Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d80bd01a3fcff2784554e9a83a57d7605b80c80.cer
File:                     4d80bd01a3fcff2784554e9a83a57d7605b80c80.cer (raw, json)
Hash identifier:          lBNr0upzH1as5o8lg7zsU+Q+U4j31eF1WGqDHnVZ/WY=
Subject key identifier:   F4:0D:4A:76:42:43:AA:67:A6:86:A5:DB:A6:9A:C6:B1:AE:38:86:8C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01104F66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7068bdd3-5430-4dcc-bcfa-89e8e9fe2b38/4d80bd01a3fcff2784554e9a83a57d7605b80c80.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7068bdd3-5430-4dcc-bcfa-89e8e9fe2b38/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 31 Aug 2018 15:51:57 +0000
Certificate not after:    Wed 25 Jun 2025 04:05:01 +0000
Subordinate resources:    AS: 18592
                          AS: 28569
                          AS: 262924
                          IP: 187.251.32.0 -- 187.251.95.255
                          IP: 200.23.60.0/24
                          IP: 201.139.176.0/21
                          IP: 2001:1228::/32
                          IP: 2001:122c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17846118 (0x1104f66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 31 15:51:57 2018 GMT
            Not After : Jun 25 04:05:01 2025 GMT
        Subject: CN=4d80bd01a3fcff2784554e9a83a57d7605b80c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:c0:3c:3b:d8:c0:38:80:47:20:af:6b:6f:
                    4e:1a:64:a5:ed:a9:28:ff:c8:32:69:75:33:53:e0:
                    ed:59:d2:cc:72:18:c4:f0:99:bd:1d:9d:6b:de:60:
                    07:dd:4c:33:ff:fd:fb:8d:c6:69:a7:ba:e5:0f:40:
                    50:35:c0:d4:0d:35:a8:4c:1f:2b:68:29:e3:ad:be:
                    2e:11:9b:24:fc:28:de:8b:15:5f:48:87:07:bc:92:
                    78:00:94:7b:b7:e3:79:31:c0:8b:88:92:97:2b:09:
                    23:a7:61:fb:13:71:ca:23:94:e4:0a:14:a3:d3:93:
                    fc:da:23:71:fb:f4:56:7d:b8:77:db:cd:a5:0e:e0:
                    36:4e:2b:ca:d7:a5:95:c4:de:27:0e:ba:b5:98:5d:
                    02:9a:33:ae:84:90:88:0d:8f:23:e0:e5:b2:24:9d:
                    36:90:9f:a2:26:08:d6:ea:9e:ec:86:57:17:32:51:
                    1e:d8:d8:0c:53:de:fa:6f:6b:0f:f7:39:e4:44:67:
                    05:b2:e1:39:fd:c7:5f:e9:43:ac:76:88:a7:7c:70:
                    e2:f7:e9:8c:12:a0:a0:fd:b8:9f:fc:13:38:eb:58:
                    82:6e:70:a8:0c:f5:fe:9c:ae:3c:e0:a9:87:65:e8:
                    b2:d8:a8:98:71:2f:d5:c4:ad:69:ee:a2:6a:74:78:
                    09:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0D:4A:76:42:43:AA:67:A6:86:A5:DB:A6:9A:C6:B1:AE:38:86:8C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7068bdd3-5430-4dcc-bcfa-89e8e9fe2b38/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7068bdd3-5430-4dcc-bcfa-89e8e9fe2b38/4d80bd01a3fcff2784554e9a83a57d7605b80c80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.32.0-187.251.95.255
                  200.23.60.0/24
                  201.139.176.0/21
                IPv6:
                  2001:1228::/32
                  2001:122c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18592
                  28569
                  262924

    Signature Algorithm: sha256WithRSAEncryption
         c4:0b:69:db:db:3a:1b:f3:fb:39:69:61:34:ec:5c:02:41:60:
         c1:8b:bc:4d:12:79:75:63:5e:b8:cb:65:a9:86:4a:16:87:09:
         d1:ba:a3:ee:35:6f:2f:be:25:7b:1c:f7:49:66:44:9f:06:0a:
         52:cc:f3:69:db:d7:8f:5d:30:a8:21:e3:f5:2b:61:a5:d4:84:
         05:9a:8a:ed:5b:c2:db:3e:61:e3:d5:0d:cf:40:c4:fc:3f:52:
         a1:2b:e6:71:d8:c8:4d:00:94:62:4b:77:c8:fe:36:60:59:77:
         63:2c:ae:c1:ca:a5:fb:e0:d1:ca:29:71:9c:5e:e4:2c:a7:93:
         b8:da:25:68:3f:14:85:33:5b:85:f6:75:1d:09:bf:1f:81:31:
         9c:b6:40:25:9b:eb:72:fe:bb:30:cd:15:51:85:bd:18:7a:3d:
         cd:99:f6:59:12:27:1d:3c:18:f5:3b:bd:7d:f1:80:f1:86:0e:
         47:f4:fb:6c:33:8c:cb:4b:4e:ab:01:c9:01:b7:5e:29:a0:bc:
         d1:a1:9d:a1:1f:1a:38:a6:f8:94:51:10:cd:f8:2c:af:01:91:
         8c:41:86:c7:27:11:e2:f7:60:5c:90:e2:63:45:77:9e:49:5a:
         a0:23:e8:83:56:c8:99:c4:7b:c8:c1:18:dc:0d:9e:c5:1a:7c:
         bb:85:98:90
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgIEARBPZjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDgzMTE1NTE1N1oXDTI1MDYyNTA0MDUw
MVowMzExMC8GA1UEAxMoNGQ4MGJkMDFhM2ZjZmYyNzg0NTU0ZTlhODNhNTdkNzYw
NWI4MGM4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJxZwDw72MA4
gEcgr2tvThpkpe2pKP/IMml1M1Pg7VnSzHIYxPCZvR2da95gB91MM//9+43Gaae6
5Q9AUDXA1A01qEwfK2gp462+LhGbJPwo3osVX0iHB7ySeACUe7fjeTHAi4iSlysJ
I6dh+xNxyiOU5AoUo9OT/Nojcfv0Vn24d9vNpQ7gNk4rytellcTeJw66tZhdApoz
roSQiA2PI+DlsiSdNpCfoiYI1uqe7IZXFzJRHtjYDFPe+m9rD/c55ERnBbLhOf3H
X+lDrHaIp3xw4vfpjBKgoP24n/wTOOtYgm5wqAz1/pyuPOCph2XostiomHEv1cSt
ae6ianR4CZECAwEAAaOCAywwggMoMB0GA1UdDgQWBBT0DUp2QkOqZ6aGpdummsax
rjiGjDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83MDY4YmRkMy01NDMw
LTRkY2MtYmNmYS04OWU4ZTlmZTJiMzgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzA2OGJkZDMtNTQzMC00
ZGNjLWJjZmEtODllOGU5ZmUyYjM4LzRkODBiZDAxYTNmY2ZmMjc4NDU1NGU5YTgz
YTU3ZDc2MDViODBjODAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwIAQCAAEwGjAMAwQFu/sgAwQFu/tAAwQAyBc8AwQD
yYuwMBQEAgACMA4DBQAgARIoAwUAIAESLDAiBggrBgEFBQcBCAEB/wQTMBGgDzAN
AgJIoAICb5kCAwQDDDANBgkqhkiG9w0BAQsFAAOCAQEAxAtp29s6G/P7OWlhNOxc
AkFgwYu8TRJ5dWNeuMtlqYZKFocJ0bqj7jVvL74lexz3SWZEnwYKUszzadvXj10w
qCHj9SthpdSEBZqK7VvC2z5h49UNz0DE/D9SoSvmcdjITQCUYkt3yP42YFl3Yyyu
wcql++DRyilxnF7kLKeTuNolaD8UhTNbhfZ1HQm/H4ExnLZAJZvrcv67MM0VUYW9
GHo9zZn2WRInHTwY9Tu9ffGA8YYOR/T7bDOMy0tOqwHJAbdeKaC80aGdoR8aOKb4
lFEQzfgsrwGRjEGGxycR4vdgXJDiY0V3nklaoCPog1bImcR7yMEY3A2exRp8u4WY
kA==
-----END CERTIFICATE-----