cer (raw, json)
Hash identifier:          pIEO93iQtDvJiHYV3W/0iJLErfyKVrYMRI7ZfooPkTg=
Subject key identifier:   93:B7:17:CF:A6:6A:AF:C6:6E:C4:76:30:02:FF:9D:65:1F:F9:02:67
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE68BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/291efdba-d7f1-49a7-8462-e4a503d8191d/39c38f01673d434851bd500c39034d2c366cf4a2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/291efdba-d7f1-49a7-8462-e4a503d8191d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2017 21:50:17 +0000
Certificate not after:    Tue 12 Mar 2024 15:47:00 +0000
Subordinate resources:    AS: 263765
                          IP: 138.117.4.0/22
                          IP: 170.84.132.0/22
                          IP: 2803:9840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14575806 (0xde68be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 18 21:50:17 2017 GMT
            Not After : Mar 12 15:47:00 2024 GMT
        Subject: CN=39c38f01673d434851bd500c39034d2c366cf4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fb:fa:3a:14:fc:a1:39:3e:bc:75:eb:04:fe:
                    5e:19:38:22:13:a9:2f:f2:6a:5d:4d:6f:f0:fc:ab:
                    c8:97:84:48:84:47:aa:58:fc:2d:d0:84:1d:dc:a9:
                    54:d1:fb:aa:4e:19:43:4d:19:91:15:43:96:5e:8f:
                    7d:63:9a:bb:ba:15:77:e1:55:29:da:da:92:d2:fc:
                    55:e4:dd:c0:e2:22:a6:69:5f:95:3d:54:75:55:74:
                    59:c4:86:3d:29:88:1a:ab:c2:24:fa:63:4a:fe:42:
                    39:d1:03:56:bc:15:c6:92:cc:7b:c0:49:bb:33:c6:
                    94:c7:a9:a5:d2:c3:96:28:eb:08:f3:04:1f:e7:42:
                    32:52:ab:8b:08:f3:42:bb:23:be:b3:d5:2b:5f:a9:
                    29:b1:34:25:74:c8:55:69:8d:a2:d4:01:88:d1:f8:
                    a3:a0:4e:8e:d2:f1:35:3e:83:22:fa:dc:de:b7:00:
                    71:e3:41:0f:e2:16:ab:71:0e:7e:45:2f:a1:3f:71:
                    a0:52:45:ce:51:b8:4e:d8:2c:4c:36:94:1a:51:e7:
                    37:4a:cd:01:cb:0e:d8:0c:20:08:77:50:17:ad:32:
                    2c:59:f9:47:c4:13:60:cd:f4:dd:87:4d:62:7b:0a:
                    e2:53:c5:62:32:38:bf:c9:61:2f:9f:46:10:6d:e6:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B7:17:CF:A6:6A:AF:C6:6E:C4:76:30:02:FF:9D:65:1F:F9:02:67
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/291efdba-d7f1-49a7-8462-e4a503d8191d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/291efdba-d7f1-49a7-8462-e4a503d8191d/39c38f01673d434851bd500c39034d2c366cf4a2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.4.0/22
                  170.84.132.0/22
                IPv6:
                  2803:9840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263765

    Signature Algorithm: sha256WithRSAEncryption
         04:64:45:ec:03:7b:10:3c:c9:b2:05:e3:a5:90:ec:38:81:fd:
         cc:c9:a6:3f:89:58:29:f2:39:6d:e0:b4:f4:4d:08:ea:24:e3:
         79:b2:7e:d4:b7:2b:2e:55:9b:aa:12:fd:6d:cf:13:94:1c:ba:
         1e:8a:e5:ba:8d:53:5e:9b:bf:28:e8:1c:21:ba:43:20:26:1c:
         d2:99:08:5c:c5:c5:99:19:96:15:0d:c4:49:0c:1e:cd:a2:e2:
         ab:63:dc:20:42:81:ef:e6:31:08:26:8a:db:62:dd:09:33:2f:
         69:37:d0:49:f5:64:c7:6a:41:7b:21:22:e6:5a:1f:52:9d:5e:
         40:45:0e:55:3b:d2:80:2e:0c:c8:3e:91:bd:8d:ab:83:77:35:
         54:2e:31:3e:94:b4:66:36:15:23:2a:69:c6:6b:aa:5c:8d:be:
         12:4e:ad:b9:ea:54:14:b3:69:36:97:a9:51:82:b6:7b:b9:b9:
         f2:ae:c8:62:d8:da:be:0b:b5:6b:d7:67:d1:89:16:55:c4:8d:
         6e:3a:c2:e5:ec:02:74:65:a3:ec:12:9a:b6:40:dc:e4:38:87:
         4f:15:db:6f:fb:66:31:f7:de:05:50:a7:6e:7e:35:8d:08:3d:
         a7:44:76:51:97:02:a4:80:17:80:15:c3:7f:d8:2e:41:6d:b9:
         66:9e:c3:fd
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAN5ovjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTIxODIxNTAxN1oXDTI0MDMxMjE1NDcw
MFowMzExMC8GA1UEAxMoMzljMzhmMDE2NzNkNDM0ODUxYmQ1MDBjMzkwMzRkMmMz
NjZjZjRhMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIf7+joU/KE5
Prx16wT+Xhk4IhOpL/JqXU1v8PyryJeESIRHqlj8LdCEHdypVNH7qk4ZQ00ZkRVD
ll6PfWOau7oVd+FVKdraktL8VeTdwOIipmlflT1UdVV0WcSGPSmIGqvCJPpjSv5C
OdEDVrwVxpLMe8BJuzPGlMeppdLDlijrCPMEH+dCMlKriwjzQrsjvrPVK1+pKbE0
JXTIVWmNotQBiNH4o6BOjtLxNT6DIvrc3rcAceNBD+IWq3EOfkUvoT9xoFJFzlG4
TtgsTDaUGlHnN0rNAcsO2AwgCHdQF60yLFn5R8QTYM303YdNYnsK4lPFYjI4v8lh
L59GEG3mNycCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBSTtxfPpmqvxm7EdjAC/51l
H/kCZzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yOTFlZmRiYS1kN2Yx
LTQ5YTctODQ2Mi1lNGE1MDNkODE5MWQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjkxZWZkYmEtZDdmMS00
OWE3LTg0NjItZTRhNTAzZDgxOTFkLzM5YzM4ZjAxNjczZDQzNDg1MWJkNTAwYzM5
MDM0ZDJjMzY2Y2Y0YTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAop1BAMEAqpUhDANBAIAAjAHAwUA
KAOYQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBlUwDQYJKoZIhvcNAQELBQAD
ggEBAARkRewDexA8ybIF46WQ7DiB/czJpj+JWCnyOW3gtPRNCOok43myftS3Ky5V
m6oS/W3PE5Qcuh6K5bqNU16bvyjoHCG6QyAmHNKZCFzFxZkZlhUNxEkMHs2i4qtj
3CBCge/mMQgmitti3QkzL2k30En1ZMdqQXshIuZaH1KdXkBFDlU70oAuDMg+kb2N
q4N3NVQuMT6UtGY2FSMqacZrqlyNvhJOrbnqVBSzaTaXqVGCtnu5ufKuyGLY2r4L
tWvXZ9GJFlXEjW46wuXsAnRlo+wSmrZA3OQ4h08V22/7ZjH33gVQp25+NY0IPadE
dlGXAqSAF4AVw3/YLkFtuWaew/0=
-----END CERTIFICATE-----