Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer
File:                     41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer (raw, json)
Hash identifier:          GTh6Hl1DJeIhh+Wg6M8OMsNIGQsmgdFOtdnZly6JMKc=
Subject key identifier:   41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E78538
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:32 +0000
Certificate not after:    Tue 28 May 2024 15:00:00 +0000
Subordinate resources:    AS: 27669
                          IP: 200.108.128.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15172920 (0xe78538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:32 2017 GMT
            Not After : May 28 15:00:00 2024 GMT
        Subject: CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:c5:fe:3b:81:a2:9f:4b:66:13:cf:71:80:
                    10:15:56:50:a5:d5:b9:7a:3b:32:64:d3:03:60:3c:
                    36:b5:a7:58:42:d6:16:13:30:b9:77:2c:31:b5:49:
                    7e:5a:1c:83:73:63:a8:29:29:8c:a1:ab:8a:ec:c4:
                    4b:40:2f:86:07:af:73:ca:20:38:ef:d3:ea:c5:aa:
                    1e:4c:c3:bd:7a:cd:14:61:cb:5a:e8:ff:c8:c3:22:
                    37:90:a2:08:c8:71:fa:c5:74:29:05:c9:03:be:5e:
                    8f:9a:ec:d1:b0:5c:10:b7:42:7b:2e:a6:2d:bb:be:
                    3b:e8:04:a7:1d:0f:6f:ef:a8:de:b9:4b:c9:c1:e8:
                    4a:99:7c:a2:93:bb:11:99:6e:b6:84:93:86:11:0a:
                    c3:ef:dc:d2:6a:08:8a:96:82:dc:5a:c3:a3:06:39:
                    41:40:3f:1c:a6:f9:8c:97:9e:a0:a4:b1:43:49:37:
                    33:54:d4:70:ac:df:f2:4f:e8:a4:6b:14:0a:be:3e:
                    ec:74:4c:6b:6f:e4:f3:4b:c2:10:f6:d7:3f:00:45:
                    96:c3:26:19:8f:19:6f:81:88:2b:dd:33:2d:c8:36:
                    a8:4b:79:3a:3d:f3:88:28:6f:49:5b:be:af:5b:5a:
                    f8:1d:86:e0:7e:22:a1:b0:48:0e:fd:f4:ee:79:56:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.128.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27669

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:7f:4c:d5:3a:b4:31:9f:34:41:68:71:69:84:68:11:7f:
         e4:61:03:d9:91:5c:b6:f2:52:32:3b:cf:de:65:d1:a6:ec:1a:
         35:6f:2e:db:cd:b8:07:e0:5d:44:ca:1c:f8:c0:fd:46:c9:bb:
         2e:5d:8c:cc:ac:ea:8c:a2:52:4c:ba:5e:42:e5:38:ee:c2:93:
         69:e1:99:56:ce:40:46:9b:7b:98:6d:d2:9d:1d:7a:27:a5:7e:
         38:13:f6:56:ce:d2:4a:41:5e:36:e3:bb:2d:53:0c:50:18:8e:
         15:2b:20:8a:44:9e:51:04:80:17:93:03:c6:25:38:33:c2:e1:
         0b:ba:f9:ee:83:6c:8e:d7:92:78:b2:69:71:31:a9:74:91:4d:
         9b:48:d4:4b:3b:81:01:a1:9f:22:d0:20:9b:69:ea:34:62:40:
         44:28:31:88:22:93:5d:83:52:8a:1b:f2:3d:73:dd:fd:12:50:
         23:a6:c4:33:c3:ad:52:19:f8:20:3c:04:41:cf:6e:ab:9a:eb:
         3e:93:b6:7f:95:4a:4f:79:17:11:59:4d:dd:95:9d:8e:97:1d:
         ee:1e:b9:c7:84:8a:64:e5:4d:bd:9a:68:9f:0a:aa:ea:37:81:
         d3:5f:10:36:6c:37:1a:43:e3:f4:aa:68:4b:4d:29:03:76:5a:
         dc:e5:7e:d6
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAOeFODANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzczMloXDTI0MDUyODE1MDAw
MFowMzExMC8GA1UEAxMoNDFkNGM5OTRlYjZhYzU3MmI1Nzc5YjFiZDFhOGI1YjM3
YjIwZTkxYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKl0xf47gaKf
S2YTz3GAEBVWUKXVuXo7MmTTA2A8NrWnWELWFhMwuXcsMbVJflocg3NjqCkpjKGr
iuzES0Avhgevc8ogOO/T6sWqHkzDvXrNFGHLWuj/yMMiN5CiCMhx+sV0KQXJA75e
j5rs0bBcELdCey6mLbu+O+gEpx0Pb++o3rlLycHoSpl8opO7EZlutoSThhEKw+/c
0moIipaC3FrDowY5QUA/HKb5jJeeoKSxQ0k3M1TUcKzf8k/opGsUCr4+7HRMa2/k
80vCEPbXPwBFlsMmGY8Zb4GIK90zLcg2qEt5Oj3ziChvSVu+r1ta+B2G4H4iobBI
Dv307nlW09kCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBRBYQaV7ww8rdiiFjccYKtR
B+HOyzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMWJhYmU1ZS1iYzk2
LTQwMzMtYjUwNy1lNWIxYThjOGJmNmYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTFiYWJlNWUtYmM5Ni00
MDMzLWI1MDctZTViMWE4YzhiZjZmLzQxZDRjOTk0ZWI2YWM1NzJiNTc3OWIxYmQx
YThiNWIzN2IyMGU5MWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMhsgDAZBggrBgEFBQcBCAEB/wQK
MAigBjAEAgJsFTANBgkqhkiG9w0BAQsFAAOCAQEAXop/TNU6tDGfNEFocWmEaBF/
5GED2ZFctvJSMjvP3mXRpuwaNW8u2824B+BdRMoc+MD9Rsm7Ll2MzKzqjKJSTLpe
QuU47sKTaeGZVs5ARpt7mG3SnR16J6V+OBP2Vs7SSkFeNuO7LVMMUBiOFSsgikSe
UQSAF5MDxiU4M8LhC7r57oNsjteSeLJpcTGpdJFNm0jUSzuBAaGfItAgm2nqNGJA
RCgxiCKTXYNSihvyPXPd/RJQI6bEM8OtUhn4IDwEQc9uq5rrPpO2f5VKT3kXEVlN
3ZWdjpcd7h65x4SKZOVNvZponwqq6jeB018QNmw3GkPj9KpoS00pA3Za3OV+1g==
-----END CERTIFICATE-----