Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/969da9021496148ea803d6fd9b5a297aebfc905d.cer
File:                     969da9021496148ea803d6fd9b5a297aebfc905d.cer (raw, json)
Hash identifier:          t6zLFchHzPO9r6nr+PVzz5xXojGy4r6vt5IPguR05fI=
Subject key identifier:   3C:FF:80:BF:78:CE:FB:91:D9:BA:3B:13:FE:C2:73:B1:A5:C0:3C:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED5A7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2c4db898-59c8-4568-976e-2adddce7ebed/969da9021496148ea803d6fd9b5a297aebfc905d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2c4db898-59c8-4568-976e-2adddce7ebed/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:04 +0000
Certificate not after:    Thu 11 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 28086
                          IP: 190.123.128.0/20
                          IP: 2803:d200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15555195 (0xed5a7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:04 2017 GMT
            Not After : Jul 11 06:00:00 2024 GMT
        Subject: CN=969da9021496148ea803d6fd9b5a297aebfc905d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:15:6e:da:a1:60:98:6f:8a:d3:19:86:af:47:
                    58:6d:d1:74:b5:75:23:66:50:05:e2:0f:ad:69:e9:
                    c4:dd:dd:ef:0a:0f:07:09:7a:c3:42:97:64:c3:5a:
                    7d:2b:1f:81:b9:9b:e6:b8:98:91:a6:57:f1:b6:e6:
                    8c:14:b2:2f:7c:ee:40:f4:3a:c0:9a:a2:1e:ed:1d:
                    fe:73:22:23:b0:eb:1a:a6:7a:3b:5b:24:58:c7:57:
                    20:c7:b1:ad:54:9c:a9:c0:9f:c8:26:37:4f:96:c9:
                    76:54:6b:c1:ec:dc:f5:ee:c7:81:78:42:91:4f:19:
                    ad:bb:60:d5:f6:b6:7d:c6:6d:77:46:ad:f5:be:38:
                    75:5d:6e:f9:50:18:fd:07:a4:c7:8f:9a:0e:76:64:
                    86:61:ff:d2:56:30:ae:2f:3b:36:71:70:63:bb:22:
                    55:e7:5d:53:80:cb:f0:77:a2:f1:7a:55:29:25:16:
                    16:bc:42:5e:1c:e9:97:48:c1:e8:5b:d9:2e:9b:26:
                    c3:46:c4:a4:16:24:ef:62:ae:ec:6d:0a:63:ab:f1:
                    0e:e2:5e:95:0a:91:ed:69:10:39:52:85:43:19:1e:
                    56:b8:8d:88:f9:03:a9:82:71:c1:17:a3:1c:90:d1:
                    5b:7c:d3:32:c5:53:f6:48:13:b3:c2:35:0a:e6:c3:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FF:80:BF:78:CE:FB:91:D9:BA:3B:13:FE:C2:73:B1:A5:C0:3C:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2c4db898-59c8-4568-976e-2adddce7ebed/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2c4db898-59c8-4568-976e-2adddce7ebed/969da9021496148ea803d6fd9b5a297aebfc905d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.128.0/20
                IPv6:
                  2803:d200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28086

    Signature Algorithm: sha256WithRSAEncryption
         6c:b9:a7:19:52:3f:14:80:07:c5:19:68:35:ed:75:2c:4e:84:
         46:36:77:6a:c8:2a:79:e1:27:da:07:40:69:50:66:43:1a:b8:
         f6:32:fe:2c:96:48:9f:0f:11:b1:8d:a5:a2:89:ec:e4:63:f3:
         7c:9f:74:5a:45:69:33:65:98:8c:ac:9c:a9:73:09:47:91:f7:
         10:3f:fc:60:b7:e6:ad:2f:fb:44:da:a5:9d:78:2d:6f:2c:45:
         74:cb:ee:5c:29:5d:30:1e:22:40:ff:02:80:f0:34:7a:47:5e:
         85:40:fc:d4:9f:80:9d:da:bf:bc:0f:94:b4:7c:7c:f6:85:7f:
         52:dd:40:a3:be:d1:90:66:68:2f:32:51:e3:d4:31:8d:e8:58:
         8f:e9:b6:32:70:55:92:2c:4a:af:fe:5f:62:6c:2a:c8:7f:3c:
         0f:98:c6:0c:77:f6:b1:84:b3:48:7c:58:47:6b:65:a1:ee:0f:
         fe:cc:3d:48:79:7d:61:8b:3c:f0:94:bb:42:aa:61:e8:6c:12:
         04:56:ef:89:2a:1e:50:30:a5:fa:43:24:98:60:11:25:24:ee:
         d2:e5:9a:20:34:7b:a3:b3:e8:44:9b:46:98:db:6a:44:81:d5:
         49:1e:00:8d:40:3e:6e:5d:24:b6:d6:31:84:93:6d:06:86:cd:
         c6:ba:e6:fe
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIEAO1aezANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcwNFoXDTI0MDcxMTA2MDAw
MFowMzExMC8GA1UEAxMoOTY5ZGE5MDIxNDk2MTQ4ZWE4MDNkNmZkOWI1YTI5N2Fl
YmZjOTA1ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI4VbtqhYJhv
itMZhq9HWG3RdLV1I2ZQBeIPrWnpxN3d7woPBwl6w0KXZMNafSsfgbmb5riYkaZX
8bbmjBSyL3zuQPQ6wJqiHu0d/nMiI7DrGqZ6O1skWMdXIMexrVScqcCfyCY3T5bJ
dlRrwezc9e7HgXhCkU8Zrbtg1fa2fcZtd0at9b44dV1u+VAY/Qekx4+aDnZkhmH/
0lYwri87NnFwY7siVeddU4DL8Hei8XpVKSUWFrxCXhzpl0jB6FvZLpsmw0bEpBYk
72Ku7G0KY6vxDuJelQqR7WkQOVKFQxkeVriNiPkDqYJxwRejHJDRW3zTMsVT9kgT
s8I1CubDzF8CAwEAAaOCAwgwggMEMB0GA1UdDgQWBBQ8/4C/eM77kdm6OxP+wnOx
pcA8mDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yYzRkYjg5OC01OWM4
LTQ1NjgtOTc2ZS0yYWRkZGNlN2ViZWQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMmM0ZGI4OTgtNTljOC00
NTY4LTk3NmUtMmFkZGRjZTdlYmVkLzk2OWRhOTAyMTQ5NjE0OGVhODAzZDZmZDli
NWEyOTdhZWJmYzkwNWQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBL57gDANBAIAAjAHAwUAKAPSADAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJttjANBgkqhkiG9w0BAQsFAAOCAQEAbLmn
GVI/FIAHxRloNe11LE6ERjZ3asgqeeEn2gdAaVBmQxq49jL+LJZInw8RsY2loons
5GPzfJ90WkVpM2WYjKycqXMJR5H3ED/8YLfmrS/7RNqlnXgtbyxFdMvuXCldMB4i
QP8CgPA0ekdehUD81J+Andq/vA+UtHx89oV/Ut1Ao77RkGZoLzJR49QxjehYj+m2
MnBVkixKr/5fYmwqyH88D5jGDHf2sYSzSHxYR2tloe4P/sw9SHl9YYs88JS7Qqph
6GwSBFbviSoeUDCl+kMkmGARJSTu0uWaIDR7o7PoRJtGmNtqRIHVSR4AjUA+bl0k
ttYxhJNtBobNxrrm/g==
-----END CERTIFICATE-----