Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e43fff1c256eaadb6ff94c1dc866e122058a304.cer
File:                     8e43fff1c256eaadb6ff94c1dc866e122058a304.cer (raw, json)
Hash identifier:          RgNp9b6MQWU2ICGvWQUdTejwdUBHqaWUK+WISBU+Qm4=
Subject key identifier:   00:E9:9D:FE:A6:91:07:F8:42:8F:DB:5F:3D:ED:DB:CE:69:04:B9:4C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F76D9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/69ed6f5c-b899-49ff-8a94-095b893b7dc6/8e43fff1c256eaadb6ff94c1dc866e122058a304.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/69ed6f5c-b899-49ff-8a94-095b893b7dc6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:54 +0000
Certificate not after:    Mon 30 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 27650
                          IP: 190.5.192.0/20
                          IP: 190.115.224.0/19
                          IP: 2803:fe00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16215450 (0xf76d9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:54 2017 GMT
            Not After : Sep 30 15:00:00 2024 GMT
        Subject: CN=8e43fff1c256eaadb6ff94c1dc866e122058a304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:01:d7:79:18:83:af:89:80:12:98:fe:4d:
                    89:af:39:01:5d:a9:46:d0:59:df:e5:2b:ff:0f:d4:
                    4a:c8:4d:87:80:c7:38:22:d3:7d:40:f0:61:0f:d0:
                    ba:28:36:dd:87:93:74:c5:a8:f5:c9:ad:dc:90:ca:
                    89:c1:9d:ac:a2:f5:12:fd:f5:67:19:ed:cf:1d:37:
                    75:41:bc:d5:54:97:74:1e:b6:18:d4:e0:69:1f:a4:
                    f3:d9:99:f8:97:43:ff:a6:e5:53:84:88:c9:08:9f:
                    54:c1:ae:1c:af:c4:ad:db:d2:0f:ad:71:bf:f1:5a:
                    09:ea:bf:7c:16:61:c5:72:21:f1:c8:f0:23:74:a8:
                    ea:eb:9b:36:e8:92:a8:2d:7b:a8:90:0e:6f:bb:30:
                    6e:cc:03:ce:07:f6:37:48:86:7b:8d:06:a1:b9:cb:
                    ca:6e:c8:de:ff:b1:02:bb:11:0e:72:b1:d4:c6:5c:
                    9c:3a:2f:09:e8:f3:6d:1e:7d:f9:d7:ac:5e:9e:66:
                    58:2d:a2:44:b7:14:13:9e:84:b5:11:46:f2:fb:5f:
                    c2:bb:8b:3b:51:60:81:c9:3a:6b:ec:6e:99:b5:4a:
                    d0:86:77:18:ef:35:73:62:c7:37:42:93:67:38:72:
                    81:e0:ce:71:9a:ba:a4:80:4f:71:f7:cb:a0:5e:64:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E9:9D:FE:A6:91:07:F8:42:8F:DB:5F:3D:ED:DB:CE:69:04:B9:4C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/69ed6f5c-b899-49ff-8a94-095b893b7dc6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/69ed6f5c-b899-49ff-8a94-095b893b7dc6/8e43fff1c256eaadb6ff94c1dc866e122058a304.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.192.0/20
                  190.115.224.0/19
                IPv6:
                  2803:fe00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27650

    Signature Algorithm: sha256WithRSAEncryption
         b0:4a:e1:e3:9c:8b:d8:25:9e:01:21:70:dc:29:ba:a2:8d:52:
         7e:84:66:df:db:67:1b:75:5d:fc:99:6d:10:cf:db:68:b3:ea:
         fe:99:46:39:dd:ec:65:b3:89:7b:2b:9e:fe:13:6c:9b:0b:a9:
         61:65:d6:77:36:e3:b7:ed:2b:d2:e5:b9:03:cc:76:49:db:f8:
         f1:fe:4c:69:8d:11:8a:b2:1f:e1:12:76:78:34:2c:67:aa:10:
         6a:44:5c:f4:b6:6f:5a:35:d6:95:32:d5:35:ef:24:ef:00:32:
         ea:2e:e1:bf:f1:a9:03:57:80:31:2f:d0:f7:19:46:9f:68:01:
         5f:70:3c:eb:c6:88:4c:33:e3:b6:ae:79:5d:3c:9d:18:63:15:
         4d:a2:6a:44:66:a6:f4:1a:39:2b:06:de:cc:df:98:9b:17:88:
         9f:30:7c:3a:44:a0:64:26:6f:ad:21:81:61:a9:11:7b:cb:eb:
         81:90:7b:62:47:18:84:32:c0:4f:26:05:08:1a:c4:e0:b9:b9:
         b8:d2:43:d2:c5:53:89:fc:97:f2:55:9f:3f:a8:69:5d:19:3b:
         b4:b9:d2:29:df:ac:be:e4:7e:bf:0e:71:02:32:1d:03:a3:89:
         08:c8:c1:61:e7:91:11:4f:3c:3c:8f:ed:fd:9f:2b:a8:1e:67:
         e6:9d:6c:6f
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIEAPdtmjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1NFoXDTI0MDkzMDE1MDAw
MFowMzExMC8GA1UEAxMoOGU0M2ZmZjFjMjU2ZWFhZGI2ZmY5NGMxZGM4NjZlMTIy
MDU4YTMwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKHXAdd5GIOv
iYASmP5Nia85AV2pRtBZ3+Ur/w/USshNh4DHOCLTfUDwYQ/Quig23YeTdMWo9cmt
3JDKicGdrKL1Ev31Zxntzx03dUG81VSXdB62GNTgaR+k89mZ+JdD/6blU4SIyQif
VMGuHK/ErdvSD61xv/FaCeq/fBZhxXIh8cjwI3So6uubNuiSqC17qJAOb7swbswD
zgf2N0iGe40GobnLym7I3v+xArsRDnKx1MZcnDovCejzbR59+desXp5mWC2iRLcU
E56EtRFG8vtfwruLO1Fggck6a+xumbVK0IZ3GO81c2LHN0KTZzhygeDOcZq6pIBP
cffLoF5knkECAwEAAaOCAw4wggMKMB0GA1UdDgQWBBQA6Z3+ppEH+EKP21897dvO
aQS5TDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82OWVkNmY1Yy1iODk5
LTQ5ZmYtOGE5NC0wOTViODkzYjdkYzYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjllZDZmNWMtYjg5OS00
OWZmLThhOTQtMDk1Yjg5M2I3ZGM2LzhlNDNmZmYxYzI1NmVhYWRiNmZmOTRjMWRj
ODY2ZTEyMjA1OGEzMDQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBL4FwAMEBb5z4DANBAIAAjAHAwUA
KAP+ADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJsAjANBgkqhkiG9w0BAQsFAAOC
AQEAsErh45yL2CWeASFw3Cm6oo1SfoRm39tnG3Vd/JltEM/baLPq/plGOd3sZbOJ
eyue/hNsmwupYWXWdzbjt+0r0uW5A8x2Sdv48f5MaY0RirIf4RJ2eDQsZ6oQakRc
9LZvWjXWlTLVNe8k7wAy6i7hv/GpA1eAMS/Q9xlGn2gBX3A868aITDPjtq55XTyd
GGMVTaJqRGam9Bo5KwbezN+YmxeInzB8OkSgZCZvrSGBYakRe8vrgZB7YkcYhDLA
TyYFCBrE4Lm5uNJD0sVTifyX8lWfP6hpXRk7tLnSKd+svuR+vw5xAjIdA6OJCMjB
YeeREU88PI/t/Z8rqB5n5p1sbw==
-----END CERTIFICATE-----