Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
File:                     8634873a21a0af40a01354647ad4978d3847d365.cer (raw, json)
Hash identifier:          JWkiKhaQT9BYeG9x115OFQFoY5+0/ppTrGT3xmq9BE0=
Subject key identifier:   0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDC06F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:16 +0000
Certificate not after:    Tue 05 Mar 2024 15:57:37 +0000
Subordinate resources:    AS: 28058
                          IP: 179.60.48.0/20
                          IP: 200.105.112.0/21
                          IP: 2803:4c00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14532719 (0xddc06f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:16 2017 GMT
            Not After : Mar  5 15:57:37 2024 GMT
        Subject: CN=8634873a21a0af40a01354647ad4978d3847d365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:b6:12:d2:8b:03:de:cc:36:03:7b:8d:f0:
                    12:bb:70:72:fc:8c:31:cc:a6:47:b1:19:e8:d7:21:
                    f9:19:ba:ac:07:3d:f6:cf:34:a0:00:75:71:b6:2c:
                    62:ae:b6:3a:9f:0d:a2:94:c9:aa:bd:5b:3a:f9:af:
                    c0:18:8b:b1:70:49:49:4e:79:14:4a:dc:ef:ce:ee:
                    86:83:fc:9d:24:f3:f9:2f:ef:67:95:d3:e2:9e:31:
                    5e:77:d7:e2:4b:ab:9e:f6:86:bc:3e:76:27:3a:d7:
                    fe:24:43:35:b2:ba:ce:be:57:c9:53:16:13:5f:d2:
                    ea:74:47:45:86:a1:73:6d:a7:df:01:92:a3:f9:6e:
                    04:14:dd:14:cd:b2:02:bc:9d:08:e2:ff:33:39:af:
                    3b:e6:b1:59:f9:97:05:2b:3b:a8:4e:d3:6c:dc:8e:
                    20:dd:77:5f:78:61:4c:23:ba:57:d3:7b:f9:0e:94:
                    08:30:8b:74:58:03:a2:a3:f0:45:01:e1:59:fe:7c:
                    64:1a:00:fc:f9:77:a4:63:3c:45:01:b3:f2:5d:23:
                    6d:09:89:4b:3e:c7:57:ab:cf:76:30:d8:5b:6f:ab:
                    25:5a:e5:fc:73:90:12:43:89:28:d4:3d:3b:68:71:
                    8b:6b:1c:55:31:da:bc:0e:88:17:07:76:c3:75:82:
                    b0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.48.0/20
                  200.105.112.0/21
                IPv6:
                  2803:4c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28058

    Signature Algorithm: sha256WithRSAEncryption
         80:04:78:dc:8b:1a:28:83:92:2d:8e:6c:86:ef:bd:a1:5b:b6:
         3f:23:2f:35:40:29:be:fb:7b:56:34:7d:30:b7:7d:d0:8e:f9:
         2f:d8:bf:a5:ef:ff:74:03:5f:6b:45:79:8f:8f:27:0b:90:6b:
         e0:97:aa:46:71:aa:28:8c:cf:3b:a9:50:33:d2:3a:dc:ae:c6:
         9c:a0:08:a6:f7:a3:91:c7:fb:3f:ee:32:46:d9:a2:4c:28:d5:
         15:03:db:c9:4b:94:8b:b0:28:80:a5:de:6c:61:2e:5b:8e:64:
         f5:74:83:b0:87:fc:9a:63:00:c8:3d:3e:d0:09:3f:37:f9:ad:
         76:ee:39:4a:31:10:0f:aa:7c:0e:3d:88:e1:83:fc:a8:c6:b9:
         54:37:55:d0:1f:a3:93:ab:1e:cf:ff:57:e1:42:9a:ef:65:a2:
         d8:b8:88:90:9f:c6:65:b0:96:05:fd:88:b7:f4:4f:0b:15:90:
         4d:d1:71:5c:38:80:71:65:14:18:48:0c:f4:73:7a:8c:6a:cc:
         8b:c8:91:ab:45:f8:dc:b8:66:f5:cf:e1:c5:6d:3f:22:8c:63:
         89:e5:2e:52:89:82:cc:2c:90:41:34:0e:6e:bc:59:45:cd:9e:
         70:1f:35:63:dc:6e:15:b0:b6:b0:79:4e:a6:dc:55:f6:8a:8f:
         eb:13:4d:43
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIEAN3AbzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcxNloXDTI0MDMwNTE1NTcz
N1owMzExMC8GA1UEAxMoODYzNDg3M2EyMWEwYWY0MGEwMTM1NDY0N2FkNDk3OGQz
ODQ3ZDM2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALlMthLSiwPe
zDYDe43wErtwcvyMMcymR7EZ6Nch+Rm6rAc99s80oAB1cbYsYq62Op8NopTJqr1b
OvmvwBiLsXBJSU55FErc787uhoP8nSTz+S/vZ5XT4p4xXnfX4kurnvaGvD52JzrX
/iRDNbK6zr5XyVMWE1/S6nRHRYahc22n3wGSo/luBBTdFM2yArydCOL/MzmvO+ax
WfmXBSs7qE7TbNyOIN13X3hhTCO6V9N7+Q6UCDCLdFgDoqPwRQHhWf58ZBoA/Pl3
pGM8RQGz8l0jbQmJSz7HV6vPdjDYW2+rJVrl/HOQEkOJKNQ9O2hxi2scVTHavA6I
Fwd2w3WCsFsCAwEAAaOCAw4wggMKMB0GA1UdDgQWBBQO9ZICZdGrk1KuT7x/oyc0
bGi/QDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kMjQ1ODVhNC1jNzY2
LTQ1MDktYTM1YS0wMjZmMzgzNjRhZWQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDI0NTg1YTQtYzc2Ni00
NTA5LWEzNWEtMDI2ZjM4MzY0YWVkLzg2MzQ4NzNhMjFhMGFmNDBhMDEzNTQ2NDdh
ZDQ5NzhkMzg0N2QzNjUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBLM8MAMEA8hpcDANBAIAAjAHAwUA
KANMADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJtmjANBgkqhkiG9w0BAQsFAAOC
AQEAgAR43IsaKIOSLY5shu+9oVu2PyMvNUApvvt7VjR9MLd90I75L9i/pe//dANf
a0V5j48nC5Br4JeqRnGqKIzPO6lQM9I63K7GnKAIpvejkcf7P+4yRtmiTCjVFQPb
yUuUi7AogKXebGEuW45k9XSDsIf8mmMAyD0+0Ak/N/mtdu45SjEQD6p8Dj2I4YP8
qMa5VDdV0B+jk6sez/9X4UKa72Wi2LiIkJ/GZbCWBf2It/RPCxWQTdFxXDiAcWUU
GEgM9HN6jGrMi8iRq0X43Lhm9c/hxW0/IoxjieUuUomCzCyQQTQObrxZRc2ecB81
Y9xuFbC2sHlOptxV9oqP6xNNQw==
-----END CERTIFICATE-----