Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/687a3e9f15d3c290c441b7a80b9b1761c83b0283.cer
File:                     687a3e9f15d3c290c441b7a80b9b1761c83b0283.cer (raw, json)
Hash identifier:          3oxfsgArswKuuJ7At+NszxaOlqCmRrS+x7DIXf1+gCU=
Subject key identifier:   A0:84:26:4A:90:E0:2A:5C:EF:69:2C:57:1A:46:F9:B5:F0:70:A5:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E039EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3791117c-4cb4-4228-a81e-9052636292c3/687a3e9f15d3c290c441b7a80b9b1761c83b0283.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3791117c-4cb4-4228-a81e-9052636292c3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:26 +0000
Certificate not after:    Sun 31 Mar 2024 19:37:35 +0000
Subordinate resources:    AS: 265729
                          IP: 45.7.208.0/22
                          IP: 2803:83c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14694892 (0xe039ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:26 2017 GMT
            Not After : Mar 31 19:37:35 2024 GMT
        Subject: CN=687a3e9f15d3c290c441b7a80b9b1761c83b0283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0b:5b:ec:13:f0:63:00:48:5f:6f:12:85:54:
                    29:aa:c0:65:1a:6f:11:51:1e:1d:2e:41:46:ef:56:
                    9e:15:0e:6a:8d:d5:1f:52:b8:d8:2c:01:26:61:3e:
                    14:3c:c0:a2:ab:f6:4a:cc:38:ce:c3:cd:d2:90:fa:
                    9c:4e:1a:95:59:14:30:ca:bd:05:57:6a:df:bf:84:
                    ab:1f:47:2d:74:53:59:ef:42:43:b8:ce:63:2e:9e:
                    dd:ee:00:d6:ae:72:d7:4e:bd:82:70:96:a9:73:98:
                    8e:0b:20:64:3d:07:ec:26:e6:75:d5:8c:05:b5:cd:
                    1f:38:c7:8a:83:e7:64:2f:fd:8e:e0:aa:f5:0f:67:
                    d8:07:10:34:4f:2f:8a:b5:14:85:76:b2:8e:ab:e7:
                    d8:0f:c2:33:d7:bb:a8:51:04:69:ac:96:92:ed:37:
                    28:85:59:93:ce:ac:ca:29:57:95:84:9f:94:2c:95:
                    ca:0a:24:66:ec:10:ad:d9:d2:36:ff:4a:40:87:88:
                    29:67:b3:69:a0:f0:82:7f:7f:5b:1a:a5:e0:9a:e3:
                    51:f1:93:d3:0d:e5:62:b4:0f:de:24:f8:ae:0c:2a:
                    c7:4c:92:64:3f:44:d9:54:9b:de:a9:b7:ff:0b:10:
                    a0:36:aa:3a:48:1a:82:f6:fe:9e:13:a8:f1:42:6c:
                    1b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:84:26:4A:90:E0:2A:5C:EF:69:2C:57:1A:46:F9:B5:F0:70:A5:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3791117c-4cb4-4228-a81e-9052636292c3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3791117c-4cb4-4228-a81e-9052636292c3/687a3e9f15d3c290c441b7a80b9b1761c83b0283.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.208.0/22
                IPv6:
                  2803:83c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265729

    Signature Algorithm: sha256WithRSAEncryption
         6c:80:72:d9:44:2c:94:13:27:fb:4a:51:e3:5f:be:96:a9:63:
         3b:e5:8c:d7:ab:4e:dd:84:22:f1:54:5d:36:53:f4:97:8b:7c:
         e9:e4:17:cc:0e:fb:2d:b4:cc:45:49:29:f3:b9:fc:0b:16:de:
         bd:6a:69:cb:2d:b8:fd:0e:bb:41:5e:75:5a:51:81:f5:4e:c5:
         f5:9e:bf:87:87:f3:77:74:8d:f8:8d:7f:e2:04:3f:bc:ba:f1:
         aa:aa:c8:a8:7a:1c:fd:8d:6d:ab:5d:0e:32:7c:ae:cd:63:79:
         63:60:c3:5d:53:54:9f:6c:e1:62:b6:47:21:b4:eb:89:00:84:
         23:e7:15:bc:83:9f:bd:af:ac:a9:83:f6:4f:09:50:71:09:41:
         7d:0b:72:e4:6f:40:26:bf:4b:3c:b8:01:16:85:aa:e7:e1:19:
         84:95:03:e3:90:fc:19:0e:bf:af:dc:54:38:fd:f8:31:fe:66:
         75:f5:53:89:3e:1f:66:18:4e:46:70:dd:01:18:b1:6f:30:21:
         f0:82:fe:09:55:3c:cf:26:a8:a7:c5:0b:17:db:7f:a4:fd:af:
         58:66:de:49:d5:c0:55:ba:04:65:07:27:7e:71:59:75:cb:4a:
         e5:3f:49:ca:43:e1:7d:a9:ce:b4:ae:95:7d:71:22:09:20:35:
         8e:0c:b9:f1
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOA57DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyNloXDTI0MDMzMTE5Mzcz
NVowMzExMC8GA1UEAxMoNjg3YTNlOWYxNWQzYzI5MGM0NDFiN2E4MGI5YjE3NjFj
ODNiMDI4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKILW+wT8GMA
SF9vEoVUKarAZRpvEVEeHS5BRu9WnhUOao3VH1K42CwBJmE+FDzAoqv2Ssw4zsPN
0pD6nE4alVkUMMq9BVdq37+Eqx9HLXRTWe9CQ7jOYy6e3e4A1q5y1069gnCWqXOY
jgsgZD0H7CbmddWMBbXNHzjHioPnZC/9juCq9Q9n2AcQNE8virUUhXayjqvn2A/C
M9e7qFEEaayWku03KIVZk86syilXlYSflCyVygokZuwQrdnSNv9KQIeIKWezaaDw
gn9/Wxql4JrjUfGT0w3lYrQP3iT4rgwqx0ySZD9E2VSb3qm3/wsQoDaqOkgagvb+
nhOo8UJsGyMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSghCZKkOAqXO9pLFcaRvm1
8HClvjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zNzkxMTE3Yy00Y2I0
LTQyMjgtYTgxZS05MDUyNjM2MjkyYzMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzc5MTExN2MtNGNiNC00
MjI4LWE4MWUtOTA1MjYzNjI5MmMzLzY4N2EzZTlmMTVkM2MyOTBjNDQxYjdhODBi
OWIxNzYxYzgzYjAyODMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0H0DANBAIAAjAHAwUAKAODwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDgEwDQYJKoZIhvcNAQELBQADggEBAGyA
ctlELJQTJ/tKUeNfvpapYzvljNerTt2EIvFUXTZT9JeLfOnkF8wO+y20zEVJKfO5
/AsW3r1qacstuP0Ou0FedVpRgfVOxfWev4eH83d0jfiNf+IEP7y68aqqyKh6HP2N
batdDjJ8rs1jeWNgw11TVJ9s4WK2RyG064kAhCPnFbyDn72vrKmD9k8JUHEJQX0L
cuRvQCa/Szy4ARaFqufhGYSVA+OQ/BkOv6/cVDj9+DH+ZnX1U4k+H2YYTkZw3QEY
sW8wIfCC/glVPM8mqKfFCxfbf6T9r1hm3knVwFW6BGUHJ35xWXXLSuU/ScpD4X2p
zrSulX1xIgkgNY4MufE=
-----END CERTIFICATE-----