Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d41746208795e6a5b8815d25ea39b536f23d0fd.cer
File:                     9d41746208795e6a5b8815d25ea39b536f23d0fd.cer (raw, json)
Hash identifier:          Nv26eTEllJYG/xCdD5yUGExUjbTEgvrT/0YtCVVn5hE=
Subject key identifier:   11:8E:E6:FB:8E:1E:78:D4:87:DB:ED:AC:7C:55:D0:7F:FF:BB:EE:BA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8DB70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1f5df15e-54a5-4da6-a305-a66bace974a3/9d41746208795e6a5b8815d25ea39b536f23d0fd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1f5df15e-54a5-4da6-a305-a66bace974a3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:39 +0000
Certificate not after:    Fri 05 Jan 2024 14:49:18 +0000
Subordinate resources:    AS: 269788
                          IP: 138.59.8.0/22
                          IP: 2803:1f80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14211952 (0xd8db70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:39 2017 GMT
            Not After : Jan  5 14:49:18 2024 GMT
        Subject: CN=9d41746208795e6a5b8815d25ea39b536f23d0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:65:94:52:b3:c0:dd:0e:83:c5:29:6b:6a:e7:
                    2b:d5:f1:18:76:84:d1:7c:bf:5c:e0:0f:02:aa:f6:
                    67:03:7e:e7:10:50:a1:74:45:a2:92:2a:46:7e:68:
                    e1:f7:0b:67:3b:3d:30:ed:8b:00:b7:d7:66:cf:12:
                    dc:8e:c2:84:1e:f4:5e:6c:54:5c:c4:e8:6f:5a:63:
                    16:19:3d:cf:a8:3f:15:a1:6d:40:93:8e:f3:2e:95:
                    32:c8:c4:a0:fd:70:ff:bb:f9:38:db:06:70:b7:62:
                    57:10:ff:f0:32:18:58:e9:c5:5d:f5:67:1f:1b:b6:
                    24:73:5e:ae:9f:4d:1a:01:ad:2c:0d:f3:bd:6d:e5:
                    32:2b:4d:92:4b:e2:32:b9:82:42:6b:09:b4:ea:d7:
                    4d:0e:1e:b6:6c:23:e2:68:b3:c4:0d:38:ed:41:cc:
                    22:2b:d7:fe:d0:ba:be:eb:e3:80:d4:86:d1:eb:25:
                    bc:61:df:e1:e1:a4:e6:f4:b8:2a:6b:96:4d:2f:cd:
                    49:dc:9a:cb:4c:8c:b6:a7:b7:34:f3:07:3e:d2:d8:
                    e3:fe:7a:7c:b4:83:86:87:6b:96:92:45:96:be:c1:
                    4f:7d:5b:5d:c4:01:0e:f4:15:7b:89:bf:0a:5b:9f:
                    5d:a1:e7:83:96:ee:00:32:92:48:5e:87:3f:b9:1f:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8E:E6:FB:8E:1E:78:D4:87:DB:ED:AC:7C:55:D0:7F:FF:BB:EE:BA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1f5df15e-54a5-4da6-a305-a66bace974a3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1f5df15e-54a5-4da6-a305-a66bace974a3/9d41746208795e6a5b8815d25ea39b536f23d0fd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.8.0/22
                IPv6:
                  2803:1f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269788

    Signature Algorithm: sha256WithRSAEncryption
         68:3b:dd:7d:d1:98:38:05:c7:b5:06:44:0b:d0:a0:9b:93:c7:
         a4:39:03:cd:65:9b:fb:4e:0b:11:82:e3:4a:bd:4a:9c:c1:04:
         90:f4:ec:26:c5:03:4a:12:f2:97:d6:0e:3b:60:b5:c5:f7:75:
         12:37:0e:43:14:58:db:c7:c2:e7:63:5d:63:e4:7d:6e:42:6d:
         c3:9a:55:0d:f3:71:2e:ab:e1:51:5e:06:29:b4:75:3a:6b:91:
         67:90:5e:1e:4b:65:ff:7e:4b:3d:53:5d:50:81:9c:1d:96:17:
         38:b0:b5:94:c3:51:6c:4f:67:5b:de:97:dd:7d:95:80:fa:18:
         ec:21:76:24:e5:55:bd:b8:46:3e:83:07:f3:71:a9:75:e6:02:
         e6:fd:c4:02:f5:e7:a2:35:eb:fa:f6:94:24:2e:af:36:93:29:
         09:4e:4e:8e:f5:6d:cb:f3:d1:d5:73:c2:3c:bc:78:16:e4:b4:
         f5:5b:6b:7e:73:8d:88:e6:50:eb:56:a5:e6:07:d8:82:75:7a:
         66:96:0c:87:70:92:34:f1:25:0a:28:88:a8:46:a5:d0:b1:d6:
         b1:50:66:f1:80:c4:7b:e2:f2:8f:43:08:76:d1:eb:65:2c:2e:
         6e:af:58:36:94:69:7a:50:f1:17:fb:2c:92:0e:df:46:71:99:
         22:05:70:17
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANjbcDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzczOVoXDTI0MDEwNTE0NDkx
OFowMzExMC8GA1UEAxMoOWQ0MTc0NjIwODc5NWU2YTViODgxNWQyNWVhMzliNTM2
ZjIzZDBmZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIVllFKzwN0O
g8Upa2rnK9XxGHaE0Xy/XOAPAqr2ZwN+5xBQoXRFopIqRn5o4fcLZzs9MO2LALfX
Zs8S3I7ChB70XmxUXMTob1pjFhk9z6g/FaFtQJOO8y6VMsjEoP1w/7v5ONsGcLdi
VxD/8DIYWOnFXfVnHxu2JHNerp9NGgGtLA3zvW3lMitNkkviMrmCQmsJtOrXTQ4e
tmwj4mizxA047UHMIivX/tC6vuvjgNSG0eslvGHf4eGk5vS4KmuWTS/NSdyay0yM
tqe3NPMHPtLY4/56fLSDhodrlpJFlr7BT31bXcQBDvQVe4m/ClufXaHng5buADKS
SF6HP7kf3ysCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQRjub7jh541Ifb7ax8VdB/
/7vuujAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xZjVkZjE1ZS01NGE1
LTRkYTYtYTMwNS1hNjZiYWNlOTc0YTMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWY1ZGYxNWUtNTRhNS00
ZGE2LWEzMDUtYTY2YmFjZTk3NGEzLzlkNDE3NDYyMDg3OTVlNmE1Yjg4MTVkMjVl
YTM5YjUzNmYyM2QwZmQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoo7CDANBAIAAjAHAwUAKAMfgDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHdwwDQYJKoZIhvcNAQELBQADggEBAGg7
3X3RmDgFx7UGRAvQoJuTx6Q5A81lm/tOCxGC40q9SpzBBJD07CbFA0oS8pfWDjtg
tcX3dRI3DkMUWNvHwudjXWPkfW5CbcOaVQ3zcS6r4VFeBim0dTprkWeQXh5LZf9+
Sz1TXVCBnB2WFziwtZTDUWxPZ1vel919lYD6GOwhdiTlVb24Rj6DB/NxqXXmAub9
xAL156I16/r2lCQurzaTKQlOTo71bcvz0dVzwjy8eBbktPVba35zjYjmUOtWpeYH
2IJ1emaWDIdwkjTxJQooiKhGpdCx1rFQZvGAxHvi8o9DCHbR62UsLm6vWDaUaXpQ
8Rf7LJIO30ZxmSIFcBc=
-----END CERTIFICATE-----