Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer
File:                     9288132902323827f44806de3061debd517a8fd9.cer (raw, json)
Hash identifier:          t9lKJB9OIwwvYW9QaLZVKbzzoBdIcWOMP8srhKW6qVE=
Subject key identifier:   AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F327A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/9288132902323827f44806de3061debd517a8fd9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2018 08:49:58 +0000
Certificate not after:    Tue 27 Aug 2024 20:24:58 +0000
Subordinate resources:    AS: 265858
                          IP: 45.225.204.0/22
                          IP: 2803:7a20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15935401 (0xf327a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 26 08:49:58 2018 GMT
            Not After : Aug 27 20:24:58 2024 GMT
        Subject: CN=9288132902323827f44806de3061debd517a8fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4b:30:ac:f2:ed:fa:aa:f1:7f:35:71:f0:6d:
                    a1:f1:27:d5:33:a6:5a:74:00:42:7c:4d:f2:bf:4a:
                    25:fd:47:98:89:24:1c:48:d7:9d:0a:45:83:9e:23:
                    ec:2c:15:3f:b4:07:d3:db:76:17:41:53:e0:fd:73:
                    e1:db:cb:d6:0f:84:39:c6:c7:b3:b7:0f:9d:0a:bd:
                    65:a5:07:22:14:05:b6:ee:6a:f6:c6:74:62:1d:79:
                    bb:22:49:c0:50:9d:15:48:ad:1b:d0:0f:a1:d2:bb:
                    79:86:74:31:88:dd:c6:de:6a:54:17:42:f3:a6:02:
                    ea:a8:a5:49:f7:97:fe:96:df:b1:61:05:8a:2d:64:
                    83:4a:d5:13:94:10:49:30:82:f0:69:02:37:97:e5:
                    86:63:1c:f1:49:57:a2:70:ef:01:56:ec:54:92:a2:
                    a0:e1:8e:1f:45:62:48:1d:80:0a:8b:9b:4c:36:25:
                    79:00:ac:4f:04:47:d7:29:a5:13:d1:bc:ce:c5:8d:
                    e6:b2:5a:e8:52:f4:2a:b6:0a:e8:cb:9d:bd:cc:1e:
                    ee:ca:8e:b2:fc:bc:75:c5:01:97:32:9e:8f:89:d7:
                    6c:d5:e5:47:a3:39:e7:ed:1d:aa:f0:22:77:0c:d2:
                    4d:7e:39:d0:aa:0c:69:6a:44:c5:8a:3e:d1:90:57:
                    37:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/9288132902323827f44806de3061debd517a8fd9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.204.0/22
                IPv6:
                  2803:7a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265858

    Signature Algorithm: sha256WithRSAEncryption
         13:4f:5b:d2:7f:29:e8:72:69:e0:b1:82:36:5c:0a:b8:4a:ca:
         af:45:b8:94:64:24:2a:ef:b4:4c:0d:b2:e9:c0:3f:0e:56:8b:
         32:c0:fa:0b:88:6b:ce:51:4e:3d:ae:3b:33:0f:e2:8f:b3:0e:
         48:0a:34:f7:33:b2:03:3a:be:94:a4:df:f2:b2:c0:4d:2e:08:
         a8:77:e3:cd:a3:14:d5:f4:7a:f8:ae:04:b7:94:43:be:78:b8:
         54:c3:07:f1:1e:22:49:09:21:9d:90:d7:6a:77:77:4d:a8:4e:
         ca:d8:7e:6b:0b:cd:15:ba:ac:31:94:5c:c2:ad:81:43:fc:e9:
         47:ca:e6:57:8c:cd:a7:48:c6:93:d2:5d:76:3d:37:96:30:f3:
         4a:df:f2:c7:2d:40:0e:8d:c2:dd:fb:7a:f0:fb:a0:62:f9:4e:
         36:9d:bc:d6:b8:94:91:99:28:66:6c:1f:a0:12:1d:81:07:26:
         a8:e7:bc:f0:dc:ee:13:11:74:27:8c:f2:25:f0:48:af:4f:f6:
         5b:75:c2:82:e7:d7:42:d9:94:6f:c3:8e:fa:13:dd:7b:e0:8e:
         95:60:85:95:e7:44:d5:e8:04:4d:85:3f:6c:e6:b5:98:64:b6:
         06:c2:71:27:92:3d:b6:e0:18:ab:09:d4:7e:4e:29:bb:da:a4:
         63:84:c2:61
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPMnqTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDEyNjA4NDk1OFoXDTI0MDgyNzIwMjQ1
OFowMzExMC8GA1UEAxMoOTI4ODEzMjkwMjMyMzgyN2Y0NDgwNmRlMzA2MWRlYmQ1
MTdhOGZkOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIFLMKzy7fqq
8X81cfBtofEn1TOmWnQAQnxN8r9KJf1HmIkkHEjXnQpFg54j7CwVP7QH09t2F0FT
4P1z4dvL1g+EOcbHs7cPnQq9ZaUHIhQFtu5q9sZ0Yh15uyJJwFCdFUitG9APodK7
eYZ0MYjdxt5qVBdC86YC6qilSfeX/pbfsWEFii1kg0rVE5QQSTCC8GkCN5flhmMc
8UlXonDvAVbsVJKioOGOH0ViSB2ACoubTDYleQCsTwRH1ymlE9G8zsWN5rJa6FL0
KrYK6Mudvcwe7sqOsvy8dcUBlzKej4nXbNXlR6M55+0dqvAidwzSTX450KoMaWpE
xYo+0ZBXN0UCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSvLKoWWwYHTlc8LCHi8aA6
GzFfmTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xMTVlY2MxNi1jYmE3
LTQyMDAtOWY1ZS05Nzk0YzVlNTM1OWQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTE1ZWNjMTYtY2JhNy00
MjAwLTlmNWUtOTc5NGM1ZTUzNTlkLzkyODgxMzI5MDIzMjM4MjdmNDQ4MDZkZTMw
NjFkZWJkNTE3YThmZDkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3hzDANBAIAAjAHAwUAKAN6IDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDoIwDQYJKoZIhvcNAQELBQADggEBABNP
W9J/KehyaeCxgjZcCrhKyq9FuJRkJCrvtEwNsunAPw5WizLA+guIa85RTj2uOzMP
4o+zDkgKNPczsgM6vpSk3/KywE0uCKh3482jFNX0eviuBLeUQ754uFTDB/EeIkkJ
IZ2Q12p3d02oTsrYfmsLzRW6rDGUXMKtgUP86UfK5leMzadIxpPSXXY9N5Yw80rf
8sctQA6Nwt37evD7oGL5TjadvNa4lJGZKGZsH6ASHYEHJqjnvPDc7hMRdCeM8iXw
SK9P9lt1woLn10LZlG/DjvoT3XvgjpVghZXnRNXoBE2FP2zmtZhktgbCcSeSPbbg
GKsJ1H5OKbvapGOEwmE=
-----END CERTIFICATE-----