Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4256d043f0685eb4086d27801ca57dd4e1fc8876.cer
File:                     4256d043f0685eb4086d27801ca57dd4e1fc8876.cer (raw, json)
Hash identifier:          XU2phVuPwwC3UOv6kn8RkRJ1MTet3c1p54tm7GIqyaM=
Subject key identifier:   17:B5:19:33:05:4E:93:5C:93:B3:2E:C4:E7:53:D5:8E:BC:CB:AE:C3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E66E85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/48450b10-d61a-4251-a09c-4e42a7baf918/4256d043f0685eb4086d27801ca57dd4e1fc8876.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/48450b10-d61a-4251-a09c-4e42a7baf918/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Nov 2019 18:28:26 +0000
Certificate not after:    Wed 26 Jun 2024 16:57:09 +0000
Subordinate resources:    AS: 264760
                          IP: 168.194.216.0/22
                          IP: 2803:20c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15101573 (0xe66e85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  5 18:28:26 2019 GMT
            Not After : Jun 26 16:57:09 2024 GMT
        Subject: CN=4256d043f0685eb4086d27801ca57dd4e1fc8876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:41:c6:27:ad:d8:88:6b:8f:3c:f0:ec:85:
                    49:1f:36:11:0e:8b:a2:71:d7:7e:12:3c:13:c5:19:
                    33:19:60:f6:5c:17:6a:d2:54:ba:7a:67:cd:02:83:
                    36:3b:e6:6a:f0:41:e0:7a:e1:77:d2:86:1a:73:19:
                    29:36:50:69:37:04:91:b8:08:a6:a5:81:6a:ef:b5:
                    6f:a0:1d:38:43:26:71:bc:87:fc:d6:3e:d3:ef:d9:
                    02:5b:f2:59:ac:8e:b6:4e:51:ea:d7:2a:7b:f0:93:
                    bb:b0:ca:78:e3:f1:61:35:ad:1f:dd:f6:8d:60:e0:
                    d2:01:4e:cd:ac:d5:1f:9f:7c:1f:71:66:df:c9:2c:
                    ed:7d:80:ed:60:26:6f:d1:89:89:67:46:4f:45:4d:
                    79:3f:c8:0a:e9:76:e0:32:cf:e4:ae:a6:ba:68:6f:
                    93:c2:cd:4e:01:1c:ee:fe:0c:05:4e:6d:45:66:58:
                    5e:5d:c9:9f:6c:4d:f9:6f:d4:8f:a0:d9:34:25:06:
                    dd:d6:68:b1:ea:26:eb:c5:60:2c:ca:53:69:8b:ce:
                    8b:2e:89:98:02:4c:da:f9:0c:65:d1:e5:75:e9:13:
                    b3:52:6b:59:bf:e0:7a:15:30:70:51:81:c1:a5:e9:
                    f6:88:a9:c1:4d:ea:e1:b0:98:96:68:cf:40:1c:5a:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B5:19:33:05:4E:93:5C:93:B3:2E:C4:E7:53:D5:8E:BC:CB:AE:C3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/48450b10-d61a-4251-a09c-4e42a7baf918/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/48450b10-d61a-4251-a09c-4e42a7baf918/4256d043f0685eb4086d27801ca57dd4e1fc8876.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.216.0/22
                IPv6:
                  2803:20c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264760

    Signature Algorithm: sha256WithRSAEncryption
         4c:83:c7:0e:c7:20:12:20:52:fd:ac:1f:ed:ce:77:0a:a5:6e:
         31:71:09:f6:ba:9e:ca:4d:89:d5:77:68:75:92:cd:e1:ef:8b:
         47:c8:65:4b:e6:67:ec:a6:0a:1e:ac:cf:5e:e3:57:f9:3d:0c:
         7d:99:6c:e2:97:b8:fd:23:fe:8a:44:45:bc:88:64:a9:d4:64:
         92:b2:d1:11:49:7a:43:cc:03:7a:2f:08:3c:f7:67:66:09:a5:
         7c:ec:34:bb:dd:fe:05:99:7b:c1:f1:fc:5e:bb:93:54:e4:e1:
         22:b6:41:75:42:9c:a5:e8:73:10:51:c9:94:84:22:cd:8f:f0:
         92:e5:92:e8:22:d7:aa:34:99:3b:02:28:af:ec:53:00:ab:dc:
         46:9d:af:b4:35:02:d9:0f:fa:4e:a8:84:7f:16:32:40:0c:f7:
         69:41:2a:f5:f9:fa:c7:0c:4b:b9:49:66:26:cc:21:1b:61:47:
         31:2c:29:d8:b2:ea:34:07:46:b7:67:84:75:96:f9:63:44:5e:
         2b:ca:d0:da:24:db:47:f3:b1:44:c8:09:3f:e4:47:58:2a:6e:
         7f:e2:3a:83:2a:9d:38:51:d5:53:26:29:93:af:d0:f7:75:ce:
         82:98:01:09:01:1c:e6:fa:3a:dd:25:47:aa:72:f0:d5:94:e7:
         8c:25:0c:ff
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOZuhTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MTEwNTE4MjgyNloXDTI0MDYyNjE2NTcw
OVowMzExMC8GA1UEAxMoNDI1NmQwNDNmMDY4NWViNDA4NmQyNzgwMWNhNTdkZDRl
MWZjODg3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKaaQcYnrdiI
a4888OyFSR82EQ6LonHXfhI8E8UZMxlg9lwXatJUunpnzQKDNjvmavBB4Hrhd9KG
GnMZKTZQaTcEkbgIpqWBau+1b6AdOEMmcbyH/NY+0+/ZAlvyWayOtk5R6tcqe/CT
u7DKeOPxYTWtH932jWDg0gFOzazVH598H3Fm38ks7X2A7WAmb9GJiWdGT0VNeT/I
Cul24DLP5K6mumhvk8LNTgEc7v4MBU5tRWZYXl3Jn2xN+W/Uj6DZNCUG3dZoseom
68VgLMpTaYvOiy6JmAJM2vkMZdHldekTs1JrWb/gehUwcFGBwaXp9oipwU3q4bCY
lmjPQBxaA5UCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQXtRkzBU6TXJOzLsTnU9WO
vMuuwzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80ODQ1MGIxMC1kNjFh
LTQyNTEtYTA5Yy00ZTQyYTdiYWY5MTgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDg0NTBiMTAtZDYxYS00
MjUxLWEwOWMtNGU0MmE3YmFmOTE4LzQyNTZkMDQzZjA2ODVlYjQwODZkMjc4MDFj
YTU3ZGQ0ZTFmYzg4NzYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqjC2DANBAIAAjAHAwUAKAMgwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECjgwDQYJKoZIhvcNAQELBQADggEBAEyD
xw7HIBIgUv2sH+3OdwqlbjFxCfa6nspNidV3aHWSzeHvi0fIZUvmZ+ymCh6sz17j
V/k9DH2ZbOKXuP0j/opERbyIZKnUZJKy0RFJekPMA3ovCDz3Z2YJpXzsNLvd/gWZ
e8Hx/F67k1Tk4SK2QXVCnKXocxBRyZSEIs2P8JLlkugi16o0mTsCKK/sUwCr3Ead
r7Q1AtkP+k6ohH8WMkAM92lBKvX5+scMS7lJZibMIRthRzEsKdiy6jQHRrdnhHWW
+WNEXivK0Nok20fzsUTICT/kR1gqbn/iOoMqnThR1VMmKZOv0Pd1zoKYAQkBHOb6
Ot0lR6py8NWU54wlDP8=
-----END CERTIFICATE-----