Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/972388b64b903e27a472d5d232b9cd9c3a2594d4.cer
File:                     972388b64b903e27a472d5d232b9cd9c3a2594d4.cer (raw, json)
Hash identifier:          HmhWRPTX2NwKgxmfH/WoId0S2Rc4qpyBKZc42EElG8M=
Subject key identifier:   4C:B6:7B:0A:04:91:31:73:32:0E:78:F6:DE:04:64:44:F3:AF:A0:36
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E171C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5bad669a-e638-483d-98bb-dbc9174ad9f3/972388b64b903e27a472d5d232b9cd9c3a2594d4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5bad669a-e638-483d-98bb-dbc9174ad9f3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 15 Sep 2019 04:23:03 +0000
Certificate not after:    Sat 13 Apr 2024 16:04:33 +0000
Subordinate resources:    AS: 267897
                          IP: 45.177.80.0/22
                          IP: 2803:e660::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14774722 (0xe171c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 15 04:23:03 2019 GMT
            Not After : Apr 13 16:04:33 2024 GMT
        Subject: CN=972388b64b903e27a472d5d232b9cd9c3a2594d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ab:10:47:3e:60:0d:35:b5:8f:a4:09:41:c4:
                    26:69:a0:99:d0:43:11:71:5e:95:5a:fd:dd:6a:76:
                    58:f2:86:9c:d6:71:26:72:93:b0:e4:d2:5d:e6:72:
                    de:32:17:45:20:2c:fc:4d:f5:0a:af:5d:9d:07:1b:
                    c0:8f:1a:41:14:44:92:4b:b0:47:be:17:7f:ff:5d:
                    a6:e1:b5:d9:a0:38:48:e6:13:06:f1:e0:59:1e:f7:
                    e5:fb:83:d7:cd:cc:46:02:06:e9:2d:99:8f:39:5b:
                    62:81:f9:4f:67:c7:c6:ce:a7:6f:43:fa:99:ca:e7:
                    b7:1a:89:94:a9:a0:82:73:c1:4b:f7:3d:3d:c9:c1:
                    d0:84:e9:a0:62:e4:6d:5f:7d:13:20:68:2f:59:cf:
                    b7:f4:74:e2:8f:57:4d:ea:b2:19:2d:01:5d:82:53:
                    7e:4a:83:59:8c:dc:d6:ff:db:ef:f8:de:53:63:2b:
                    83:76:f8:e3:ff:ab:b1:51:83:78:43:64:b7:74:21:
                    88:28:13:21:18:9e:62:84:a7:51:e1:eb:74:da:d6:
                    e0:f4:ed:9a:1d:92:44:54:1f:c4:49:a9:bc:cb:01:
                    f8:ec:30:f3:e4:5e:2c:f1:cc:3f:59:bd:4d:29:c9:
                    7a:79:87:61:37:9d:35:cb:66:95:5c:37:6b:fa:67:
                    31:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B6:7B:0A:04:91:31:73:32:0E:78:F6:DE:04:64:44:F3:AF:A0:36
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5bad669a-e638-483d-98bb-dbc9174ad9f3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5bad669a-e638-483d-98bb-dbc9174ad9f3/972388b64b903e27a472d5d232b9cd9c3a2594d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.80.0/22
                IPv6:
                  2803:e660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267897

    Signature Algorithm: sha256WithRSAEncryption
         88:56:30:fc:80:ea:28:3c:02:74:47:1e:54:40:17:97:2e:ac:
         7b:78:85:fc:a1:ab:c7:2d:5b:3b:79:28:fa:03:9d:46:be:cb:
         84:ae:7a:0b:56:e4:7f:8d:42:a8:89:fc:cb:90:14:55:16:ff:
         da:96:14:a6:93:3a:95:45:16:09:44:c5:6e:4e:2d:ac:00:bb:
         09:6b:8b:e9:91:be:88:0e:47:7f:b3:3c:78:d0:f6:1e:d4:f4:
         08:b6:5d:06:e9:23:1d:69:35:fe:d1:18:9d:7b:d8:cb:23:ea:
         d9:98:7a:94:00:37:6a:20:52:15:66:35:c2:84:89:09:37:2b:
         09:46:b0:33:ef:86:80:50:af:c9:37:85:4e:fe:39:69:d3:eb:
         e4:84:52:3c:8d:01:b4:db:16:4a:3a:6a:2e:4c:fa:73:da:69:
         67:cb:a8:8d:bb:8c:08:c9:fb:a1:42:ca:48:b0:ad:ee:0e:e1:
         db:aa:dc:3b:48:8b:bb:eb:bf:40:81:3d:d3:d4:0e:33:c6:ac:
         18:f7:56:38:8c:fc:ca:bb:ab:34:b9:cd:d0:74:d7:68:19:b0:
         f8:81:df:2a:d1:82:30:43:26:9c:03:80:d4:00:0e:11:8f:13:
         7b:5e:23:c7:fe:81:0f:e4:93:2f:f8:59:4d:77:76:ae:e6:a6:
         1c:ea:de:2f
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOFxwjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDkxNTA0MjMwM1oXDTI0MDQxMzE2MDQz
M1owMzExMC8GA1UEAxMoOTcyMzg4YjY0YjkwM2UyN2E0NzJkNWQyMzJiOWNkOWMz
YTI1OTRkNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIGrEEc+YA01
tY+kCUHEJmmgmdBDEXFelVr93Wp2WPKGnNZxJnKTsOTSXeZy3jIXRSAs/E31Cq9d
nQcbwI8aQRREkkuwR74Xf/9dpuG12aA4SOYTBvHgWR735fuD183MRgIG6S2Zjzlb
YoH5T2fHxs6nb0P6mcrntxqJlKmggnPBS/c9PcnB0ITpoGLkbV99EyBoL1nPt/R0
4o9XTeqyGS0BXYJTfkqDWYzc1v/b7/jeU2Mrg3b44/+rsVGDeENkt3QhiCgTIRie
YoSnUeHrdNrW4PTtmh2SRFQfxEmpvMsB+Oww8+ReLPHMP1m9TSnJenmHYTedNctm
lVw3a/pnMasCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRMtnsKBJExczIOePbeBGRE
86+gNjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81YmFkNjY5YS1lNjM4
LTQ4M2QtOThiYi1kYmM5MTc0YWQ5ZjMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWJhZDY2OWEtZTYzOC00
ODNkLTk4YmItZGJjOTE3NGFkOWYzLzk3MjM4OGI2NGI5MDNlMjdhNDcyZDVkMjMy
YjljZDljM2EyNTk0ZDQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2xUDANBAIAAjAHAwUAKAPmYDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFnkwDQYJKoZIhvcNAQELBQADggEBAIhW
MPyA6ig8AnRHHlRAF5curHt4hfyhq8ctWzt5KPoDnUa+y4SuegtW5H+NQqiJ/MuQ
FFUW/9qWFKaTOpVFFglExW5OLawAuwlri+mRvogOR3+zPHjQ9h7U9Ai2XQbpIx1p
Nf7RGJ172Msj6tmYepQAN2ogUhVmNcKEiQk3KwlGsDPvhoBQr8k3hU7+OWnT6+SE
UjyNAbTbFko6ai5M+nPaaWfLqI27jAjJ+6FCykiwre4O4duq3DtIi7vrv0CBPdPU
DjPGrBj3VjiM/Mq7qzS5zdB012gZsPiB3yrRgjBDJpwDgNQADhGPE3teI8f+gQ/k
ky/4WU13dq7mphzq3i8=
-----END CERTIFICATE-----