Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/992fc30e4ae72d0bf9ff0f801bf4718ce1867356.cer
File:                     992fc30e4ae72d0bf9ff0f801bf4718ce1867356.cer (raw, json)
Hash identifier:          wMsjTFeXb5cwaSbPhzVRh5BwXK/OhrBT/gFdbHhuDFw=
Subject key identifier:   42:FE:70:36:F9:4C:D2:6F:3D:77:69:DB:F5:0D:EF:C0:51:DC:0E:4D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DEFDA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/992fc30e4ae72d0bf9ff0f801bf4718ce1867356.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:32 +0000
Certificate not after:    Mon 18 Mar 2024 16:23:45 +0000
Subordinate resources:    AS: 265722
                          IP: 45.7.84.0/22
                          IP: 2803:adc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14613922 (0xdefda2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:32 2017 GMT
            Not After : Mar 18 16:23:45 2024 GMT
        Subject: CN=992fc30e4ae72d0bf9ff0f801bf4718ce1867356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9a:6b:ee:fb:44:18:cc:82:22:b3:61:d2:ec:
                    c1:3f:11:f7:ec:10:d0:51:b2:5e:14:54:c0:6b:e0:
                    c0:ea:d8:57:89:62:63:ec:78:86:ca:ed:3c:1b:0d:
                    e2:96:43:85:14:cf:da:2d:63:e6:4d:42:46:77:26:
                    a4:c5:77:1e:01:6d:4c:1a:80:5c:2e:6e:12:a1:4c:
                    e6:8b:92:d0:95:84:47:c8:10:3d:c5:1d:23:17:b1:
                    2a:44:ed:a5:9c:63:e2:66:8a:5f:79:dc:a0:5d:77:
                    f3:9d:a1:74:91:3c:a0:a3:bf:76:e4:f2:9d:12:b9:
                    73:90:62:39:67:40:41:f4:f9:3b:35:3e:16:85:73:
                    c9:e5:36:6d:7e:cf:8e:83:6f:ab:f1:72:d1:14:94:
                    5c:83:a7:5d:99:ab:95:78:65:d2:f9:5c:55:5b:6f:
                    70:99:c7:15:cf:94:83:4c:57:a2:c4:39:e1:c2:ab:
                    2c:54:81:ff:28:34:ea:52:28:e9:f8:79:d5:dc:2d:
                    01:5f:25:0b:8c:5b:8b:4a:7f:e0:a7:2e:65:6b:a5:
                    a4:ab:35:9f:5e:d3:0f:42:4f:1b:a2:4f:c4:a7:f9:
                    30:51:30:b3:d4:a7:ac:d3:bb:aa:f4:c6:52:d7:84:
                    08:8f:bc:01:28:35:4c:10:8d:bc:b5:08:6c:b2:05:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FE:70:36:F9:4C:D2:6F:3D:77:69:DB:F5:0D:EF:C0:51:DC:0E:4D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/992fc30e4ae72d0bf9ff0f801bf4718ce1867356.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.84.0/22
                IPv6:
                  2803:adc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265722

    Signature Algorithm: sha256WithRSAEncryption
         0d:85:82:20:ff:f5:86:e5:ab:2c:df:79:35:24:24:76:5c:b6:
         fe:7e:a7:e3:73:35:d7:45:4e:3c:61:91:32:9d:22:3f:c7:fd:
         71:42:4b:5c:93:56:7e:b5:d3:7f:a1:a3:52:99:11:10:77:01:
         73:15:04:71:a6:85:24:ca:6e:83:20:49:ba:78:71:fe:4c:18:
         13:b1:eb:43:4c:dd:a6:6d:b9:10:c8:35:bb:f7:08:7d:33:ce:
         de:eb:7d:87:72:39:ed:2f:0f:bb:64:5e:8b:e9:8a:5c:42:5c:
         9b:17:c7:9f:1f:89:11:9f:5c:68:e4:e2:71:1b:89:80:b7:57:
         7f:1e:40:10:dd:fa:79:5f:30:e3:99:3d:20:e8:0c:62:d1:7a:
         8d:5a:b8:33:8f:aa:d3:09:81:fd:c8:e8:de:ce:12:40:3c:59:
         4c:84:f6:80:61:9a:48:42:44:d1:4b:d5:e0:b3:3f:ea:b5:95:
         61:02:01:9c:ca:db:91:e9:36:17:52:a5:9d:e0:9d:6e:ff:78:
         8f:45:fa:cc:a8:f0:5b:66:90:ca:d1:e7:0f:bc:fd:83:71:62:
         6c:98:a1:d8:8b:b5:61:e5:91:73:ff:18:ae:e2:b1:4f:76:88:
         ec:1c:e3:15:08:5d:12:d0:0a:ed:b5:2f:d3:16:5d:66:86:37:
         75:c7:20:47
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAN79ojANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzMloXDTI0MDMxODE2MjM0
NVowMzExMC8GA1UEAxMoOTkyZmMzMGU0YWU3MmQwYmY5ZmYwZjgwMWJmNDcxOGNl
MTg2NzM1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI+aa+77RBjM
giKzYdLswT8R9+wQ0FGyXhRUwGvgwOrYV4liY+x4hsrtPBsN4pZDhRTP2i1j5k1C
RncmpMV3HgFtTBqAXC5uEqFM5ouS0JWER8gQPcUdIxexKkTtpZxj4maKX3ncoF13
852hdJE8oKO/duTynRK5c5BiOWdAQfT5OzU+FoVzyeU2bX7PjoNvq/Fy0RSUXIOn
XZmrlXhl0vlcVVtvcJnHFc+Ug0xXosQ54cKrLFSB/yg06lIo6fh51dwtAV8lC4xb
i0p/4KcuZWulpKs1n17TD0JPG6JPxKf5MFEws9SnrNO7qvTGUteECI+8ASg1TBCN
vLUIbLIF2RUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRC/nA2+UzSbz13adv1De/A
UdwOTTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lM2Y5NzYwNC0zY2Ri
LTQ4YWItYTUxMS0xNzdhYjI4MTk0NGEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTNmOTc2MDQtM2NkYi00
OGFiLWE1MTEtMTc3YWIyODE5NDRhLzk5MmZjMzBlNGFlNzJkMGJmOWZmMGY4MDFi
ZjQ3MThjZTE4NjczNTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0HVDANBAIAAjAHAwUAKAOtwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDfowDQYJKoZIhvcNAQELBQADggEBAA2F
giD/9YblqyzfeTUkJHZctv5+p+NzNddFTjxhkTKdIj/H/XFCS1yTVn6103+ho1KZ
ERB3AXMVBHGmhSTKboMgSbp4cf5MGBOx60NM3aZtuRDINbv3CH0zzt7rfYdyOe0v
D7tkXovpilxCXJsXx58fiRGfXGjk4nEbiYC3V38eQBDd+nlfMOOZPSDoDGLReo1a
uDOPqtMJgf3I6N7OEkA8WUyE9oBhmkhCRNFL1eCzP+q1lWECAZzK25HpNhdSpZ3g
nW7/eI9F+syo8FtmkMrR5w+8/YNxYmyYodiLtWHlkXP/GK7isU92iOwc4xUIXRLQ
Cu21L9MWXWaGN3XHIEc=
-----END CERTIFICATE-----