Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
File:                     8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer (raw, json)
Hash identifier:          s9Kw+EtxLOG26mU1B+bx13Zkc4h+8BuexOHkwdyK8/Y=
Subject key identifier:   82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9F545
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:39 +0000
Certificate not after:    Fri 27 Sep 2024 05:00:00 +0000
Subordinate resources:    IP: 168.195.56.0/22
                          IP: 181.199.208.0/20
                          IP: 190.98.128.0/18
                          IP: 2800:240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16381253 (0xf9f545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:39 2017 GMT
            Not After : Sep 27 05:00:00 2024 GMT
        Subject: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5f:6d:79:6c:f4:21:2e:f3:cb:61:72:7f:36:
                    d8:8a:87:b7:ec:12:6f:29:4f:f5:a0:6d:0c:af:0b:
                    77:0d:58:a4:af:bf:d3:ab:7c:62:2e:ed:a0:59:26:
                    40:6b:a4:82:3c:40:b5:40:55:2a:f2:48:ad:9f:a2:
                    76:0b:36:6b:93:e8:e4:55:56:4a:b6:07:dc:00:72:
                    6a:a5:c4:c0:f4:70:8e:00:9c:47:14:4e:33:c0:c7:
                    e4:3e:79:b9:52:87:a5:11:5b:1c:8b:a0:19:f5:02:
                    cc:8c:0c:ed:de:79:05:cf:f1:47:c4:bd:ea:e5:a1:
                    e6:8b:a2:47:f9:71:81:86:5f:98:9f:90:9c:90:d5:
                    1e:a2:a4:9c:d4:96:2f:e2:ba:66:6e:bc:77:24:11:
                    45:d9:3f:54:5c:d6:9f:b2:66:04:49:ba:6d:79:c2:
                    0c:5c:88:98:39:39:23:ec:1e:75:e6:8d:5a:d2:37:
                    68:7f:ed:0d:25:bd:77:cd:51:37:65:9e:9f:7d:66:
                    e3:85:49:64:da:16:5e:3c:10:b1:c8:13:a3:ec:99:
                    f4:c0:4d:82:f2:cb:83:9f:2b:5f:5f:c8:e7:26:2b:
                    35:8e:a3:62:16:a4:8c:ac:41:a1:21:bf:ba:3a:83:
                    47:fe:98:e3:d6:ec:cd:3a:26:e2:0f:df:f7:92:49:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.56.0/22
                  181.199.208.0/20
                  190.98.128.0/18
                IPv6:
                  2800:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:88:1f:4a:73:5a:4e:ef:94:1d:46:96:d8:0c:6b:41:4d:79:
         b5:c4:06:3e:c8:30:84:00:cc:6d:c9:dc:7f:71:a1:9a:32:77:
         b0:18:0a:0e:09:09:46:d7:b9:dd:6a:3b:31:a2:2d:25:5a:06:
         a6:c0:89:c5:8f:45:14:2c:6b:20:d9:07:17:0b:18:70:bf:af:
         a0:ee:43:58:4e:f9:82:2f:24:87:06:5c:2c:34:e3:91:8d:c2:
         ae:92:7e:82:21:ae:ac:db:ef:97:25:59:26:cd:87:cc:0d:29:
         9e:0a:ce:30:2f:79:62:ee:88:34:40:24:c3:ad:69:4f:1f:4c:
         d8:40:21:cd:ef:e6:13:5b:19:4d:6d:fd:39:e0:80:bc:9f:57:
         c9:8d:ed:74:10:7d:33:73:11:6b:9f:73:80:38:52:5e:1a:c0:
         97:50:47:e8:c4:cb:96:e8:29:d5:4d:9e:59:25:39:4e:eb:01:
         70:4e:5d:45:91:d9:50:d6:45:fe:99:11:9a:46:ec:b7:ba:6b:
         ba:fc:95:5f:e8:87:f9:77:e9:a5:86:de:76:d2:51:42:fa:c7:
         7e:f4:7a:1d:32:11:4d:59:16:1a:90:f8:0b:ab:6b:ac:78:8a:
         69:39:5b:05:0b:00:07:52:95:e6:a6:55:6c:5d:84:00:be:d9:
         55:bd:22:01
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAPn1RTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzOVoXDTI0MDkyNzA1MDAw
MFowMzExMC8GA1UEAxMoOGQyZjRkODFiYmYxZTdkMjI3NDE5YTUxMzUyOTUzY2U5
YzZhY2EzYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJfbXls9CEu
88thcn822IqHt+wSbylP9aBtDK8Ldw1YpK+/06t8Yi7toFkmQGukgjxAtUBVKvJI
rZ+idgs2a5Po5FVWSrYH3AByaqXEwPRwjgCcRxROM8DH5D55uVKHpRFbHIugGfUC
zIwM7d55Bc/xR8S96uWh5ouiR/lxgYZfmJ+QnJDVHqKknNSWL+K6Zm68dyQRRdk/
VFzWn7JmBEm6bXnCDFyImDk5I+wedeaNWtI3aH/tDSW9d81RN2Wen31m44VJZNoW
XjwQscgTo+yZ9MBNgvLLg58rX1/I5yYrNY6jYhakjKxBoSG/ujqDR/6Y49bszTom
4g/f95JJ838CAwEAAaOCAvkwggL1MB0GA1UdDgQWBBSCmyKP9tHP0BWxPqf/clpT
/co8fzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kNmYyMWE4Yy0zYTcx
LTQ3YTctOWY2ZS1jOWI0NDE0MjdmY2QvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDZmMjFhOGMtM2E3MS00
N2E3LTlmNmUtYzliNDQxNDI3ZmNkLzhkMmY0ZDgxYmJmMWU3ZDIyNzQxOWE1MTM1
Mjk1M2NlOWM2YWNhM2EubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAqjDOAMEBLXH0AMEBr5igDANBAIA
AjAHAwUAKAACQDANBgkqhkiG9w0BAQsFAAOCAQEAcYgfSnNaTu+UHUaW2AxrQU15
tcQGPsgwhADMbcncf3GhmjJ3sBgKDgkJRte53Wo7MaItJVoGpsCJxY9FFCxrINkH
FwsYcL+voO5DWE75gi8khwZcLDTjkY3CrpJ+giGurNvvlyVZJs2HzA0pngrOMC95
Yu6INEAkw61pTx9M2EAhze/mE1sZTW39OeCAvJ9XyY3tdBB9M3MRa59zgDhSXhrA
l1BH6MTLlugp1U2eWSU5TusBcE5dRZHZUNZF/pkRmkbst7pruvyVX+iH+XfppYbe
dtJRQvrHfvR6HTIRTVkWGpD4C6trrHiKaTlbBQsAB1KV5qZVbF2EAL7ZVb0iAQ==
-----END CERTIFICATE-----