Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
File:                     a883c910f879603b967c0636c6f3e9125b3651b5.cer (raw, json)
Hash identifier:          rqe55a98ql8qakfT9Qw5NMI/kH9u4XwBRwKO9Bt2yaA=
Subject key identifier:   47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E635A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:05 +0000
Certificate not after:    Mon 20 May 2024 15:00:00 +0000
Subordinate resources:    AS: 11081
                          IP: 190.4.128.0/18
                          IP: 190.88.0.0/16
                          IP: 200.26.192.0/19
                          IP: 216.152.160.0/20
                          IP: 2800:2e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15087012 (0xe635a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:05 2017 GMT
            Not After : May 20 15:00:00 2024 GMT
        Subject: CN=a883c910f879603b967c0636c6f3e9125b3651b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:98:f6:6c:ff:10:f1:43:ec:52:9e:55:ad:
                    8e:4c:95:24:1d:d8:1c:8c:eb:48:35:9b:d5:90:65:
                    91:86:cd:0b:44:3e:c3:8d:a5:34:02:f6:22:c4:71:
                    21:39:b8:11:a8:64:a6:46:81:a6:ae:7f:85:69:f8:
                    98:05:1b:c7:f6:6f:ac:31:57:9b:ff:7e:3d:86:ab:
                    30:93:ec:d0:ef:a2:b8:4e:85:ff:b0:57:50:c0:d9:
                    e9:f5:99:2e:cc:39:17:aa:2c:09:c2:5a:21:a1:24:
                    35:fc:c9:e0:31:33:67:34:d0:64:f8:74:c1:f9:25:
                    8c:5a:c3:fe:d1:7b:33:d1:50:5c:35:d8:02:98:41:
                    04:27:4a:78:62:63:2d:7f:2e:31:89:ec:d6:7d:f8:
                    ca:cf:36:04:f6:c8:83:d4:ba:a8:dd:73:95:87:1a:
                    6e:c3:0e:7a:54:a5:f1:6e:d7:cb:a3:89:87:e5:fe:
                    3f:90:93:9c:1f:9a:e4:bb:07:44:f1:70:ba:b0:f2:
                    29:ae:67:92:2a:93:79:cb:a3:cb:f4:63:b7:fc:c9:
                    0d:41:be:7d:61:3c:e5:a0:15:5a:e6:69:0d:41:91:
                    be:d2:11:61:06:18:14:4f:31:dc:03:ed:c9:bf:ac:
                    f1:60:fc:98:36:bf:01:18:51:34:23:30:ff:8f:cd:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.128.0/18
                  190.88.0.0/16
                  200.26.192.0/19
                  216.152.160.0/20
                IPv6:
                  2800:2e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11081

    Signature Algorithm: sha256WithRSAEncryption
         b5:df:d5:aa:8f:e0:04:48:9a:1b:81:50:b5:ab:64:c5:cc:d4:
         0f:4c:29:b7:cf:ef:5f:c4:ea:2b:89:01:3b:72:83:28:23:03:
         05:69:5e:d2:3d:f5:c7:f6:94:5b:f3:39:0a:3b:d8:c9:9a:6b:
         22:f9:1f:42:89:d3:70:b1:5a:ea:c4:00:5b:ae:5e:7d:67:4a:
         17:84:2e:28:17:e2:aa:ac:6f:d8:90:22:26:db:a2:d6:14:07:
         11:7d:fc:86:7c:d1:81:b1:29:0e:1d:0c:83:ad:da:30:5d:97:
         11:b6:8f:9c:61:93:a3:de:8a:50:e0:a4:06:be:c6:85:ba:72:
         06:79:e1:09:82:db:1a:1d:1e:c8:97:9c:a1:55:25:a6:a2:f0:
         b9:a8:1a:c5:3a:78:23:49:e8:45:9e:d2:35:ba:6e:36:bd:63:
         e1:c6:ea:ab:b0:cc:d1:bb:76:ad:6f:92:fd:12:63:34:13:8e:
         a2:6e:23:fd:46:6a:75:b0:5f:2c:cb:a1:fe:8b:2d:92:52:9a:
         ae:f9:95:4d:b4:ae:af:f2:bc:90:0f:b2:66:bc:3f:e1:95:04:
         4b:6b:5f:55:4b:f1:5a:73:e0:14:3d:4f:94:41:1f:61:4a:5d:
         62:f3:51:90:72:e0:7c:a6:7a:ba:8b:a1:fb:c1:b7:61:92:8c:
         32:eb:33:34
-----BEGIN CERTIFICATE-----
MIIF6jCCBNKgAwIBAgIEAOY1pDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcwNVoXDTI0MDUyMDE1MDAw
MFowMzExMC8GA1UEAxMoYTg4M2M5MTBmODc5NjAzYjk2N2MwNjM2YzZmM2U5MTI1
YjM2NTFiNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0WmPZs/xDx
Q+xSnlWtjkyVJB3YHIzrSDWb1ZBlkYbNC0Q+w42lNAL2IsRxITm4EahkpkaBpq5/
hWn4mAUbx/ZvrDFXm/9+PYarMJPs0O+iuE6F/7BXUMDZ6fWZLsw5F6osCcJaIaEk
NfzJ4DEzZzTQZPh0wfkljFrD/tF7M9FQXDXYAphBBCdKeGJjLX8uMYns1n34ys82
BPbIg9S6qN1zlYcabsMOelSl8W7Xy6OJh+X+P5CTnB+a5LsHRPFwurDyKa5nkiqT
ecujy/Rjt/zJDUG+fWE85aAVWuZpDUGRvtIRYQYYFE8x3APtyb+s8WD8mDa/ARhR
NCMw/4/NQV0CAwEAAaOCAxkwggMVMB0GA1UdDgQWBBRHpn84TlBdJmIHPas1Vubu
RvYucTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yYWJkNmIzNC04OTUz
LTRjNzItYTBhMi03ZWNiOWRlOGFhYmEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMmFiZDZiMzQtODk1My00
YzcyLWEwYTItN2VjYjlkZThhYWJhL2E4ODNjOTEwZjg3OTYwM2I5NjdjMDYzNmM2
ZjNlOTEyNWIzNjUxYjUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wHQQCAAEwFwMEBr4EgAMDAL5YAwQFyBrAAwQE2Jig
MA0EAgACMAcDBQAoAALgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAitJMA0GCSqG
SIb3DQEBCwUAA4IBAQC139Wqj+AESJobgVC1q2TFzNQPTCm3z+9fxOoriQE7coMo
IwMFaV7SPfXH9pRb8zkKO9jJmmsi+R9CidNwsVrqxABbrl59Z0oXhC4oF+KqrG/Y
kCIm26LWFAcRffyGfNGBsSkOHQyDrdowXZcRto+cYZOj3opQ4KQGvsaFunIGeeEJ
gtsaHR7Il5yhVSWmovC5qBrFOngjSehFntI1um42vWPhxuqrsMzRu3atb5L9EmM0
E46ibiP9Rmp1sF8sy6H+iy2SUpqu+ZVNtK6v8ryQD7JmvD/hlQRLa19VS/Fac+AU
PU+UQR9hSl1i81GQcuB8pnq6i6H7wbdhkowy6zM0
-----END CERTIFICATE-----