Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4595a58b3a4feac2e2f273ac67d4559442b976dc.cer
File:                     4595a58b3a4feac2e2f273ac67d4559442b976dc.cer (raw, json)
Hash identifier:          ah6K4nsWT+lm9oK+9hIpBNV/n3tOaVe2J1KcM687DqI=
Subject key identifier:   84:6F:82:BE:FB:A7:6F:BD:51:57:A6:B7:22:EF:57:F5:31:BD:33:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D60697
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/4595a58b3a4feac2e2f273ac67d4559442b976dc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:01 +0000
Certificate not after:    Thu 30 Nov 2023 14:00:00 +0000
Subordinate resources:    AS: 27876
                          IP: 186.5.160.0/20
                          IP: 190.7.192.0/19
                          IP: 2800:f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14026391 (0xd60697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:01 2017 GMT
            Not After : Nov 30 14:00:00 2023 GMT
        Subject: CN=4595a58b3a4feac2e2f273ac67d4559442b976dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d3:19:fe:31:9a:b7:17:c9:f3:68:fd:3e:a3:
                    55:19:10:be:85:c3:1d:61:8c:7e:7b:9a:c1:5c:6f:
                    fb:d8:15:ec:5b:53:e4:a6:e9:c5:b6:d4:85:2b:97:
                    1d:ce:5a:e1:39:c6:c6:48:1c:26:2b:a6:9b:7e:6d:
                    6a:a3:64:08:b4:9f:8c:61:5a:18:2b:70:02:10:57:
                    e2:8e:21:d1:ab:35:95:ce:e6:97:c1:09:8b:74:8b:
                    bb:28:fa:a2:d9:b0:61:fd:73:71:32:68:c5:e5:5b:
                    80:b3:8a:8d:ae:8e:0f:aa:eb:bf:84:b5:96:57:4f:
                    5d:c0:42:4c:aa:94:70:b0:10:4c:db:82:c1:51:00:
                    db:f3:8f:a2:6d:26:88:69:67:28:2e:10:05:3a:f6:
                    14:5e:41:0e:63:07:4d:91:9d:d6:cc:fd:98:ab:62:
                    d9:84:8b:21:78:33:a1:2f:d3:b3:da:a8:62:14:6a:
                    8e:0c:c2:db:85:49:40:ef:29:0b:50:2c:77:55:47:
                    b8:60:e7:85:0e:a4:6d:8a:4b:61:7b:5d:a0:7a:bf:
                    83:62:fa:8f:06:78:8d:89:81:d4:62:db:84:49:e8:
                    77:c9:a8:0e:a2:fa:76:6f:99:3b:c1:de:bf:d8:11:
                    db:06:61:1e:40:fd:bf:bb:10:96:3b:c8:fd:84:d7:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6F:82:BE:FB:A7:6F:BD:51:57:A6:B7:22:EF:57:F5:31:BD:33:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/4595a58b3a4feac2e2f273ac67d4559442b976dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.160.0/20
                  190.7.192.0/19
                IPv6:
                  2800:f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27876

    Signature Algorithm: sha256WithRSAEncryption
         01:12:56:38:fe:35:a2:32:ed:9a:33:9b:b7:65:97:07:b4:b6:
         f1:d2:8f:09:5b:f8:0f:ce:ec:ab:4a:af:ba:95:d8:4f:08:0c:
         db:88:27:b4:f1:77:fa:d0:21:a1:bd:ed:3b:d7:75:66:93:14:
         53:ed:2b:ba:f7:53:24:3e:68:03:49:2e:7f:e3:c7:32:b9:c3:
         d2:0f:86:e0:1f:7d:0e:76:45:e7:d5:e5:77:a0:1f:af:63:d4:
         f1:40:8d:d5:60:cc:27:ee:17:a0:8d:5c:f2:52:1c:50:fe:0c:
         6b:53:6e:3a:2e:07:13:57:17:b4:38:65:08:0d:3f:9a:cf:22:
         a3:92:31:6d:4b:49:f8:05:33:9c:1e:2d:85:4e:3e:2f:11:c5:
         de:07:90:ed:88:23:dc:19:e4:dc:59:95:f1:0b:5c:0e:d4:fe:
         26:69:98:53:a2:5b:a5:ab:b0:0a:23:90:ce:04:42:b5:6b:65:
         cb:ee:a6:1f:27:e0:87:d7:3c:51:18:ad:e0:56:e7:95:5f:7f:
         78:12:d0:e3:de:40:e7:2a:29:ca:5b:c0:ca:b1:5d:e4:7e:19:
         b1:35:21:30:19:e4:bf:a5:3f:5f:45:ce:4b:05:d9:23:05:91:
         6d:10:66:e7:a3:a8:8c:ec:ba:7c:69:88:f3:b1:ff:9f:c8:5d:
         b2:e5:f9:03
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIEANYGlzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcwMVoXDTIzMTEzMDE0MDAw
MFowMzExMC8GA1UEAxMoNDU5NWE1OGIzYTRmZWFjMmUyZjI3M2FjNjdkNDU1OTQ0
MmI5NzZkYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJTTGf4xmrcX
yfNo/T6jVRkQvoXDHWGMfnuawVxv+9gV7FtT5KbpxbbUhSuXHc5a4TnGxkgcJium
m35taqNkCLSfjGFaGCtwAhBX4o4h0as1lc7ml8EJi3SLuyj6otmwYf1zcTJoxeVb
gLOKja6OD6rrv4S1lldPXcBCTKqUcLAQTNuCwVEA2/OPom0miGlnKC4QBTr2FF5B
DmMHTZGd1sz9mKti2YSLIXgzoS/Ts9qoYhRqjgzC24VJQO8pC1Asd1VHuGDnhQ6k
bYpLYXtdoHq/g2L6jwZ4jYmB1GLbhEnod8moDqL6dm+ZO8Hev9gR2wZhHkD9v7sQ
ljvI/YTXYNMCAwEAAaOCAw4wggMKMB0GA1UdDgQWBBSEb4K++6dvvVFXprci71f1
Mb0z1zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81NzY0Y2Y5MS0xZjE5
LTQ3NDYtYThjZC05MWVkNzUyNjk4ZjQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTc2NGNmOTEtMWYxOS00
NzQ2LWE4Y2QtOTFlZDc1MjY5OGY0LzQ1OTVhNThiM2E0ZmVhYzJlMmYyNzNhYzY3
ZDQ1NTk0NDJiOTc2ZGMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBLoFoAMEBb4HwDANBAIAAjAHAwUA
KAAA8DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJs5DANBgkqhkiG9w0BAQsFAAOC
AQEAARJWOP41ojLtmjObt2WXB7S28dKPCVv4D87sq0qvupXYTwgM24gntPF3+tAh
ob3tO9d1ZpMUU+0ruvdTJD5oA0kuf+PHMrnD0g+G4B99DnZF59Xld6Afr2PU8UCN
1WDMJ+4XoI1c8lIcUP4Ma1NuOi4HE1cXtDhlCA0/ms8io5IxbUtJ+AUznB4thU4+
LxHF3geQ7Ygj3Bnk3FmV8QtcDtT+JmmYU6JbpauwCiOQzgRCtWtly+6mHyfgh9c8
URit4FbnlV9/eBLQ495A5yopylvAyrFd5H4ZsTUhMBnkv6U/X0XOSwXZIwWRbRBm
56OojOy6fGmI87H/n8hdsuX5Aw==
-----END CERTIFICATE-----