Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/901c0d961f219c9ac4920f36c147c92354e14b00.cer
File:                     901c0d961f219c9ac4920f36c147c92354e14b00.cer (raw, json)
Hash identifier:          g6TFXsJ1O8PAPd/J116fRaLjaiiP6A+QkKTqO5Rd2BQ=
Subject key identifier:   4A:47:70:41:22:2D:CC:A7:25:04:94:4B:73:16:31:6D:7A:AA:12:EB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3F8DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/901c0d961f219c9ac4920f36c147c92354e14b00.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:31 +0000
Certificate not after:    Mon 06 May 2024 22:28:48 +0000
Subordinate resources:    AS: 265763
                          IP: 164.163.40.0/22
                          IP: 2803:7c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14940382 (0xe3f8de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:31 2017 GMT
            Not After : May  6 22:28:48 2024 GMT
        Subject: CN=901c0d961f219c9ac4920f36c147c92354e14b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2e:68:fc:42:f8:7c:71:59:8d:a4:89:02:b1:
                    1b:ba:bd:ce:42:fc:5a:a5:16:23:2c:91:f7:65:69:
                    14:c4:27:dd:e9:1c:f9:75:f3:65:9b:e2:91:6f:48:
                    e2:2f:73:9f:ef:17:f2:8d:22:b9:90:c8:dc:9b:96:
                    45:ee:6e:73:e6:70:70:f1:65:a3:5c:80:3d:83:2a:
                    aa:cc:78:f4:71:7d:8b:66:70:f4:b2:7d:6f:8b:b7:
                    08:74:c6:62:08:ff:76:12:08:83:be:95:1d:c7:98:
                    4b:68:ca:6d:94:05:fa:d6:f9:63:15:12:ef:6f:2b:
                    50:26:05:c0:56:00:6e:7e:ce:0e:cd:9e:ca:17:60:
                    dd:30:3d:4a:f4:9f:b1:d6:3f:83:50:93:1a:37:df:
                    57:71:b1:84:ec:a9:e5:9f:ae:a7:f8:0d:51:fa:98:
                    42:a9:3a:33:00:a4:9c:34:19:80:8c:cc:36:1f:c1:
                    ef:32:3e:a4:72:4f:88:ad:2c:2b:8f:f7:2f:52:65:
                    8b:93:51:54:29:55:fa:60:f6:9d:c2:75:e0:b2:8d:
                    c6:71:3a:02:13:d9:6f:48:da:b9:ca:a1:1d:3a:e0:
                    51:bd:89:9d:14:3f:1a:8f:4b:39:15:c8:f2:eb:bf:
                    7c:ad:bf:7a:60:5e:38:70:9d:74:78:ce:99:84:a0:
                    75:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:47:70:41:22:2D:CC:A7:25:04:94:4B:73:16:31:6D:7A:AA:12:EB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/901c0d961f219c9ac4920f36c147c92354e14b00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.40.0/22
                IPv6:
                  2803:7c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265763

    Signature Algorithm: sha256WithRSAEncryption
         c1:84:36:e4:c8:1c:fb:2a:db:18:ec:b6:c2:39:32:18:8c:93:
         34:54:ba:c1:22:61:e5:bd:92:de:d3:af:4f:32:23:53:41:6a:
         e0:71:aa:4d:98:9c:31:f5:3f:30:3e:be:55:94:ce:59:65:49:
         3b:c8:98:17:99:8b:2a:b4:f2:ed:f2:0a:f9:80:cd:6d:12:48:
         c1:ce:15:1d:81:3c:9d:37:03:73:1f:9b:bb:ba:cd:36:d8:04:
         05:7c:11:20:b3:95:1b:23:94:e0:3e:21:3d:89:5b:e2:af:02:
         58:d8:c7:74:b1:9a:f0:1e:6a:54:54:6c:af:88:0d:33:2e:e3:
         1c:94:2b:b5:8a:6d:08:81:a5:b6:79:ac:ef:6c:75:4d:90:8d:
         2b:52:78:d7:ae:6e:2c:05:cb:06:1f:66:c5:71:a4:24:22:33:
         a2:41:ee:bf:9e:5c:f5:a3:59:38:fe:61:6a:24:57:25:80:16:
         a8:88:f5:05:de:54:60:0f:cc:87:bc:ff:69:3c:8e:84:a8:b2:
         11:56:8d:85:2a:78:d4:64:30:5e:d3:db:65:2a:09:73:d9:40:
         6d:f6:89:85:9f:3a:8a:91:c1:94:e7:21:00:a3:5c:b2:6e:9c:
         1b:c8:ee:a7:ef:16:83:4f:4c:5b:b7:f8:27:85:22:6b:f9:ac:
         9c:a1:58:ed
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOP43jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzMVoXDTI0MDUwNjIyMjg0
OFowMzExMC8GA1UEAxMoOTAxYzBkOTYxZjIxOWM5YWM0OTIwZjM2YzE0N2M5MjM1
NGUxNGIwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIcuaPxC+Hxx
WY2kiQKxG7q9zkL8WqUWIyyR92VpFMQn3ekc+XXzZZvikW9I4i9zn+8X8o0iuZDI
3JuWRe5uc+ZwcPFlo1yAPYMqqsx49HF9i2Zw9LJ9b4u3CHTGYgj/dhIIg76VHceY
S2jKbZQF+tb5YxUS728rUCYFwFYAbn7ODs2eyhdg3TA9SvSfsdY/g1CTGjffV3Gx
hOyp5Z+up/gNUfqYQqk6MwCknDQZgIzMNh/B7zI+pHJPiK0sK4/3L1Jli5NRVClV
+mD2ncJ14LKNxnE6AhPZb0jaucqhHTrgUb2JnRQ/Go9LORXI8uu/fK2/emBeOHCd
dHjOmYSgdTUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRKR3BBIi3MpyUElEtzFjFt
eqoS6zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hYWY0YTU2OS05YWNi
LTQ0YWItYmU4OC1hNDZkNGVkZTk2Y2UvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYWFmNGE1NjktOWFjYi00
NGFiLWJlODgtYTQ2ZDRlZGU5NmNlLzkwMWMwZDk2MWYyMTljOWFjNDkyMGYzNmMx
NDdjOTIzNTRlMTRiMDAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqSjKDANBAIAAjAHAwUAKAMHwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDiMwDQYJKoZIhvcNAQELBQADggEBAMGE
NuTIHPsq2xjstsI5MhiMkzRUusEiYeW9kt7Tr08yI1NBauBxqk2YnDH1PzA+vlWU
zlllSTvImBeZiyq08u3yCvmAzW0SSMHOFR2BPJ03A3Mfm7u6zTbYBAV8ESCzlRsj
lOA+IT2JW+KvAljYx3SxmvAealRUbK+IDTMu4xyUK7WKbQiBpbZ5rO9sdU2QjStS
eNeubiwFywYfZsVxpCQiM6JB7r+eXPWjWTj+YWokVyWAFqiI9QXeVGAPzIe8/2k8
joSoshFWjYUqeNRkMF7T22UqCXPZQG32iYWfOoqRwZTnIQCjXLJunBvI7qfvFoNP
TFu3+CeFImv5rJyhWO0=
-----END CERTIFICATE-----