Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52cabd7c82ad25b1d422313740868842924c1649.cer
File:                     52cabd7c82ad25b1d422313740868842924c1649.cer (raw, json)
Hash identifier:          Rtgy0eoPnsn2zRLVMicFk0bVu9nu4azLluAj40h8rfc=
Subject key identifier:   8C:1A:92:BF:B3:DB:DD:04:44:92:92:44:4F:58:5F:51:D7:5E:2E:4B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E61A86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/95ba07cf-b046-4915-838e-136e207ba897/52cabd7c82ad25b1d422313740868842924c1649.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/95ba07cf-b046-4915-838e-136e207ba897/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 Aug 2018 19:53:58 +0000
Certificate not after:    Sun 19 May 2024 21:42:15 +0000
Subordinate resources:    AS: 266857
                          IP: 45.239.208.0/22
                          IP: 2803:d2a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15080070 (0xe61a86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 23 19:53:58 2018 GMT
            Not After : May 19 21:42:15 2024 GMT
        Subject: CN=52cabd7c82ad25b1d422313740868842924c1649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:26:29:c8:c2:da:16:99:d1:dd:57:ed:0d:
                    8f:39:12:71:8f:0c:24:a8:fc:25:9d:ea:a5:6a:a4:
                    ab:4a:a2:50:9b:23:e7:a6:0b:3b:79:64:32:ce:e2:
                    cb:3a:81:7b:11:40:2c:c7:b7:61:36:a2:52:2e:72:
                    a8:54:5b:7a:59:55:5f:1a:e4:19:9f:51:99:41:c4:
                    45:00:46:c2:91:54:92:92:49:6e:a4:9f:6d:8d:94:
                    cf:3c:49:6b:c6:dd:5d:65:f1:ae:00:a1:58:10:09:
                    c0:3d:24:25:30:19:9f:22:aa:95:0d:4b:df:fc:0e:
                    58:9b:81:86:8e:57:bb:e4:62:ce:da:04:17:72:9d:
                    82:0f:a9:08:f1:2d:a7:b9:fd:ae:93:e1:2c:d7:2c:
                    de:74:b8:e5:c8:f5:88:0f:ab:2d:0b:74:9a:9b:fc:
                    22:9b:74:1e:0a:b1:bc:49:fa:75:1a:01:31:4f:07:
                    55:d2:ce:59:df:45:dc:85:19:0a:53:e5:d8:25:73:
                    a4:38:1d:a4:d4:9e:6a:97:cb:2d:7a:6c:7c:c5:c0:
                    13:da:c4:43:70:70:06:5d:13:dd:32:8f:3a:10:e8:
                    15:01:a1:81:61:94:c2:ac:f2:30:2a:e5:bc:80:e2:
                    fd:f4:51:03:d4:37:30:2b:d5:01:f9:37:24:b0:3c:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1A:92:BF:B3:DB:DD:04:44:92:92:44:4F:58:5F:51:D7:5E:2E:4B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/95ba07cf-b046-4915-838e-136e207ba897/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/95ba07cf-b046-4915-838e-136e207ba897/52cabd7c82ad25b1d422313740868842924c1649.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.208.0/22
                IPv6:
                  2803:d2a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266857

    Signature Algorithm: sha256WithRSAEncryption
         94:6d:19:16:67:04:ca:1e:7a:d7:3c:96:6d:de:4b:84:a1:dd:
         ac:2c:cc:1d:fa:27:2c:6c:01:b4:e5:69:1f:33:e6:46:fc:6b:
         83:f9:00:98:e0:fe:ca:67:1d:66:25:55:9d:75:71:c3:8c:42:
         f8:92:b5:40:bd:1d:0b:28:9f:a9:40:e0:d8:0e:f4:bd:d3:15:
         d9:b5:69:2e:2e:f1:a0:3a:23:23:b1:76:34:c8:d1:89:22:47:
         4b:a1:58:b2:d8:a8:3d:2f:a0:c9:db:62:f8:fa:86:fc:ad:ce:
         a9:10:10:01:6f:42:74:5b:12:6b:37:2a:35:72:3d:7f:b1:a9:
         36:6b:84:25:2e:1b:f9:f3:7a:f5:94:1c:49:cf:67:69:fc:c5:
         bc:08:27:96:71:d9:cb:97:16:56:52:9f:65:8d:57:ea:53:e1:
         f8:e6:8d:e0:63:e2:81:d6:f8:3f:5c:f5:40:f5:b5:48:7f:25:
         0a:0b:07:40:d8:e8:0d:0e:8e:ca:6e:4b:57:76:7c:2c:b2:69:
         6d:4c:f8:14:6b:37:4d:1a:68:09:32:7a:cc:55:74:9d:95:b1:
         25:4e:bb:3f:80:2b:ee:69:b4:2f:fe:9c:0b:04:85:4c:5e:b4:
         86:74:41:fa:5d:7e:b7:d3:22:8c:d1:06:c3:bb:89:ad:57:8b:
         ee:3c:80:3b
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOYahjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDgyMzE5NTM1OFoXDTI0MDUxOTIxNDIx
NVowMzExMC8GA1UEAxMoNTJjYWJkN2M4MmFkMjViMWQ0MjIzMTM3NDA4Njg4NDI5
MjRjMTY0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcmJinIwtoW
mdHdV+0NjzkScY8MJKj8JZ3qpWqkq0qiUJsj56YLO3lkMs7iyzqBexFALMe3YTai
Ui5yqFRbellVXxrkGZ9RmUHERQBGwpFUkpJJbqSfbY2UzzxJa8bdXWXxrgChWBAJ
wD0kJTAZnyKqlQ1L3/wOWJuBho5Xu+RiztoEF3Kdgg+pCPEtp7n9rpPhLNcs3nS4
5cj1iA+rLQt0mpv8Ipt0HgqxvEn6dRoBMU8HVdLOWd9F3IUZClPl2CVzpDgdpNSe
apfLLXpsfMXAE9rEQ3BwBl0T3TKPOhDoFQGhgWGUwqzyMCrlvIDi/fRRA9Q3MCvV
Afk3JLA8/RUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSMGpK/s9vdBESSkkRPWF9R
114uSzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85NWJhMDdjZi1iMDQ2
LTQ5MTUtODM4ZS0xMzZlMjA3YmE4OTcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTViYTA3Y2YtYjA0Ni00
OTE1LTgzOGUtMTM2ZTIwN2JhODk3LzUyY2FiZDdjODJhZDI1YjFkNDIyMzEzNzQw
ODY4ODQyOTI0YzE2NDkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3v0DANBAIAAjAHAwUAKAPSoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEmkwDQYJKoZIhvcNAQELBQADggEBAJRt
GRZnBMoeetc8lm3eS4Sh3awszB36JyxsAbTlaR8z5kb8a4P5AJjg/spnHWYlVZ11
ccOMQviStUC9HQson6lA4NgO9L3TFdm1aS4u8aA6IyOxdjTI0YkiR0uhWLLYqD0v
oMnbYvj6hvytzqkQEAFvQnRbEms3KjVyPX+xqTZrhCUuG/nzevWUHEnPZ2n8xbwI
J5Zx2cuXFlZSn2WNV+pT4fjmjeBj4oHW+D9c9UD1tUh/JQoLB0DY6A0OjspuS1d2
fCyyaW1M+BRrN00aaAkyesxVdJ2VsSVOuz+AK+5ptC/+nAsEhUxetIZ0QfpdfrfT
IozRBsO7ia1Xi+48gDs=
-----END CERTIFICATE-----