Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8332a0a627ec1dcde6573f34c68eed389e98bfa1.cer
File:                     8332a0a627ec1dcde6573f34c68eed389e98bfa1.cer (raw, json)
Hash identifier:          QMGUpYd4RDd2px2+RuzaVbvT8AST2xMKVHphdoQU91I=
Subject key identifier:   4F:49:33:C1:DC:0E:2F:AC:42:D7:EA:C1:E7:24:9B:5B:15:F0:BF:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4DD01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5ca12913-0731-47a3-bfdf-d4650095c0f2/8332a0a627ec1dcde6573f34c68eed389e98bfa1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5ca12913-0731-47a3-bfdf-d4650095c0f2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:34 +0000
Certificate not after:    Sun 12 May 2024 15:00:00 +0000
Subordinate resources:    AS: 27751
                          IP: 190.108.224.0/19
                          IP: 190.121.176.0/20
                          IP: 200.59.224.0/19
                          IP: 2803:b600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14998785 (0xe4dd01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:34 2017 GMT
            Not After : May 12 15:00:00 2024 GMT
        Subject: CN=8332a0a627ec1dcde6573f34c68eed389e98bfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:af:9f:e5:6d:03:09:72:98:ad:75:86:43:72:
                    62:af:a9:9d:1f:11:a7:cc:81:48:36:80:ad:e2:99:
                    84:55:63:68:64:4f:32:b4:8f:ef:e3:dd:4f:95:e7:
                    d2:59:b7:a0:b7:74:14:7c:3c:e6:12:1e:f8:66:8a:
                    f5:03:cc:f4:a1:4d:2b:f7:66:cf:6a:52:9e:7f:ee:
                    32:5c:65:2f:7b:ae:18:45:80:e6:25:29:70:4d:56:
                    40:7b:d7:6e:0b:e5:60:60:df:96:23:71:eb:c4:ba:
                    36:21:fb:f1:71:ac:94:2f:8d:84:77:3a:a5:3b:5b:
                    f2:e3:2e:01:c3:4f:40:d9:c0:88:b2:ca:08:7a:30:
                    55:ad:f3:f4:a5:ea:32:64:1d:b4:7b:7a:43:93:43:
                    91:71:12:c5:be:2d:b8:cc:a3:be:d9:2e:10:4a:d4:
                    e3:53:6d:54:a6:a6:4b:43:69:fe:17:a7:6b:03:da:
                    ac:48:ed:64:6e:bc:71:39:98:38:00:b8:dc:1b:84:
                    8b:61:b8:eb:56:3e:e6:d1:c7:87:aa:2c:26:cc:dc:
                    7f:12:05:2f:ae:7b:5d:19:f6:68:6c:c4:e9:9c:2e:
                    03:82:8f:a9:9f:fa:10:57:93:20:da:ad:af:9f:fe:
                    ff:34:0b:27:47:a2:bc:dc:0a:fd:e7:13:73:a3:85:
                    c8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:49:33:C1:DC:0E:2F:AC:42:D7:EA:C1:E7:24:9B:5B:15:F0:BF:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5ca12913-0731-47a3-bfdf-d4650095c0f2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5ca12913-0731-47a3-bfdf-d4650095c0f2/8332a0a627ec1dcde6573f34c68eed389e98bfa1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.224.0/19
                  190.121.176.0/20
                  200.59.224.0/19
                IPv6:
                  2803:b600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27751

    Signature Algorithm: sha256WithRSAEncryption
         bb:9b:f1:b8:5b:bd:5e:dc:cd:61:e9:88:3c:59:a6:60:ee:16:
         6f:e8:58:d6:7d:ba:b0:ef:7a:93:69:a4:ab:e5:e5:7e:29:83:
         ab:82:17:5e:c5:74:41:93:63:f3:d4:da:54:e5:1c:88:0d:07:
         3a:1b:d0:df:43:2e:57:52:c7:af:83:95:b1:32:07:37:bd:bb:
         02:f1:ff:8d:c6:bc:5d:f7:37:2d:f6:44:4f:97:34:44:40:5f:
         f2:f9:e6:a6:0e:fa:32:b2:d3:b6:26:21:d1:65:42:15:cf:e1:
         ce:59:1c:0c:7c:e6:95:ec:51:8d:f8:57:de:b4:88:a9:d1:6b:
         81:18:c3:aa:fa:3b:fc:95:ae:9b:83:d2:8d:5f:77:7b:4d:43:
         fd:1e:9c:9a:be:50:c9:06:49:5b:d6:62:8f:88:a7:ec:c5:af:
         6e:90:bb:bc:43:41:d2:78:73:0c:e1:5c:30:04:65:e2:31:b1:
         b5:b5:c6:ad:d1:f1:c4:d5:4e:d3:58:48:3e:1c:9c:de:e1:a3:
         a9:8b:d7:dd:11:a4:0d:00:8b:7f:a3:df:1b:b3:ce:0b:71:4e:
         0a:5d:55:38:12:a8:7d:1f:78:41:5c:10:ac:bd:4d:3d:8a:1e:
         aa:a8:80:a7:2e:ab:90:6b:37:b8:36:e2:f6:42:55:0b:bc:b7:
         aa:d3:59:29
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgIEAOTdATANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzNFoXDTI0MDUxMjE1MDAw
MFowMzExMC8GA1UEAxMoODMzMmEwYTYyN2VjMWRjZGU2NTczZjM0YzY4ZWVkMzg5
ZTk4YmZhMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJGvn+VtAwly
mK11hkNyYq+pnR8Rp8yBSDaAreKZhFVjaGRPMrSP7+PdT5Xn0lm3oLd0FHw85hIe
+GaK9QPM9KFNK/dmz2pSnn/uMlxlL3uuGEWA5iUpcE1WQHvXbgvlYGDfliNx68S6
NiH78XGslC+NhHc6pTtb8uMuAcNPQNnAiLLKCHowVa3z9KXqMmQdtHt6Q5NDkXES
xb4tuMyjvtkuEErU41NtVKamS0Np/henawParEjtZG68cTmYOAC43BuEi2G461Y+
5tHHh6osJszcfxIFL657XRn2aGzE6ZwuA4KPqZ/6EFeTINqtr5/+/zQLJ0eivNwK
/ecTc6OFyHMCAwEAAaOCAxQwggMQMB0GA1UdDgQWBBRPSTPB3A4vrELX6sHnJJtb
FfC/uTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81Y2ExMjkxMy0wNzMx
LTQ3YTMtYmZkZi1kNDY1MDA5NWMwZjIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWNhMTI5MTMtMDczMS00
N2EzLWJmZGYtZDQ2NTAwOTVjMGYyLzgzMzJhMGE2MjdlYzFkY2RlNjU3M2YzNGM2
OGVlZDM4OWU5OGJmYTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBb5s4AMEBL55sAMEBcg74DANBAIA
AjAHAwUAKAO2ADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJsZzANBgkqhkiG9w0B
AQsFAAOCAQEAu5vxuFu9XtzNYemIPFmmYO4Wb+hY1n26sO96k2mkq+XlfimDq4IX
XsV0QZNj89TaVOUciA0HOhvQ30MuV1LHr4OVsTIHN727AvH/jca8Xfc3LfZET5c0
REBf8vnmpg76MrLTtiYh0WVCFc/hzlkcDHzmlexRjfhX3rSIqdFrgRjDqvo7/JWu
m4PSjV93e01D/R6cmr5QyQZJW9Zij4in7MWvbpC7vENB0nhzDOFcMARl4jGxtbXG
rdHxxNVO01hIPhyc3uGjqYvX3RGkDQCLf6PfG7POC3FOCl1VOBKofR94QVwQrL1N
PYoeqqiApy6rkGs3uDbi9kJVC7y3qtNZKQ==
-----END CERTIFICATE-----