Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer
File:                     39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer (raw, json)
Hash identifier:          uKkVFbH832XSh7Hw3jw2sjJqV5HrIgrn1PWWN1x9XxQ=
Subject key identifier:   9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5D6ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:29 +0000
Certificate not after:    Wed 18 Sep 2024 20:02:29 +0000
Subordinate resources:    AS: 263795
                          IP: 138.204.108.0/22
                          IP: 190.105.168.0/22
                          IP: 2803:ac40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16111341 (0xf5d6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:29 2017 GMT
            Not After : Sep 18 20:02:29 2024 GMT
        Subject: CN=39cac9b8258cbecd7f49618f9f9179bb699f6cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:d9:fb:50:f8:84:bc:70:05:b5:47:b5:6b:
                    3a:fb:da:dc:f6:fa:29:7e:57:8d:72:25:0c:ca:0a:
                    de:c4:2b:e3:e0:a9:99:e8:f1:17:10:63:13:35:47:
                    64:ce:40:55:6c:22:a5:24:e1:0f:51:9f:ae:3f:c7:
                    f9:6b:23:bf:fb:0a:61:86:4a:8c:f0:e2:f6:19:2d:
                    60:71:79:a7:bc:cb:a7:3c:40:b3:f1:c4:d0:8b:01:
                    c0:f8:58:61:35:00:9b:0b:2b:76:08:2a:c2:63:07:
                    3a:74:9d:67:fa:e6:8c:be:d0:cb:c4:82:ea:ab:e9:
                    b5:11:6f:50:8c:11:60:e9:8d:d0:48:94:7d:d3:9e:
                    de:c1:24:a4:b7:a9:64:11:af:25:e7:ab:9d:bb:de:
                    1b:e1:85:41:9e:00:e6:39:d8:28:03:60:39:31:ff:
                    61:72:ec:44:92:8d:c5:46:bb:2d:2b:c9:de:7b:92:
                    96:25:a0:85:09:9c:63:49:40:50:8f:3f:42:9a:8c:
                    db:95:de:a5:d8:e2:59:ed:de:fc:7d:df:ff:73:b8:
                    78:da:eb:90:f0:78:14:f2:1d:89:3d:cc:32:b3:79:
                    e3:24:a5:5d:79:95:86:95:4a:0f:5e:0f:1e:9d:fb:
                    71:5e:65:40:f4:6b:5b:c2:d9:a0:92:88:14:19:61:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.108.0/22
                  190.105.168.0/22
                IPv6:
                  2803:ac40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263795

    Signature Algorithm: sha256WithRSAEncryption
         b1:fd:cd:57:c7:f3:ac:21:9f:04:b9:44:be:34:df:ad:52:25:
         84:83:46:f8:47:17:03:5b:84:46:43:ac:69:f3:ff:20:ab:f5:
         68:c5:10:60:5c:96:06:0a:66:1a:98:cb:21:77:24:27:0f:1f:
         83:e8:27:09:b9:31:6b:9b:6f:b4:2a:89:a5:29:5d:cc:1d:cd:
         ce:6c:75:2c:24:c3:01:7c:50:5a:25:90:31:f3:be:bb:5c:70:
         ae:68:4b:92:37:77:b7:57:2d:ea:f9:dd:0f:bd:2c:37:38:fb:
         08:b8:eb:f5:e5:d1:98:3a:60:1e:af:db:22:fb:2c:1b:d4:e4:
         3b:78:2f:ae:cb:b9:87:08:01:b2:bf:d8:81:60:da:e7:8f:8a:
         40:21:21:be:3f:3d:17:81:63:7d:a7:aa:ca:cc:a1:87:93:18:
         f7:99:ec:fb:5f:4b:eb:06:02:0a:54:e4:23:26:a2:3f:ea:a6:
         36:07:ee:b2:8e:8b:fd:8b:6e:a8:1d:99:91:b4:af:0d:87:75:
         2d:bc:34:77:8d:14:b8:37:e5:86:06:78:e8:08:27:98:e3:fd:
         57:7d:3e:3b:bc:f3:2d:bf:05:db:1e:8b:1a:f8:fb:cb:77:be:
         18:cb:bc:6d:9d:b0:7f:8f:7a:1f:bb:43:85:4b:06:7a:56:34:
         59:ac:ac:c4
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAPXW7TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcyOVoXDTI0MDkxODIwMDIy
OVowMzExMC8GA1UEAxMoMzljYWM5YjgyNThjYmVjZDdmNDk2MThmOWY5MTc5YmI2
OTlmNmNmZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKdq2ftQ+IS8
cAW1R7VrOvva3Pb6KX5XjXIlDMoK3sQr4+CpmejxFxBjEzVHZM5AVWwipSThD1Gf
rj/H+Wsjv/sKYYZKjPDi9hktYHF5p7zLpzxAs/HE0IsBwPhYYTUAmwsrdggqwmMH
OnSdZ/rmjL7Qy8SC6qvptRFvUIwRYOmN0EiUfdOe3sEkpLepZBGvJeernbveG+GF
QZ4A5jnYKANgOTH/YXLsRJKNxUa7LSvJ3nuSliWghQmcY0lAUI8/QpqM25Xepdji
We3e/H3f/3O4eNrrkPB4FPIdiT3MMrN54ySlXXmVhpVKD14PHp37cV5lQPRrW8LZ
oJKIFBlhfjcCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBSex4oowC7mlnezRUKK4JX9
kpn6IzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80ZDE3NmIwYi1kZmRk
LTQwOTUtYTZiNC1lY2NiNDdiYTVhNTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGQxNzZiMGItZGZkZC00
MDk1LWE2YjQtZWNjYjQ3YmE1YTUxLzM5Y2FjOWI4MjU4Y2JlY2Q3ZjQ5NjE4Zjlm
OTE3OWJiNjk5ZjZjZmUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAorMbAMEAr5pqDANBAIAAjAHAwUA
KAOsQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBnMwDQYJKoZIhvcNAQELBQAD
ggEBALH9zVfH86whnwS5RL40361SJYSDRvhHFwNbhEZDrGnz/yCr9WjFEGBclgYK
ZhqYyyF3JCcPH4PoJwm5MWubb7QqiaUpXcwdzc5sdSwkwwF8UFolkDHzvrtccK5o
S5I3d7dXLer53Q+9LDc4+wi46/Xl0Zg6YB6v2yL7LBvU5Dt4L67LuYcIAbK/2IFg
2uePikAhIb4/PReBY32nqsrMoYeTGPeZ7PtfS+sGAgpU5CMmoj/qpjYH7rKOi/2L
bqgdmZG0rw2HdS28NHeNFLg35YYGeOgIJ5jj/Vd9Pju88y2/Bdseixr4+8t3vhjL
vG2dsH+Peh+7Q4VLBnpWNFmsrMQ=
-----END CERTIFICATE-----