Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer
File:                     520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer (raw, json)
Hash identifier:          u8fPElxnRNjso50gHZQEu60PFWZt8/UjQh8usXPw6GE=
Subject key identifier:   85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E95EAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 03 Aug 2018 16:27:46 +0000
Certificate not after:    Mon 10 Jun 2024 22:10:47 +0000
Subordinate resources:    AS: 263817
                          IP: 138.185.28.0/22
                          IP: 2803:a40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15294122 (0xe95eaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  3 16:27:46 2018 GMT
            Not After : Jun 10 22:10:47 2024 GMT
        Subject: CN=520a0d5e45ba98b3623fd2e4c2f44d192076b7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a2:cd:74:4a:9a:d8:25:dd:35:33:f0:4e:9f:
                    44:c3:d6:c9:11:51:70:f4:48:34:ce:ae:5a:75:73:
                    39:ca:8d:d9:d3:4e:89:02:e8:88:3b:49:81:b6:6b:
                    ec:d2:42:18:13:5f:8b:50:06:b7:2b:63:17:11:8b:
                    e0:d0:d6:e6:fe:3e:85:fb:2c:3a:ed:65:82:98:09:
                    10:0b:2a:95:14:b6:4e:70:65:3c:39:18:61:13:bc:
                    e8:06:b6:45:c3:0c:5f:d6:1b:56:34:f3:1a:e7:b1:
                    0c:b5:0f:66:6a:b1:c1:d4:5b:ef:1f:0f:ee:c1:f6:
                    3f:eb:f7:93:8b:77:b5:a4:dc:96:38:e9:a5:f0:ba:
                    c8:a2:c7:17:52:0e:0c:b1:e1:a1:47:57:60:3b:92:
                    44:77:94:b9:23:5f:2b:16:be:62:6e:46:be:78:82:
                    bb:9b:c6:68:25:4e:e4:93:41:a9:d5:fc:e8:9e:e5:
                    9b:61:c8:5b:97:fd:3f:aa:df:aa:51:c0:4f:28:e7:
                    b9:c4:e5:60:02:84:57:7b:38:85:77:20:cd:ec:1d:
                    2d:8d:6a:7c:0f:0a:8a:94:ae:09:fa:2f:6b:c8:6c:
                    9f:12:5d:88:a3:52:7d:e4:48:41:46:31:73:5b:33:
                    d1:04:96:e9:46:ee:7b:5e:58:a5:e2:6d:da:b8:ef:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.28.0/22
                IPv6:
                  2803:a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263817

    Signature Algorithm: sha256WithRSAEncryption
         30:47:d2:7e:3d:af:16:33:01:ac:92:93:1f:70:b6:38:2b:92:
         d5:d8:19:98:bb:09:9c:04:bf:ec:24:90:6b:88:8f:d8:e5:2c:
         5b:bf:94:cb:b7:c6:f4:da:a7:d8:95:49:46:54:95:6f:24:33:
         66:07:d1:2c:14:16:f0:86:9a:3c:24:54:a8:b4:25:b3:ca:55:
         6e:7c:8b:0c:a0:2b:35:d2:b6:86:52:c1:ff:9c:1c:69:14:27:
         b0:38:3d:95:c5:96:8a:38:47:4c:fa:c3:e0:b8:21:16:02:84:
         1f:c5:64:c9:0c:4e:03:9d:1b:33:ea:3a:b6:71:6a:1d:3b:37:
         0a:d5:68:fe:54:9c:37:fa:db:f7:7c:da:92:b9:45:a6:9f:cf:
         55:ea:4a:e6:3b:99:ba:1c:65:8b:2e:18:86:e3:68:0d:7a:f1:
         76:20:3d:2e:f1:e4:23:db:dc:1e:aa:3b:da:04:69:c4:9c:00:
         f7:38:99:5e:1f:c6:c6:68:9c:37:f3:a2:c5:91:2d:f5:e9:0f:
         d0:06:65:32:db:fe:4e:61:dc:de:b4:dc:fd:a9:92:12:f0:37:
         7a:e2:a7:03:4d:5e:e4:b3:e2:b6:09:4e:f4:ed:64:3f:f1:e0:
         d4:4b:d9:69:3e:bf:36:75:09:74:89:85:9e:49:48:4f:9d:86:
         19:b2:2b:2b
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOleqjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDgwMzE2Mjc0NloXDTI0MDYxMDIyMTA0
N1owMzExMC8GA1UEAxMoNTIwYTBkNWU0NWJhOThiMzYyM2ZkMmU0YzJmNDRkMTky
MDc2YjdmODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOSizXRKmtgl
3TUz8E6fRMPWyRFRcPRINM6uWnVzOcqN2dNOiQLoiDtJgbZr7NJCGBNfi1AGtytj
FxGL4NDW5v4+hfssOu1lgpgJEAsqlRS2TnBlPDkYYRO86Aa2RcMMX9YbVjTzGuex
DLUPZmqxwdRb7x8P7sH2P+v3k4t3taTcljjppfC6yKLHF1IODLHhoUdXYDuSRHeU
uSNfKxa+Ym5GvniCu5vGaCVO5JNBqdX86J7lm2HIW5f9P6rfqlHATyjnucTlYAKE
V3s4hXcgzewdLY1qfA8KipSuCfova8hsnxJdiKNSfeRIQUYxc1sz0QSW6Ubue15Y
peJt2rjv7DECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSF9ZGXctf9QertgJEwPOWS
xsrnbTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jOWNkYmQ2My04ZjAx
LTQ0OGItOGMxZS1mMmU5NGUxYzllN2IvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzljZGJkNjMtOGYwMS00
NDhiLThjMWUtZjJlOTRlMWM5ZTdiLzUyMGEwZDVlNDViYTk4YjM2MjNmZDJlNGMy
ZjQ0ZDE5MjA3NmI3ZjgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoq5HDANBAIAAjAHAwUAKAMKQDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBokwDQYJKoZIhvcNAQELBQADggEBADBH
0n49rxYzAaySkx9wtjgrktXYGZi7CZwEv+wkkGuIj9jlLFu/lMu3xvTap9iVSUZU
lW8kM2YH0SwUFvCGmjwkVKi0JbPKVW58iwygKzXStoZSwf+cHGkUJ7A4PZXFloo4
R0z6w+C4IRYChB/FZMkMTgOdGzPqOrZxah07NwrVaP5UnDf62/d82pK5Raafz1Xq
SuY7mbocZYsuGIbjaA168XYgPS7x5CPb3B6qO9oEacScAPc4mV4fxsZonDfzosWR
LfXpD9AGZTLb/k5h3N603P2pkhLwN3ripwNNXuSz4rYJTvTtZD/x4NRL2Wk+vzZ1
CXSJhZ5JSE+dhhmyKys=
-----END CERTIFICATE-----