Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5420a10b253118314e8ba9dbb1e6269e86d377d6.cer
File:                     5420a10b253118314e8ba9dbb1e6269e86d377d6.cer (raw, json)
Hash identifier:          sooMiZswe+NLdwFAwMI59+rghvTlSXDE1uXGyt+Fc5A=
Subject key identifier:   72:57:95:28:F4:3F:BB:6C:B8:83:A5:6E:66:75:91:34:13:93:A5:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8B5E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c4b59555-d1fb-4ff5-9ce0-131206a12704/5420a10b253118314e8ba9dbb1e6269e86d377d6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c4b59555-d1fb-4ff5-9ce0-131206a12704/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:49 +0000
Certificate not after:    Wed 05 Jun 2024 19:51:59 +0000
Subordinate resources:    AS: 262167
                          IP: 186.148.208.0/22
                          IP: 2800:990::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15250915 (0xe8b5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:49 2017 GMT
            Not After : Jun  5 19:51:59 2024 GMT
        Subject: CN=5420a10b253118314e8ba9dbb1e6269e86d377d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:8f:0b:0d:20:38:52:7a:07:82:58:f6:2c:
                    b6:93:db:0b:c3:4e:e1:3e:26:b5:23:a4:25:b1:99:
                    ca:c7:72:95:ab:02:bb:63:d8:72:9d:00:6a:39:68:
                    93:ac:c4:6e:a8:bd:c4:12:0d:6a:b3:88:57:11:de:
                    3b:59:1d:cf:a5:79:4c:ef:ce:6f:14:23:58:aa:c3:
                    3d:80:70:68:99:67:c8:5e:09:4f:7a:cb:24:da:f5:
                    be:20:ea:82:4b:57:a3:3e:91:ec:16:0d:f0:d1:45:
                    20:16:55:64:2d:32:ba:26:eb:36:85:d0:d4:de:52:
                    97:ce:9b:b8:37:ab:93:f4:1f:7f:ed:77:08:e1:7c:
                    74:32:6a:ea:0f:87:7e:47:e1:42:bc:6e:db:8b:d9:
                    64:6e:03:2e:bf:68:6a:38:f5:d7:b8:08:a9:cd:c3:
                    19:de:0d:69:db:19:60:fb:09:b7:2e:b9:bb:1f:d2:
                    5b:89:d8:02:54:39:9b:3c:b0:a1:1c:36:9b:0a:46:
                    88:cc:02:5f:95:88:73:df:ac:19:93:4c:22:53:9a:
                    f1:59:3d:d5:4a:35:cc:87:81:a1:b7:24:22:f0:17:
                    21:d8:3e:3f:48:57:7b:7d:19:26:b7:c4:67:01:cb:
                    9f:34:ed:f1:a0:15:b9:56:5a:92:87:4c:de:d7:af:
                    a6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:57:95:28:F4:3F:BB:6C:B8:83:A5:6E:66:75:91:34:13:93:A5:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c4b59555-d1fb-4ff5-9ce0-131206a12704/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c4b59555-d1fb-4ff5-9ce0-131206a12704/5420a10b253118314e8ba9dbb1e6269e86d377d6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.208.0/22
                IPv6:
                  2800:990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262167

    Signature Algorithm: sha256WithRSAEncryption
         8f:94:91:8c:d2:1a:15:2a:46:ce:a1:41:5b:c2:96:f5:f0:8d:
         6a:92:b4:b0:02:ca:da:92:27:7f:5f:5a:bd:29:0c:7f:c0:4a:
         68:0b:d7:0c:1f:07:3a:da:d6:10:ce:c6:ed:bc:f1:3f:48:e8:
         54:73:62:f6:f0:61:f7:92:1a:1a:00:93:3d:06:60:1d:83:2b:
         e6:1a:e5:e8:4d:34:27:ea:7c:f3:63:2e:44:05:0f:8d:d5:ee:
         22:9a:ef:2c:79:d0:0a:0f:88:03:bf:c5:5a:2f:a4:77:60:17:
         f1:47:f7:2c:bb:9a:66:c0:8c:d9:b1:d2:e6:6c:d9:e3:f4:ff:
         79:ef:27:23:19:69:7c:82:52:df:da:5b:fd:c2:fd:c4:f0:2d:
         04:8c:3c:15:4d:5f:d1:1d:4b:6c:88:92:c4:78:2c:02:88:44:
         33:b8:1f:89:e9:d1:64:b4:3a:05:b3:35:52:ab:75:85:7b:cb:
         12:e0:a4:57:c5:84:7e:3e:3e:89:51:5f:f2:90:42:01:e1:53:
         dd:32:5f:30:80:7a:b1:d8:cb:6b:15:5f:49:d8:ca:a6:70:b7:
         a9:1f:58:70:b7:b3:41:0f:2d:a1:fe:eb:fd:76:6b:8d:1c:32:
         21:c5:21:3e:d7:e8:2d:bc:8d:1a:8e:95:19:f6:68:0d:af:bc:
         16:1b:51:6c
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOi14zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0OVoXDTI0MDYwNTE5NTE1
OVowMzExMC8GA1UEAxMoNTQyMGExMGIyNTMxMTgzMTRlOGJhOWRiYjFlNjI2OWU4
NmQzNzdkNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI9GjwsNIDhS
egeCWPYstpPbC8NO4T4mtSOkJbGZysdylasCu2PYcp0Aajlok6zEbqi9xBINarOI
VxHeO1kdz6V5TO/ObxQjWKrDPYBwaJlnyF4JT3rLJNr1viDqgktXoz6R7BYN8NFF
IBZVZC0yuibrNoXQ1N5Sl86buDerk/Qff+13COF8dDJq6g+HfkfhQrxu24vZZG4D
Lr9oajj117gIqc3DGd4NadsZYPsJty65ux/SW4nYAlQ5mzywoRw2mwpGiMwCX5WI
c9+sGZNMIlOa8Vk91Uo1zIeBobckIvAXIdg+P0hXe30ZJrfEZwHLnzTt8aAVuVZa
kodM3tevpk0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRyV5Uo9D+7bLiDpW5mdZE0
E5OluzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jNGI1OTU1NS1kMWZi
LTRmZjUtOWNlMC0xMzEyMDZhMTI3MDQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzRiNTk1NTUtZDFmYi00
ZmY1LTljZTAtMTMxMjA2YTEyNzA0LzU0MjBhMTBiMjUzMTE4MzE0ZThiYTlkYmIx
ZTYyNjllODZkMzc3ZDYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArqU0DANBAIAAjAHAwUAKAAJkDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEABcwDQYJKoZIhvcNAQELBQADggEBAI+U
kYzSGhUqRs6hQVvClvXwjWqStLACytqSJ39fWr0pDH/ASmgL1wwfBzra1hDOxu28
8T9I6FRzYvbwYfeSGhoAkz0GYB2DK+Ya5ehNNCfqfPNjLkQFD43V7iKa7yx50AoP
iAO/xVovpHdgF/FH9yy7mmbAjNmx0uZs2eP0/3nvJyMZaXyCUt/aW/3C/cTwLQSM
PBVNX9EdS2yIksR4LAKIRDO4H4np0WS0OgWzNVKrdYV7yxLgpFfFhH4+PolRX/KQ
QgHhU90yXzCAerHYy2sVX0nYyqZwt6kfWHC3s0EPLaH+6/12a40cMiHFIT7X6C28
jRqOlRn2aA2vvBYbUWw=
-----END CERTIFICATE-----