Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer
File:                     904a59874ab57a97e46cd1d939a2312a85fe9c71.cer (raw, json)
Hash identifier:          JgPXNvDHfqwE/SZkyF0n5vrTGaAKDz/CDSt4z2ByiVg=
Subject key identifier:   4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3BECA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/904a59874ab57a97e46cd1d939a2312a85fe9c71.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:19 +0000
Certificate not after:    Mon 06 May 2024 06:00:00 +0000
Subordinate resources:    AS: 271923
                          IP: 164.163.48.0/22
                          IP: 2803:87c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14925514 (0xe3beca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:19 2017 GMT
            Not After : May  6 06:00:00 2024 GMT
        Subject: CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:e2:38:41:44:52:26:09:9f:a6:73:e3:60:
                    c8:b1:5b:a6:e5:28:4e:a6:21:11:54:70:fd:df:63:
                    62:54:de:fc:b3:5b:79:24:1a:1a:a7:30:35:7b:39:
                    6e:84:18:cd:b0:c2:a8:f8:88:f0:dd:18:38:56:1b:
                    d1:fb:d4:10:76:ca:e9:b2:96:d1:82:63:19:22:08:
                    f7:f2:26:75:7e:f4:a3:a2:86:06:c2:7c:5b:77:35:
                    2a:3e:4a:a5:5a:ca:87:0e:7d:14:f8:c8:47:11:3d:
                    79:e3:00:c3:a2:c7:96:53:70:1b:05:dc:38:4f:69:
                    e9:60:a3:31:1f:af:5c:01:18:7d:c2:7f:46:5b:ce:
                    c6:23:ad:a4:1a:4a:46:58:e9:a4:08:51:dd:80:e0:
                    d7:86:0f:ce:6c:fd:0e:18:fe:da:81:aa:d7:d2:f6:
                    c8:d6:8e:62:18:c9:be:40:f9:89:97:57:6b:21:67:
                    bd:f1:63:48:38:3d:37:bb:da:3f:be:89:ac:05:0e:
                    75:a2:8e:f1:c4:c3:b3:bc:99:e2:4e:7b:12:be:9b:
                    75:5b:db:e6:98:ad:0e:e2:49:47:e6:da:a3:90:57:
                    77:7e:2e:62:dd:f0:f9:03:de:a7:3e:d5:1a:a0:a9:
                    0f:1d:3d:08:98:bf:64:cc:39:e1:ff:0c:94:9a:3f:
                    c9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/904a59874ab57a97e46cd1d939a2312a85fe9c71.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.48.0/22
                IPv6:
                  2803:87c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271923

    Signature Algorithm: sha256WithRSAEncryption
         05:1a:aa:7c:af:a1:22:a3:96:f3:51:5e:9d:24:c3:34:de:b1:
         bf:ec:04:bf:f4:ab:82:7b:f8:59:6a:a5:6a:a3:fa:f2:8e:e3:
         22:ec:c3:98:d4:6a:e7:88:3f:fb:ec:76:00:c8:c2:4b:1d:c0:
         50:9f:c9:5b:c1:2c:45:85:92:13:d0:81:31:e8:98:a6:47:c9:
         c4:b0:6d:e7:93:7f:9f:d9:94:96:a5:56:06:ab:6d:89:70:f9:
         e7:e4:72:28:fc:bb:25:14:44:33:39:a8:ab:64:0f:d2:84:d0:
         09:da:90:fc:4c:e5:15:35:70:c6:94:62:8b:d8:52:8d:17:85:
         3e:17:51:e2:57:c6:47:e5:de:4e:29:a8:03:c5:1a:8b:b7:c2:
         3e:b3:42:49:00:91:d2:6f:b8:ce:2f:8e:d0:0d:c1:5c:67:68:
         97:69:e6:e2:31:6f:0f:f6:1e:eb:ce:5d:4f:19:11:0b:26:9f:
         fd:3d:4d:92:b2:6a:d3:98:8b:83:b6:77:e2:fa:42:f9:4c:6f:
         92:f4:77:9d:d3:97:77:3b:a9:15:35:9c:76:5d:97:fb:aa:d9:
         73:a2:9b:6a:5d:fb:22:0c:8b:76:f4:85:71:ce:7a:ad:8d:20:
         34:6d:bc:fb:d1:30:6f:d6:c4:0e:93:7a:bc:09:44:25:6d:17:
         e0:4e:5e:af
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOO+yjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcxOVoXDTI0MDUwNjA2MDAw
MFowMzExMC8GA1UEAxMoOTA0YTU5ODc0YWI1N2E5N2U0NmNkMWQ5MzlhMjMxMmE4
NWZlOWM3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALSa4jhBRFIm
CZ+mc+NgyLFbpuUoTqYhEVRw/d9jYlTe/LNbeSQaGqcwNXs5boQYzbDCqPiI8N0Y
OFYb0fvUEHbK6bKW0YJjGSII9/ImdX70o6KGBsJ8W3c1Kj5KpVrKhw59FPjIRxE9
eeMAw6LHllNwGwXcOE9p6WCjMR+vXAEYfcJ/RlvOxiOtpBpKRljppAhR3YDg14YP
zmz9Dhj+2oGq19L2yNaOYhjJvkD5iZdXayFnvfFjSDg9N7vaP76JrAUOdaKO8cTD
s7yZ4k57Er6bdVvb5pitDuJJR+bao5BXd34uYt3w+QPepz7VGqCpDx09CJi/ZMw5
4f8MlJo/yT0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBROI1rwWcTed5vautpNFy83
NPPigjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yYmE5NWViOC0wZmRi
LTQ3ZTUtODcyMi0xNjcwNzMyY2EwM2YvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMmJhOTVlYjgtMGZkYi00
N2U1LTg3MjItMTY3MDczMmNhMDNmLzkwNGE1OTg3NGFiNTdhOTdlNDZjZDFkOTM5
YTIzMTJhODVmZTljNzEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqSjMDANBAIAAjAHAwUAKAOHwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJjMwDQYJKoZIhvcNAQELBQADggEBAAUa
qnyvoSKjlvNRXp0kwzTesb/sBL/0q4J7+FlqpWqj+vKO4yLsw5jUaueIP/vsdgDI
wksdwFCfyVvBLEWFkhPQgTHomKZHycSwbeeTf5/ZlJalVgarbYlw+efkcij8uyUU
RDM5qKtkD9KE0AnakPxM5RU1cMaUYovYUo0XhT4XUeJXxkfl3k4pqAPFGou3wj6z
QkkAkdJvuM4vjtANwVxnaJdp5uIxbw/2HuvOXU8ZEQsmn/09TZKyatOYi4O2d+L6
QvlMb5L0d53Tl3c7qRU1nHZdl/uq2XOim2pd+yIMi3b0hXHOeq2NIDRtvPvRMG/W
xA6TerwJRCVtF+BOXq8=
-----END CERTIFICATE-----