Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4bda7faa64e5ef35f3aa2c80700c64e8a302d1ad.cer
File:                     4bda7faa64e5ef35f3aa2c80700c64e8a302d1ad.cer (raw, json)
Hash identifier:          GIXwAx1Q+AXJcYz/7pZ1YcBw3DvKf+aKiUNkjmZaFVM=
Subject key identifier:   B9:B7:A3:D4:74:9F:9E:E3:D6:EB:18:7E:C4:49:95:CC:38:3E:D5:BF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE157F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/92d846c7-a6b1-4865-997d-80d8c6fb89ee/4bda7faa64e5ef35f3aa2c80700c64e8a302d1ad.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/92d846c7-a6b1-4865-997d-80d8c6fb89ee/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:32 +0000
Certificate not after:    Sat 09 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 263197
                          IP: 192.198.8.0/21
                          IP: 2803:ae80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14554495 (0xde157f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:32 2017 GMT
            Not After : Mar  9 06:00:00 2024 GMT
        Subject: CN=4bda7faa64e5ef35f3aa2c80700c64e8a302d1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:38:47:22:8e:d9:42:bd:4d:4c:d6:ec:7b:
                    8d:2c:05:14:2f:bf:88:25:ac:52:d5:78:e2:65:c5:
                    15:e8:1e:30:06:80:ac:f8:75:ef:35:40:a3:fb:11:
                    9d:6c:1c:e8:0e:b1:2a:4a:71:e2:c6:12:53:e8:f9:
                    3c:c7:c4:a5:bc:1e:b0:a3:d5:b7:34:2b:9c:b4:3c:
                    ff:d5:7d:f9:37:7f:4b:ba:a9:72:d0:73:94:c9:f1:
                    0e:c4:01:fb:f3:22:a3:e4:0f:26:76:7c:79:2d:6d:
                    5a:23:74:c4:d7:9b:e8:5e:4e:51:ef:18:89:ff:86:
                    82:ed:24:6c:8f:0b:12:a3:16:ae:a0:b9:24:30:c6:
                    4e:fa:58:77:db:bb:62:b8:06:aa:37:42:79:97:7d:
                    d2:0c:1a:15:e2:53:9f:09:b8:54:5a:2a:7b:24:14:
                    d5:ea:c6:26:38:f4:70:aa:29:43:3e:28:a7:2e:6d:
                    ec:59:f2:80:ca:a4:09:ef:71:2a:01:df:cb:e1:3c:
                    93:40:e3:c7:7a:fb:06:9b:ae:17:e2:ca:e7:3e:33:
                    a5:95:8b:df:92:df:67:a7:a3:d1:04:74:ee:00:78:
                    fe:2c:f8:6b:ec:d0:0c:27:a2:bf:41:06:90:e8:5d:
                    4e:ef:5f:92:cf:b7:52:51:28:93:74:8b:e6:e7:d2:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B7:A3:D4:74:9F:9E:E3:D6:EB:18:7E:C4:49:95:CC:38:3E:D5:BF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/92d846c7-a6b1-4865-997d-80d8c6fb89ee/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/92d846c7-a6b1-4865-997d-80d8c6fb89ee/4bda7faa64e5ef35f3aa2c80700c64e8a302d1ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.198.8.0/21
                IPv6:
                  2803:ae80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263197

    Signature Algorithm: sha256WithRSAEncryption
         bb:3f:de:c0:07:70:14:ab:68:92:b1:94:be:17:c2:56:9e:da:
         4f:7f:a4:0e:7c:3e:5c:bc:65:00:ca:07:53:e2:83:82:91:2d:
         71:d6:51:75:27:98:bd:2d:9e:31:43:0d:f8:d5:67:81:ea:fd:
         c8:f7:de:1e:2b:85:35:a1:13:03:e2:81:b9:10:0f:4d:e7:15:
         09:be:fa:dd:b8:1c:a5:3a:3b:53:90:19:41:ab:e0:38:0d:a7:
         49:e5:8c:74:1a:0c:74:80:34:b1:1a:c9:ba:57:ca:fa:fd:d1:
         c5:6d:0f:56:60:4e:72:5a:dd:a8:fa:51:1c:39:71:d5:6a:3a:
         2a:ab:75:05:f5:a4:74:20:eb:4d:d6:05:ff:c0:8b:1c:ef:d1:
         95:61:39:92:f0:b6:ad:fd:39:57:d1:15:a5:ba:54:8a:97:42:
         74:62:90:af:e9:13:19:66:b1:d6:35:86:c2:f0:1d:4a:0c:b2:
         96:7b:6d:02:23:ae:03:10:5f:49:5f:e6:10:cd:a6:51:db:f4:
         6a:77:d1:f8:69:9d:e3:39:a3:81:2c:9b:50:44:aa:f8:2d:38:
         f2:59:f9:2d:65:e9:3f:f9:64:b0:ee:b0:7f:de:0c:9d:2f:11:
         b5:1e:80:85:ad:c1:1f:6a:c8:56:6c:fa:47:c0:65:63:1d:c1:
         37:fc:09:4d
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAN4VfzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzMloXDTI0MDMwOTA2MDAw
MFowMzExMC8GA1UEAxMoNGJkYTdmYWE2NGU1ZWYzNWYzYWEyYzgwNzAwYzY0ZThh
MzAyZDFhZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKiUOEcijtlC
vU1M1ux7jSwFFC+/iCWsUtV44mXFFegeMAaArPh17zVAo/sRnWwc6A6xKkpx4sYS
U+j5PMfEpbwesKPVtzQrnLQ8/9V9+Td/S7qpctBzlMnxDsQB+/Mio+QPJnZ8eS1t
WiN0xNeb6F5OUe8Yif+Ggu0kbI8LEqMWrqC5JDDGTvpYd9u7YrgGqjdCeZd90gwa
FeJTnwm4VFoqeyQU1erGJjj0cKopQz4opy5t7FnygMqkCe9xKgHfy+E8k0Djx3r7
BpuuF+LK5z4zpZWL35LfZ6ej0QR07gB4/iz4a+zQDCeiv0EGkOhdTu9fks+3UlEo
k3SL5ufS/x0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBS5t6PUdJ+e49brGH7ESZXM
OD7VvzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85MmQ4NDZjNy1hNmIx
LTQ4NjUtOTk3ZC04MGQ4YzZmYjg5ZWUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTJkODQ2YzctYTZiMS00
ODY1LTk5N2QtODBkOGM2ZmI4OWVlLzRiZGE3ZmFhNjRlNWVmMzVmM2FhMmM4MDcw
MGM2NGU4YTMwMmQxYWQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA8DGCDANBAIAAjAHAwUAKAOugDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBB0wDQYJKoZIhvcNAQELBQADggEBALs/
3sAHcBSraJKxlL4Xwlae2k9/pA58Ply8ZQDKB1Pig4KRLXHWUXUnmL0tnjFDDfjV
Z4Hq/cj33h4rhTWhEwPigbkQD03nFQm++t24HKU6O1OQGUGr4DgNp0nljHQaDHSA
NLEaybpXyvr90cVtD1ZgTnJa3aj6URw5cdVqOiqrdQX1pHQg603WBf/Aixzv0ZVh
OZLwtq39OVfRFaW6VIqXQnRikK/pExlmsdY1hsLwHUoMspZ7bQIjrgMQX0lf5hDN
plHb9Gp30fhpneM5o4Esm1BEqvgtOPJZ+S1l6T/5ZLDusH/eDJ0vEbUegIWtwR9q
yFZs+kfAZWMdwTf8CU0=
-----END CERTIFICATE-----