Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7abec4f849963dc643b8a5f832ceabcc5ba2ac.cer
File:                     4b7abec4f849963dc643b8a5f832ceabcc5ba2ac.cer (raw, json)
Hash identifier:          w31Q1+8Wu7ij9RCB+SxF8fyi3fFfvFGWxEyNGa/FFhU=
Subject key identifier:   5D:D8:34:2B:FF:92:96:38:67:66:D2:36:2B:32:5A:2B:F4:7C:BF:14
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F231A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b957220c-7cec-4f43-92ed-f819af748e0b/4b7abec4f849963dc643b8a5f832ceabcc5ba2ac.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b957220c-7cec-4f43-92ed-f819af748e0b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:44 +0000
Certificate not after:    Sun 18 Aug 2024 16:15:46 +0000
Subordinate resources:    AS: 264794
                          IP: 45.225.42.0/24
                          IP: 2803:44c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15872423 (0xf231a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:44 2017 GMT
            Not After : Aug 18 16:15:46 2024 GMT
        Subject: CN=4b7abec4f849963dc643b8a5f832ceabcc5ba2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0d:31:9e:2b:5f:26:82:5f:c5:0c:8e:57:a9:
                    43:8d:30:88:d5:3b:b3:47:ef:a4:fd:d0:ce:31:3f:
                    70:b4:af:5a:e8:56:84:c2:12:19:c1:c3:b8:9e:26:
                    9c:6e:d5:85:88:94:ec:dd:58:2a:de:95:f0:33:8b:
                    86:4c:fc:af:03:11:33:8f:4b:51:a4:b3:7a:75:f9:
                    d7:1e:92:d1:71:4e:55:53:31:6f:29:ee:b5:11:4b:
                    18:18:57:ef:63:ed:1d:52:9e:f2:e6:0c:7c:55:e1:
                    2a:29:99:e3:49:5d:a8:bd:66:4d:89:46:e4:85:74:
                    39:1d:24:3f:15:7d:9b:29:21:38:56:28:1a:66:c9:
                    28:ac:9b:02:3f:c7:90:ed:59:b6:74:31:06:f0:c3:
                    72:75:b0:e1:ad:ce:86:e5:01:78:bf:51:f3:40:16:
                    01:b2:59:7a:bc:9c:d2:07:b3:21:85:3e:5c:9c:af:
                    7c:b8:8b:b6:c0:57:cc:8b:3c:61:47:6b:6d:c6:2f:
                    e9:b7:3e:7d:87:14:19:80:30:01:1e:69:85:6d:8e:
                    9f:69:ae:d3:3c:cf:13:57:91:59:2e:b9:10:60:e8:
                    4b:05:7a:95:c1:8a:12:d2:58:9a:72:4c:53:0c:4b:
                    40:c7:31:b6:2b:ff:17:d3:e4:21:26:b9:7a:fc:72:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D8:34:2B:FF:92:96:38:67:66:D2:36:2B:32:5A:2B:F4:7C:BF:14
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b957220c-7cec-4f43-92ed-f819af748e0b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b957220c-7cec-4f43-92ed-f819af748e0b/4b7abec4f849963dc643b8a5f832ceabcc5ba2ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.42.0/24
                IPv6:
                  2803:44c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264794

    Signature Algorithm: sha256WithRSAEncryption
         96:e5:5d:fb:f7:fc:9a:48:08:55:71:7d:2a:be:2b:10:f8:f4:
         6a:0b:78:f1:15:c5:74:f0:c8:c0:5f:fe:95:81:4e:7c:fb:22:
         ff:e5:84:98:5e:df:1d:27:a9:21:d7:1b:73:d1:19:05:fc:13:
         c7:a0:06:bb:1a:c3:50:ac:1f:13:6c:f8:f7:19:9d:b9:a5:c9:
         a7:1f:77:52:2d:9c:e0:d4:ce:a7:45:a1:4e:69:52:ae:46:7d:
         0c:bf:14:3f:d8:16:86:3d:c5:c7:fc:e3:43:ec:90:a7:95:08:
         08:f5:7a:d7:51:6b:f8:6a:46:b1:0f:8c:5f:8f:9a:94:14:ef:
         71:75:30:a0:86:85:7e:5e:92:b9:78:2f:78:97:4e:00:f5:f9:
         d9:45:10:e7:60:21:b3:37:a9:33:5a:2c:12:6d:a6:69:ad:d2:
         9d:58:de:3f:3d:42:ea:4a:aa:a5:0e:b5:33:50:f6:36:70:dd:
         af:a1:e1:72:5d:f4:27:1a:80:cf:ad:f6:c0:c1:73:43:6e:27:
         16:5a:e0:c8:2a:99:73:7b:a8:21:17:ac:5f:78:ab:40:bc:3d:
         9e:72:4b:29:5f:15:04:4b:87:af:15:ed:a0:58:74:41:13:64:
         62:96:f4:70:2a:e1:a9:3f:45:1c:45:4f:9c:01:0d:65:39:6b:
         51:3e:3c:09
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPIxpzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0NFoXDTI0MDgxODE2MTU0
NlowMzExMC8GA1UEAxMoNGI3YWJlYzRmODQ5OTYzZGM2NDNiOGE1ZjgzMmNlYWJj
YzViYTJhYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIkNMZ4rXyaC
X8UMjlepQ40wiNU7s0fvpP3QzjE/cLSvWuhWhMISGcHDuJ4mnG7VhYiU7N1YKt6V
8DOLhkz8rwMRM49LUaSzenX51x6S0XFOVVMxbynutRFLGBhX72PtHVKe8uYMfFXh
KimZ40ldqL1mTYlG5IV0OR0kPxV9mykhOFYoGmbJKKybAj/HkO1ZtnQxBvDDcnWw
4a3OhuUBeL9R80AWAbJZeryc0gezIYU+XJyvfLiLtsBXzIs8YUdrbcYv6bc+fYcU
GYAwAR5phW2On2mu0zzPE1eRWS65EGDoSwV6lcGKEtJYmnJMUwxLQMcxtiv/F9Pk
ISa5evxyon8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRd2DQr/5KWOGdm0jYrMlor
9Hy/FDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iOTU3MjIwYy03Y2Vj
LTRmNDMtOTJlZC1mODE5YWY3NDhlMGIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjk1NzIyMGMtN2NlYy00
ZjQzLTkyZWQtZjgxOWFmNzQ4ZTBiLzRiN2FiZWM0Zjg0OTk2M2RjNjQzYjhhNWY4
MzJjZWFiY2M1YmEyYWMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC3hKjANBAIAAjAHAwUAKANEwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEClowDQYJKoZIhvcNAQELBQADggEBAJbl
Xfv3/JpICFVxfSq+KxD49GoLePEVxXTwyMBf/pWBTnz7Iv/lhJhe3x0nqSHXG3PR
GQX8E8egBrsaw1CsHxNs+PcZnbmlyacfd1ItnODUzqdFoU5pUq5GfQy/FD/YFoY9
xcf840PskKeVCAj1etdRa/hqRrEPjF+PmpQU73F1MKCGhX5ekrl4L3iXTgD1+dlF
EOdgIbM3qTNaLBJtpmmt0p1Y3j89QupKqqUOtTNQ9jZw3a+h4XJd9CcagM+t9sDB
c0NuJxZa4MgqmXN7qCEXrF94q0C8PZ5ySylfFQRLh68V7aBYdEETZGKW9HAq4ak/
RRxFT5wBDWU5a1E+PAk=
-----END CERTIFICATE-----