Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/771bc2fa04a8feb93b0a9debf99217cf0c780c34.cer
File:                     771bc2fa04a8feb93b0a9debf99217cf0c780c34.cer (raw, json)
Hash identifier:          JLMWJqj4V590sRO6kKUiiZ9heLr+bSnXHmuTIX5kiLc=
Subject key identifier:   A2:35:E8:9C:1D:A9:3A:80:68:72:25:10:A5:4B:08:F9:1C:EA:49:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE26E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a24300c5-dceb-4406-9282-9630ce7a83a1/771bc2fa04a8feb93b0a9debf99217cf0c780c34.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a24300c5-dceb-4406-9282-9630ce7a83a1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 02 Jul 2018 15:13:12 +0000
Certificate not after:    Sat 09 Mar 2024 19:10:34 +0000
Subordinate resources:    AS: 266806
                          IP: 45.236.100.0/22
                          IP: 2803:b0a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14558948 (0xde26e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  2 15:13:12 2018 GMT
            Not After : Mar  9 19:10:34 2024 GMT
        Subject: CN=771bc2fa04a8feb93b0a9debf99217cf0c780c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1c:3e:d2:9d:e8:98:3f:b9:90:7f:e5:1b:55:
                    84:53:52:e0:19:7a:cc:8f:cd:e8:04:8e:5b:13:6d:
                    4c:75:f4:36:22:55:13:60:a2:6a:05:cf:b8:dd:f1:
                    55:f1:76:7d:b2:77:f4:15:e8:2f:cd:54:2d:6a:fa:
                    70:14:30:e7:32:99:fe:da:a2:84:3c:db:33:fe:7f:
                    2e:16:42:d1:22:19:12:2e:a3:df:6e:ab:92:7f:8d:
                    55:fc:5d:ac:08:df:84:53:e9:c9:56:41:7c:c5:e3:
                    dd:c5:b1:ec:e6:ec:7c:78:66:bc:c3:75:cb:76:fc:
                    cb:1e:80:f9:6c:dd:3b:7f:33:97:29:33:d4:d8:f9:
                    78:fa:41:63:fd:ed:a6:01:5e:8c:eb:c2:4d:40:79:
                    d4:95:a4:2d:41:3f:04:08:3c:6b:07:cc:4e:2d:7f:
                    94:8e:56:d6:5e:8f:c9:36:dd:0b:0f:3c:9e:6d:6d:
                    80:ab:b8:45:c0:28:67:af:42:dc:b1:bf:9f:e0:30:
                    79:0a:bc:fe:96:3f:5b:31:7e:ea:e2:ea:c0:69:98:
                    91:89:5d:da:ea:37:84:70:44:05:76:0c:b6:bd:0a:
                    92:d1:99:4a:81:93:a0:1c:e4:9b:7b:61:6a:6b:69:
                    e8:81:b4:b3:3d:41:11:5e:4a:92:ea:a8:c0:c5:c8:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:35:E8:9C:1D:A9:3A:80:68:72:25:10:A5:4B:08:F9:1C:EA:49:29
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a24300c5-dceb-4406-9282-9630ce7a83a1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a24300c5-dceb-4406-9282-9630ce7a83a1/771bc2fa04a8feb93b0a9debf99217cf0c780c34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.100.0/22
                IPv6:
                  2803:b0a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266806

    Signature Algorithm: sha256WithRSAEncryption
         b4:d9:b0:f9:ec:df:76:ca:68:65:13:89:8e:f8:a9:56:8d:56:
         b8:c9:7f:a5:2b:e9:d7:2a:99:77:08:43:02:34:06:29:62:ce:
         67:5d:00:d0:e1:5f:a3:88:4f:ea:d4:9f:02:f2:34:77:67:49:
         2a:d6:d3:bc:39:dd:92:d6:f7:d8:a1:34:63:f7:49:a1:12:d7:
         a3:c6:9b:10:86:c9:05:aa:e1:d8:b2:d5:de:11:6a:c2:64:fd:
         94:6c:72:61:46:03:df:e4:0f:18:20:ac:68:09:72:86:7e:35:
         b5:1b:e9:a3:93:98:a4:f5:7a:46:7e:69:93:f3:97:b6:02:7c:
         98:75:9e:28:6e:16:e3:df:be:f2:39:fb:06:0b:24:3d:fa:dd:
         c8:06:d6:bc:03:1b:fa:d0:57:8c:17:92:9b:43:c4:bb:ef:d9:
         6b:9c:45:16:2c:a7:03:58:d5:3a:ed:8c:ab:54:1d:32:64:b8:
         25:76:20:39:00:dc:53:52:65:28:01:02:35:3e:51:d2:69:f3:
         67:db:9f:fd:51:a9:4c:ce:86:9c:f3:d0:1d:63:64:ef:65:d8:
         6a:1c:44:f1:52:62:69:be:f8:1d:5e:6e:7d:b0:c9:65:87:06:
         9c:fb:56:ad:af:83:9b:b2:bd:87:71:4c:c4:46:69:05:1c:6f:
         b9:a3:b1:d7
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAN4m5DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDcwMjE1MTMxMloXDTI0MDMwOTE5MTAz
NFowMzExMC8GA1UEAxMoNzcxYmMyZmEwNGE4ZmViOTNiMGE5ZGViZjk5MjE3Y2Yw
Yzc4MGMzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJgcPtKd6Jg/
uZB/5RtVhFNS4Bl6zI/N6ASOWxNtTHX0NiJVE2CiagXPuN3xVfF2fbJ39BXoL81U
LWr6cBQw5zKZ/tqihDzbM/5/LhZC0SIZEi6j326rkn+NVfxdrAjfhFPpyVZBfMXj
3cWx7ObsfHhmvMN1y3b8yx6A+WzdO38zlykz1Nj5ePpBY/3tpgFejOvCTUB51JWk
LUE/BAg8awfMTi1/lI5W1l6PyTbdCw88nm1tgKu4RcAoZ69C3LG/n+AweQq8/pY/
WzF+6uLqwGmYkYld2uo3hHBEBXYMtr0KktGZSoGToBzkm3thamtp6IG0sz1BEV5K
kuqowMXIjU8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSiNeicHak6gGhyJRClSwj5
HOpJKTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMjQzMDBjNS1kY2Vi
LTQ0MDYtOTI4Mi05NjMwY2U3YTgzYTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTI0MzAwYzUtZGNlYi00
NDA2LTkyODItOTYzMGNlN2E4M2ExLzc3MWJjMmZhMDRhOGZlYjkzYjBhOWRlYmY5
OTIxN2NmMGM3ODBjMzQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3sZDANBAIAAjAHAwUAKAOwoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEjYwDQYJKoZIhvcNAQELBQADggEBALTZ
sPns33bKaGUTiY74qVaNVrjJf6Ur6dcqmXcIQwI0BilizmddANDhX6OIT+rUnwLy
NHdnSSrW07w53ZLW99ihNGP3SaES16PGmxCGyQWq4diy1d4RasJk/ZRscmFGA9/k
DxggrGgJcoZ+NbUb6aOTmKT1ekZ+aZPzl7YCfJh1nihuFuPfvvI5+wYLJD363cgG
1rwDG/rQV4wXkptDxLvv2WucRRYspwNY1TrtjKtUHTJkuCV2IDkA3FNSZSgBAjU+
UdJp82fbn/1RqUzOhpzz0B1jZO9l2GocRPFSYmm++B1ebn2wyWWHBpz7Vq2vg5uy
vYdxTMRGaQUcb7mjsdc=
-----END CERTIFICATE-----