Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fec437d32aba48264306d179703acc9a82f83bf.cer
File:                     9fec437d32aba48264306d179703acc9a82f83bf.cer (raw, json)
Hash identifier:          fUSpdSpb1vUZILycuB/SfK3AFBxf+uX2M0pyBqY5/BI=
Subject key identifier:   F5:9C:4E:7B:E4:22:40:A1:FC:48:47:88:B5:A5:DE:FC:97:12:D4:71
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC6ACA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/9fec437d32aba48264306d179703acc9a82f83bf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:26 +0000
Certificate not after:    Thu 04 Jul 2024 21:14:22 +0000
Subordinate resources:    AS: 52491
                          IP: 179.60.208.0/22
                          IP: 2803:880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15493834 (0xec6aca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:26 2017 GMT
            Not After : Jul  4 21:14:22 2024 GMT
        Subject: CN=9fec437d32aba48264306d179703acc9a82f83bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a7:4d:1a:20:51:bd:02:d7:e3:4f:45:6f:ae:
                    90:85:d5:eb:28:49:e4:0c:6c:74:d5:6e:e5:b8:5c:
                    c9:c2:f6:19:0d:14:37:49:ed:6f:a9:70:92:60:cd:
                    db:79:ff:ab:f2:be:9c:76:43:9c:e0:db:4f:2a:1f:
                    f7:0e:d8:4c:18:06:0c:ab:9d:08:06:49:f5:d7:ab:
                    e0:b6:ac:a6:ad:38:93:d5:53:f0:f4:62:de:ba:e4:
                    c2:f9:ee:ce:5b:91:c5:a8:16:9f:c7:6b:16:37:d8:
                    95:65:ff:50:e9:33:22:32:c6:ca:52:37:f4:70:1b:
                    84:c9:83:c7:98:f0:b9:d4:6c:03:01:d4:d0:d2:04:
                    8a:92:46:21:12:c2:7c:49:ac:d7:a4:ba:39:91:83:
                    76:50:c8:95:4c:49:f8:c1:46:c0:d5:ae:c2:3f:4d:
                    ef:e7:c7:79:be:be:ec:14:55:2d:5c:13:a6:20:13:
                    a2:97:a8:37:7a:ba:af:f2:c4:08:b8:07:a0:53:0a:
                    f0:60:89:87:df:f7:14:ba:99:11:1b:07:d2:d1:9f:
                    2a:76:a0:43:67:8d:3c:f5:87:88:c3:0b:b7:16:3f:
                    88:eb:de:c2:70:61:c8:28:54:55:ef:1a:29:b6:f7:
                    9e:cc:5d:00:59:1d:cf:1c:05:5c:1c:ea:fe:31:21:
                    4c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9C:4E:7B:E4:22:40:A1:FC:48:47:88:B5:A5:DE:FC:97:12:D4:71
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/9fec437d32aba48264306d179703acc9a82f83bf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.208.0/22
                IPv6:
                  2803:880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52491

    Signature Algorithm: sha256WithRSAEncryption
         39:46:98:99:39:2b:57:bf:4e:d4:2b:9e:d2:32:57:93:6d:3a:
         26:e8:29:38:81:a9:e9:6e:4f:4f:76:7c:b0:29:42:3f:96:e8:
         54:3f:55:a4:50:1e:13:3c:a5:50:fe:e6:b4:9d:3e:08:9f:b6:
         83:a4:5b:a4:36:ec:50:0e:5f:e0:78:c2:f0:af:9c:eb:33:64:
         21:08:8a:c4:3a:28:66:27:6b:92:f3:ca:9c:4a:d2:bd:2d:e0:
         e4:8c:8f:56:0e:0a:21:45:91:ae:6e:fb:c9:78:39:44:43:98:
         f5:f8:e3:13:36:b6:03:9e:0d:5b:19:2a:7a:c9:99:ca:de:9b:
         2e:a1:6c:85:b6:b1:57:b4:e3:a3:87:16:77:f1:64:90:98:66:
         e4:d4:f4:db:04:9b:c2:5c:1f:58:d6:a7:58:e9:1f:1b:b3:17:
         7d:ea:84:25:38:5b:3a:2d:ad:a9:93:11:d6:31:47:9b:94:ab:
         5a:df:77:b4:30:89:77:bd:e1:f5:b2:74:2e:e7:7a:18:7d:b2:
         bc:88:f0:53:ac:7f:11:83:1c:67:8b:4e:65:56:73:52:f8:c9:
         9e:c7:65:9f:eb:ba:70:64:84:3f:e2:28:40:6f:df:89:b4:26:
         33:21:db:3f:ba:c2:cf:a8:e4:b8:fc:a3:45:d9:92:9a:48:bf:
         cb:c8:20:c7
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOxqyjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyNloXDTI0MDcwNDIxMTQy
MlowMzExMC8GA1UEAxMoOWZlYzQzN2QzMmFiYTQ4MjY0MzA2ZDE3OTcwM2FjYzlh
ODJmODNiZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJOnTRogUb0C
1+NPRW+ukIXV6yhJ5AxsdNVu5bhcycL2GQ0UN0ntb6lwkmDN23n/q/K+nHZDnODb
Tyof9w7YTBgGDKudCAZJ9der4Laspq04k9VT8PRi3rrkwvnuzluRxagWn8drFjfY
lWX/UOkzIjLGylI39HAbhMmDx5jwudRsAwHU0NIEipJGIRLCfEms16S6OZGDdlDI
lUxJ+MFGwNWuwj9N7+fHeb6+7BRVLVwTpiATopeoN3q6r/LECLgHoFMK8GCJh9/3
FLqZERsH0tGfKnagQ2eNPPWHiMMLtxY/iOvewnBhyChUVe8aKbb3nsxdAFkdzxwF
XBzq/jEhTMkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBT1nE575CJAofxIR4i1pd78
lxLUcTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85NjM0N2VlOS04MTNl
LTQ5YjMtOTkzNi1kNTg1OGE1NTVmMGEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTYzNDdlZTktODEzZS00
OWIzLTk5MzYtZDU4NThhNTU1ZjBhLzlmZWM0MzdkMzJhYmE0ODI2NDMwNmQxNzk3
MDNhY2M5YTgyZjgzYmYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArM80DANBAIAAjAHAwUAKAMIgDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzQswDQYJKoZIhvcNAQELBQADggEBADlG
mJk5K1e/TtQrntIyV5NtOiboKTiBqeluT092fLApQj+W6FQ/VaRQHhM8pVD+5rSd
PgiftoOkW6Q27FAOX+B4wvCvnOszZCEIisQ6KGYna5LzypxK0r0t4OSMj1YOCiFF
ka5u+8l4OURDmPX44xM2tgOeDVsZKnrJmcremy6hbIW2sVe046OHFnfxZJCYZuTU
9NsEm8JcH1jWp1jpHxuzF33qhCU4WzotramTEdYxR5uUq1rfd7QwiXe94fWydC7n
ehh9sryI8FOsfxGDHGeLTmVWc1L4yZ7HZZ/runBkhD/iKEBv34m0JjMh2z+6ws+o
5Lj8o0XZkppIv8vIIMc=
-----END CERTIFICATE-----