Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8e12cca2129bde3aeb4d1487df86eba9960d067.cer
File:                     a8e12cca2129bde3aeb4d1487df86eba9960d067.cer (raw, json)
Hash identifier:          OFrCCbz2UyDeyTB+AijVxN/1dqTuw5X0aE1Q9Emo+gg=
Subject key identifier:   E9:2B:09:39:E8:2A:A8:A4:6C:8E:8F:E1:58:E9:0D:A2:33:D7:97:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E521D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/a8e12cca2129bde3aeb4d1487df86eba9960d067.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Jul 2019 17:51:24 +0000
Certificate not after:    Mon 13 May 2024 14:21:27 +0000
Subordinate resources:    AS: 265771
                          IP: 128.201.108.0/22
                          IP: 2803:d7c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15016405 (0xe521d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 10 17:51:24 2019 GMT
            Not After : May 13 14:21:27 2024 GMT
        Subject: CN=a8e12cca2129bde3aeb4d1487df86eba9960d067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:45:19:c1:75:38:2c:d3:41:2c:df:d6:03:
                    a5:0f:aa:0c:37:18:9f:79:af:55:35:ae:39:39:09:
                    d2:60:7b:b1:84:ea:dd:d3:dd:f7:33:52:9c:00:d1:
                    2f:ec:81:01:e7:38:53:26:19:83:02:e9:a9:3e:96:
                    38:7a:86:9f:ff:31:d0:6f:c0:49:6a:70:94:de:13:
                    e2:c7:2b:54:58:db:ca:7a:6f:43:5c:fc:2b:d2:9c:
                    f8:50:10:9a:fe:77:d1:e8:45:48:9f:b0:8b:4d:c4:
                    8a:55:4a:87:23:92:80:df:76:d6:d6:b9:4a:79:2b:
                    af:f4:e5:db:e4:c3:e0:cc:6a:a9:ef:77:89:57:1e:
                    c5:b7:4f:89:80:46:cd:7e:0f:73:df:83:4e:dc:1e:
                    26:58:8f:53:45:2e:7f:70:af:68:9d:51:7a:b6:bb:
                    43:17:f1:a2:60:d4:fb:df:ac:6e:05:7d:4c:41:12:
                    20:ab:14:cb:0d:e0:8e:c2:70:77:28:b2:05:73:58:
                    08:ba:b9:56:d0:ae:f3:d2:d3:62:0b:53:2c:03:02:
                    93:20:2b:30:b4:40:66:43:0d:64:09:45:42:db:9f:
                    aa:f7:d7:99:f0:1a:1f:fe:30:c4:f8:89:36:f7:81:
                    95:e6:da:30:5d:b1:a9:80:80:c5:f4:6d:90:f0:27:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2B:09:39:E8:2A:A8:A4:6C:8E:8F:E1:58:E9:0D:A2:33:D7:97:A8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/a8e12cca2129bde3aeb4d1487df86eba9960d067.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.108.0/22
                IPv6:
                  2803:d7c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265771

    Signature Algorithm: sha256WithRSAEncryption
         5a:33:bc:85:e8:53:10:0f:32:b3:38:44:f1:24:82:1c:d4:9a:
         b1:ba:e5:af:9d:d9:1c:84:14:28:7b:fc:ff:d3:0e:3a:b1:ad:
         d3:0d:ad:b0:4e:b6:89:d3:89:51:37:93:08:b9:3a:bf:36:ec:
         7b:57:f1:25:79:8b:05:94:50:f3:fe:a9:f1:08:43:d8:17:8d:
         17:c3:6e:3b:ac:2e:02:84:c0:b5:cd:3d:c1:b0:9d:6e:9f:94:
         43:68:32:d2:0b:a5:6a:69:a7:c1:58:8e:8c:70:8a:b4:f7:90:
         05:5a:53:66:d1:88:5d:3b:be:87:f3:59:f8:85:24:54:64:7b:
         48:b1:07:20:38:c9:b6:5a:09:68:d5:01:eb:fd:5a:1e:32:52:
         b1:28:2a:48:a7:ce:91:0f:1b:e1:38:b1:a7:db:11:a0:68:2a:
         c6:f1:cc:49:dc:93:30:e2:95:5e:e1:34:f3:07:0f:f8:ac:65:
         4e:6b:0b:e9:65:b2:cc:e0:ea:46:1e:0b:a9:9b:10:79:4c:57:
         f3:26:38:4f:19:a1:c5:5b:7f:d0:84:4d:3e:76:49:11:d2:37:
         b1:64:74:51:57:55:b6:0c:e6:a9:61:b0:b3:47:30:5b:83:dc:
         9a:3d:fb:75:cc:0a:0f:81:ae:d0:66:57:12:23:62:01:d4:b6:
         1a:d3:17:a2
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOUh1TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDcxMDE3NTEyNFoXDTI0MDUxMzE0MjEy
N1owMzExMC8GA1UEAxMoYThlMTJjY2EyMTI5YmRlM2FlYjRkMTQ4N2RmODZlYmE5
OTYwZDA2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKYLRRnBdTgs
00Es39YDpQ+qDDcYn3mvVTWuOTkJ0mB7sYTq3dPd9zNSnADRL+yBAec4UyYZgwLp
qT6WOHqGn/8x0G/ASWpwlN4T4scrVFjbynpvQ1z8K9Kc+FAQmv530ehFSJ+wi03E
ilVKhyOSgN921ta5Snkrr/Tl2+TD4Mxqqe93iVcexbdPiYBGzX4Pc9+DTtweJliP
U0Uuf3CvaJ1Rera7QxfxomDU+9+sbgV9TEESIKsUyw3gjsJwdyiyBXNYCLq5VtCu
89LTYgtTLAMCkyArMLRAZkMNZAlFQtufqvfXmfAaH/4wxPiJNveBlebaMF2xqYCA
xfRtkPAnVokCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTpKwk56CqopGyOj+FY6Q2i
M9eXqDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mOWY1NjQ2ZS0zMzAz
LTRlYjEtODBhMi1kYmVjYzVkOTM1OWIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjlmNTY0NmUtMzMwMy00
ZWIxLTgwYTItZGJlY2M1ZDkzNTliL2E4ZTEyY2NhMjEyOWJkZTNhZWI0ZDE0ODdk
Zjg2ZWJhOTk2MGQwNjcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoDJbDANBAIAAjAHAwUAKAPXwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDiswDQYJKoZIhvcNAQELBQADggEBAFoz
vIXoUxAPMrM4RPEkghzUmrG65a+d2RyEFCh7/P/TDjqxrdMNrbBOtonTiVE3kwi5
Or827HtX8SV5iwWUUPP+qfEIQ9gXjRfDbjusLgKEwLXNPcGwnW6flENoMtILpWpp
p8FYjoxwirT3kAVaU2bRiF07vofzWfiFJFRke0ixByA4ybZaCWjVAev9Wh4yUrEo
KkinzpEPG+E4safbEaBoKsbxzEnckzDilV7hNPMHD/isZU5rC+llsszg6kYeC6mb
EHlMV/MmOE8ZocVbf9CETT52SRHSN7FkdFFXVbYM5qlhsLNHMFuD3Jo9+3XMCg+B
rtBmVxIjYgHUthrTF6I=
-----END CERTIFICATE-----