Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70d0dea43310326c8a8f5fa6afb4d9c816721165.cer
File:                     70d0dea43310326c8a8f5fa6afb4d9c816721165.cer (raw, json)
Hash identifier:          eIfHNQXHHNHAGPVxrYOKv7zjKXH2cTvYTrevjuY+gww=
Subject key identifier:   09:19:A3:85:C9:62:54:B5:78:61:79:3B:EE:56:0B:9B:3A:C2:3B:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC475C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/70d0dea43310326c8a8f5fa6afb4d9c816721165.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:25 +0000
Certificate not after:    Wed 03 Jul 2024 21:08:53 +0000
Subordinate resources:    AS: 265751
                          IP: 190.108.216.0/22
                          IP: 2803:7600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15484764 (0xec475c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:25 2017 GMT
            Not After : Jul  3 21:08:53 2024 GMT
        Subject: CN=70d0dea43310326c8a8f5fa6afb4d9c816721165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:63:f9:5b:ea:f9:54:6c:c7:80:bc:b6:e1:
                    5b:98:de:df:d4:ed:ad:19:08:78:3b:45:1c:22:c2:
                    99:ec:48:48:11:2a:48:94:4e:d6:c2:37:d6:66:41:
                    03:21:54:f5:8e:5b:07:94:e5:8b:d6:86:04:a6:ea:
                    16:2c:36:f8:f5:be:e6:b7:9d:e2:de:b1:c6:51:ff:
                    3f:48:6b:19:dd:00:e3:10:b4:57:6f:56:ee:68:49:
                    00:a8:b4:1a:7a:0d:1f:9e:1d:63:73:28:b5:62:0d:
                    3f:67:40:8c:ba:88:60:0a:23:45:39:16:6b:99:8e:
                    4a:90:3d:d0:5c:b0:42:cb:ab:9f:92:63:90:13:39:
                    27:e7:a9:4a:fe:a1:24:68:72:3a:73:cc:a3:a8:7a:
                    b3:dc:fc:5e:88:75:df:68:6b:0b:71:2b:bc:81:dc:
                    2c:7b:2b:3f:09:ee:89:77:08:85:44:69:55:54:e8:
                    43:2a:33:be:fa:c6:ed:33:e9:ce:8a:8c:61:bb:57:
                    9f:bf:1b:fa:8a:9c:be:10:db:34:26:44:ed:6c:46:
                    c8:ca:59:c5:32:e6:b0:fb:b0:0f:90:12:e7:58:69:
                    c0:a5:d0:90:1b:04:56:d7:0b:45:11:d1:ef:09:d9:
                    9a:dd:2c:20:da:b7:f4:53:2d:4d:ed:0c:d0:a3:ad:
                    dd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:19:A3:85:C9:62:54:B5:78:61:79:3B:EE:56:0B:9B:3A:C2:3B:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/70d0dea43310326c8a8f5fa6afb4d9c816721165.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.216.0/22
                IPv6:
                  2803:7600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265751

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:70:b6:55:3a:cb:ab:6b:cc:42:b4:df:dc:7a:87:26:56:
         17:0e:ba:ec:5f:4e:1b:6c:18:be:5c:a2:b1:30:08:da:e8:b2:
         b4:0f:8a:fd:72:11:06:f8:a1:3a:90:04:cd:6a:eb:3e:c6:9b:
         4f:c2:bd:e5:bf:29:f0:d0:e8:9e:f8:71:6e:f0:0c:df:cf:72:
         9f:c3:17:54:3b:fd:a4:21:48:7b:93:9f:fc:3c:68:99:6e:2a:
         bc:8d:11:17:a5:78:d2:9f:4d:b0:be:13:a4:bc:89:14:88:3b:
         9b:34:8c:4b:84:9d:52:57:27:a6:36:8d:3f:e0:da:3a:30:7e:
         11:a1:b9:ff:b8:fe:06:a4:0e:44:ca:22:44:e6:16:13:3b:23:
         ae:27:65:4a:5f:3f:98:ad:96:84:f9:0a:90:2b:1f:13:8e:a2:
         c5:e8:2f:3a:b7:91:64:47:5f:77:46:85:36:dd:0a:31:28:97:
         99:a0:3a:c3:eb:52:36:89:78:b3:89:22:a9:db:0b:ac:81:85:
         3e:a7:6b:80:38:d0:19:a4:59:8e:a3:3e:ab:9e:2e:57:49:df:
         82:1d:e9:61:1f:47:04:2b:e4:a8:b2:ae:09:3b:e5:c1:9c:9a:
         fa:e9:d6:eb:2c:e4:9d:61:a9:ec:19:51:f3:14:92:df:d7:1d:
         05:bb:b2:5a
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOxHXDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyNVoXDTI0MDcwMzIxMDg1
M1owMzExMC8GA1UEAxMoNzBkMGRlYTQzMzEwMzI2YzhhOGY1ZmE2YWZiNGQ5Yzgx
NjcyMTE2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3KY/lb6vlU
bMeAvLbhW5je39TtrRkIeDtFHCLCmexISBEqSJRO1sI31mZBAyFU9Y5bB5Tli9aG
BKbqFiw2+PW+5red4t6xxlH/P0hrGd0A4xC0V29W7mhJAKi0GnoNH54dY3MotWIN
P2dAjLqIYAojRTkWa5mOSpA90FywQsurn5JjkBM5J+epSv6hJGhyOnPMo6h6s9z8
Xoh132hrC3ErvIHcLHsrPwnuiXcIhURpVVToQyozvvrG7TPpzoqMYbtXn78b+oqc
vhDbNCZE7WxGyMpZxTLmsPuwD5AS51hpwKXQkBsEVtcLRRHR7wnZmt0sINq39FMt
Te0M0KOt3acCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQJGaOFyWJUtXhheTvuVgub
OsI7jTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xOTljMjY0ZC01OTUx
LTRlY2UtOWY5OS1iZDIwNDBmMmU4YzAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTk5YzI2NGQtNTk1MS00
ZWNlLTlmOTktYmQyMDQwZjJlOGMwLzcwZDBkZWE0MzMxMDMyNmM4YThmNWZhNmFm
YjRkOWM4MTY3MjExNjUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr5s2DANBAIAAjAHAwUAKAN2ADAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDhcwDQYJKoZIhvcNAQELBQADggEBAGLY
cLZVOsura8xCtN/ceocmVhcOuuxfThtsGL5corEwCNrosrQPiv1yEQb4oTqQBM1q
6z7Gm0/CveW/KfDQ6J74cW7wDN/Pcp/DF1Q7/aQhSHuTn/w8aJluKryNEReleNKf
TbC+E6S8iRSIO5s0jEuEnVJXJ6Y2jT/g2jowfhGhuf+4/gakDkTKIkTmFhM7I64n
ZUpfP5itloT5CpArHxOOosXoLzq3kWRHX3dGhTbdCjEol5mgOsPrUjaJeLOJIqnb
C6yBhT6na4A40BmkWY6jPqueLldJ34Id6WEfRwQr5Kiyrgk75cGcmvrp1uss5J1h
qewZUfMUkt/XHQW7slo=
-----END CERTIFICATE-----