Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
File:                     652b18729db050982b6f745b4c791475c88ba009.cer (raw, json)
Hash identifier:          T6IETRUF6oeUS/IfOtQA2Oi06pmqZNkghTbeKkykjTo=
Subject key identifier:   0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F20A40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/652b18729db050982b6f745b4c791475c88ba009.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:55 +0000
Certificate not after:    Sun 18 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 267857
                          IP: 170.79.88.0/22
                          IP: 2803:84c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15862336 (0xf20a40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:55 2017 GMT
            Not After : Aug 18 05:00:00 2024 GMT
        Subject: CN=652b18729db050982b6f745b4c791475c88ba009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c7:17:2c:5f:dc:74:4a:2d:05:ab:aa:6f:7b:
                    6e:f4:49:67:c6:98:69:09:2d:91:de:98:95:58:79:
                    74:0a:d6:dc:5a:93:c9:a5:0c:1f:f7:9e:55:19:a1:
                    ef:99:04:88:93:ec:f6:70:63:71:ec:e1:46:3a:9a:
                    32:f5:3a:0a:3c:a6:39:53:7c:ff:cc:c1:07:79:66:
                    65:3d:74:64:3e:20:49:a7:bd:76:da:09:0a:f2:ba:
                    1a:e6:5f:15:7b:73:0f:a1:d1:62:57:4e:40:fb:20:
                    e5:9a:ea:08:c5:13:ff:7f:0c:8c:fa:8c:d9:c1:8d:
                    e9:92:67:8d:65:64:35:71:39:c1:b3:3b:8d:7a:d1:
                    14:61:c0:63:70:ec:41:f5:23:c0:5a:22:55:af:cf:
                    92:d7:c9:e4:44:7c:df:81:1d:b7:5d:32:2f:76:d5:
                    e0:60:ca:80:3d:1e:2d:65:b0:05:3f:28:ec:de:f8:
                    28:59:e6:c1:bf:c7:ac:08:d1:1b:01:a2:c0:dc:6a:
                    a5:21:62:6f:49:92:81:ea:9d:d0:6b:ca:6c:b5:b6:
                    8d:a6:10:42:39:6e:fe:4e:b1:8b:14:84:99:68:78:
                    6b:ab:ab:f2:2e:ad:2b:c1:65:1f:e3:21:0c:a2:4f:
                    12:04:c9:8c:a8:13:3f:9a:09:93:64:b0:fd:f6:39:
                    41:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/652b18729db050982b6f745b4c791475c88ba009.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.88.0/22
                IPv6:
                  2803:84c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267857

    Signature Algorithm: sha256WithRSAEncryption
         15:32:c8:e8:39:de:67:84:8a:95:88:f5:64:a2:a1:90:84:73:
         b5:03:28:7c:c7:d2:ae:13:79:0c:74:e4:b7:9f:be:7c:e7:3b:
         5e:bc:6c:50:1b:48:aa:b1:cd:bc:c9:d8:85:32:76:26:42:46:
         ab:f6:a8:49:06:6e:9e:27:16:ae:b2:a0:56:16:ff:3d:cf:ad:
         f9:6c:53:74:7a:e3:8d:e8:3e:fe:43:11:89:74:59:27:c9:13:
         29:64:cf:00:23:4c:c6:43:65:2c:b9:43:15:5e:de:16:5e:57:
         46:b6:90:ed:fd:bd:ec:a6:97:88:ea:c7:66:4e:b8:00:0c:26:
         d7:3d:a4:23:08:b5:20:a0:b3:29:2a:f9:03:5b:0a:83:a6:c6:
         4a:ca:74:80:1d:26:e6:b6:46:81:f5:0c:ec:9d:80:ed:42:8d:
         c7:1a:11:57:89:6d:91:d2:d9:f9:fb:29:e1:9c:37:fd:c0:d7:
         27:4e:b3:82:78:40:09:7d:f8:6b:2b:11:7f:7c:5f:b4:11:19:
         e4:21:f1:bf:d2:f5:22:37:5b:3e:1a:9c:b0:bb:19:7a:25:0b:
         43:6d:05:0d:91:1c:47:e6:8d:df:59:ee:6e:6d:57:58:4b:84:
         72:f1:4c:7a:a7:1a:49:b0:9e:50:cf:fa:52:db:d5:54:10:55:
         87:90:c3:8e
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPIKQDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1NVoXDTI0MDgxODA1MDAw
MFowMzExMC8GA1UEAxMoNjUyYjE4NzI5ZGIwNTA5ODJiNmY3NDViNGM3OTE0NzVj
ODhiYTAwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJzHFyxf3HRK
LQWrqm97bvRJZ8aYaQktkd6YlVh5dArW3FqTyaUMH/eeVRmh75kEiJPs9nBjcezh
RjqaMvU6CjymOVN8/8zBB3lmZT10ZD4gSae9dtoJCvK6GuZfFXtzD6HRYldOQPsg
5ZrqCMUT/38MjPqM2cGN6ZJnjWVkNXE5wbM7jXrRFGHAY3DsQfUjwFoiVa/PktfJ
5ER834Edt10yL3bV4GDKgD0eLWWwBT8o7N74KFnmwb/HrAjRGwGiwNxqpSFib0mS
geqd0GvKbLW2jaYQQjlu/k6xixSEmWh4a6ur8i6tK8FlH+MhDKJPEgTJjKgTP5oJ
k2Sw/fY5QR0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQPJW3Ax8L5ilEEVqETOYgB
uk6dUTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80Yzg5OGVmZi03ODgz
LTRiMjMtOTI0My1jMmQ3MmU2M2I0ZWUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGM4OThlZmYtNzg4My00
YjIzLTkyNDMtYzJkNzJlNjNiNGVlLzY1MmIxODcyOWRiMDUwOTgyYjZmNzQ1YjRj
NzkxNDc1Yzg4YmEwMDkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqpPWDANBAIAAjAHAwUAKAOEwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFlEwDQYJKoZIhvcNAQELBQADggEBABUy
yOg53meEipWI9WSioZCEc7UDKHzH0q4TeQx05LefvnznO168bFAbSKqxzbzJ2IUy
diZCRqv2qEkGbp4nFq6yoFYW/z3PrflsU3R6443oPv5DEYl0WSfJEylkzwAjTMZD
ZSy5QxVe3hZeV0a2kO39veyml4jqx2ZOuAAMJtc9pCMItSCgsykq+QNbCoOmxkrK
dIAdJua2RoH1DOydgO1CjccaEVeJbZHS2fn7KeGcN/3A1ydOs4J4QAl9+GsrEX98
X7QRGeQh8b/S9SI3Wz4anLC7GXolC0NtBQ2RHEfmjd9Z7m5tV1hLhHLxTHqnGkmw
nlDP+lLb1VQQVYeQw44=
-----END CERTIFICATE-----