Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b02bf99b87736ae95e822677591902bbb82724.cer
File:                     42b02bf99b87736ae95e822677591902bbb82724.cer (raw, json)
Hash identifier:          NzkVKLGtO4YIr45iBc5OdKwlI6X8lADdf17YmoDeqtA=
Subject key identifier:   AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E44958
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/42b02bf99b87736ae95e822677591902bbb82724.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Sep 2018 01:31:50 +0000
Certificate not after:    Thu 09 May 2024 18:28:57 +0000
Subordinate resources:    AS: 266844
                          IP: 45.238.152.0/22
                          IP: 2803:dca0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14960984 (0xe44958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  5 01:31:50 2018 GMT
            Not After : May  9 18:28:57 2024 GMT
        Subject: CN=42b02bf99b87736ae95e822677591902bbb82724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:5e:c3:38:d5:30:a8:7c:70:6f:ef:c0:19:
                    5b:42:7f:bd:c9:61:9e:4d:c8:e7:18:33:f0:8f:39:
                    cf:11:c5:4a:cc:79:87:72:3d:a3:ef:db:a8:15:14:
                    58:4b:09:c5:7a:1a:fd:9b:8d:43:7b:09:a2:a0:7d:
                    0c:00:c2:86:d6:f0:68:ab:c1:51:6d:c1:26:09:3e:
                    48:f1:b8:31:eb:f7:db:80:23:4b:03:77:ad:cb:fc:
                    42:e9:88:a3:ad:54:f3:6f:b7:25:52:65:39:75:b7:
                    f8:a7:e6:9a:cf:25:1a:dc:38:f4:65:85:75:86:63:
                    31:ba:47:df:c2:15:99:8c:a1:66:d3:49:b8:90:95:
                    2d:5c:e7:6f:7b:67:3b:cb:92:8c:e3:ab:65:0a:37:
                    78:3e:2e:64:8e:e8:5d:a1:4f:c9:42:e9:a4:e7:68:
                    0c:52:88:87:f8:78:41:d7:5d:35:7f:38:43:c7:c2:
                    02:24:84:a9:91:48:9b:d6:eb:e0:d9:c0:3e:de:13:
                    c6:63:c9:15:43:ac:cf:84:d7:66:d1:e2:3b:3c:a4:
                    09:ef:aa:23:1b:08:30:1b:e8:d8:8b:11:4a:2d:68:
                    29:1b:16:3a:4b:6d:6a:b1:b2:69:86:ba:b1:d4:6f:
                    ce:66:b0:89:81:f7:8f:75:ca:f8:44:28:0d:24:42:
                    72:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/42b02bf99b87736ae95e822677591902bbb82724.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.152.0/22
                IPv6:
                  2803:dca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266844

    Signature Algorithm: sha256WithRSAEncryption
         a8:92:bc:14:88:79:76:f8:6e:ff:a3:d7:c8:07:59:56:fa:4f:
         b6:da:dc:e2:53:e4:b2:9a:ae:a2:8e:36:ec:7e:f9:20:51:3c:
         a7:5a:aa:be:b0:7c:dd:76:e9:13:2a:9c:9b:9f:81:2b:eb:49:
         99:cc:bd:b4:63:0c:f9:b6:1d:e4:3f:0c:8a:3b:46:e3:3b:eb:
         4c:bf:9b:d6:60:f4:f0:fb:2e:5d:ad:39:ab:2b:a3:81:5e:40:
         d3:90:cd:f8:53:ca:79:38:6d:66:f5:8e:9b:55:58:bc:73:7d:
         f4:9f:87:8e:09:0b:dc:53:98:ce:bd:72:3b:a5:8b:c3:3f:23:
         c6:dc:51:a3:7d:14:eb:8d:a4:5f:f5:94:b1:fe:1e:9d:8b:81:
         87:37:a0:a5:02:2c:4f:16:fd:d4:08:c8:55:01:d9:6d:43:81:
         a2:23:02:8f:c1:05:b0:19:9e:91:cc:62:7f:8e:bf:af:00:73:
         62:51:11:e2:60:69:f3:11:bd:d3:7e:00:34:52:e2:a5:c8:f4:
         2f:2b:4c:3e:0b:02:c5:7a:d7:88:58:52:9d:42:87:e1:5d:44:
         10:49:49:76:53:b2:0c:58:75:d5:d5:de:d4:49:90:a9:f7:cd:
         bb:6d:fa:ff:42:f4:14:d1:4f:49:16:4b:ec:8e:9b:ae:2b:5a:
         c1:4b:05:b8
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAORJWDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDkwNTAxMzE1MFoXDTI0MDUwOTE4Mjg1
N1owMzExMC8GA1UEAxMoNDJiMDJiZjk5Yjg3NzM2YWU5NWU4MjI2Nzc1OTE5MDJi
YmI4MjcyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJo9XsM41TCo
fHBv78AZW0J/vclhnk3I5xgz8I85zxHFSsx5h3I9o+/bqBUUWEsJxXoa/ZuNQ3sJ
oqB9DADChtbwaKvBUW3BJgk+SPG4Mev324AjSwN3rcv8QumIo61U82+3JVJlOXW3
+Kfmms8lGtw49GWFdYZjMbpH38IVmYyhZtNJuJCVLVznb3tnO8uSjOOrZQo3eD4u
ZI7oXaFPyULppOdoDFKIh/h4QdddNX84Q8fCAiSEqZFIm9br4NnAPt4TxmPJFUOs
z4TXZtHiOzykCe+qIxsIMBvo2IsRSi1oKRsWOkttarGyaYa6sdRvzmawiYH3j3XK
+EQoDSRCctUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSsZ2gws6aFhURtiCdB4wS4
cUhmKDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMzBmZTgyMi0zY2U0
LTRlNzAtYjE3Yy04YmVjNjZjMWJhMjcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTMwZmU4MjItM2NlNC00
ZTcwLWIxN2MtOGJlYzY2YzFiYTI3LzQyYjAyYmY5OWI4NzczNmFlOTVlODIyNjc3
NTkxOTAyYmJiODI3MjQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3umDANBAIAAjAHAwUAKAPcoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEElwwDQYJKoZIhvcNAQELBQADggEBAKiS
vBSIeXb4bv+j18gHWVb6T7ba3OJT5LKarqKONux++SBRPKdaqr6wfN126RMqnJuf
gSvrSZnMvbRjDPm2HeQ/DIo7RuM760y/m9Zg9PD7Ll2tOasro4FeQNOQzfhTynk4
bWb1jptVWLxzffSfh44JC9xTmM69cjuli8M/I8bcUaN9FOuNpF/1lLH+Hp2LgYc3
oKUCLE8W/dQIyFUB2W1DgaIjAo/BBbAZnpHMYn+Ov68Ac2JREeJgafMRvdN+ADRS
4qXI9C8rTD4LAsV614hYUp1Ch+FdRBBJSXZTsgxYddXV3tRJkKn3zbtt+v9C9BTR
T0kWS+yOm64rWsFLBbg=
-----END CERTIFICATE-----