Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aef9fcb57e330becab3bfc6b2df780b9d23861cc.cer
File:                     aef9fcb57e330becab3bfc6b2df780b9d23861cc.cer (raw, json)
Hash identifier:          qj4xJVaRX89n34aC9UbRXHK4DzeCDtqpzPYNJuObHVo=
Subject key identifier:   65:54:E0:16:C8:17:9A:BB:D7:8D:61:85:E7:4F:E0:2A:5E:D6:D5:FB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FAD682
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e11e4b56-56b0-4c90-a0b5-6406c4e1a7a8/aef9fcb57e330becab3bfc6b2df780b9d23861cc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e11e4b56-56b0-4c90-a0b5-6406c4e1a7a8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2017 17:58:24 +0000
Certificate not after:    Sun 27 Oct 2024 04:00:00 +0000
Subordinate resources:    AS: 266687
                          IP: 45.229.44.0/22
                          IP: 2803:e520::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16438914 (0xfad682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 27 17:58:24 2017 GMT
            Not After : Oct 27 04:00:00 2024 GMT
        Subject: CN=aef9fcb57e330becab3bfc6b2df780b9d23861cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cf:e2:7a:ff:31:d6:62:3d:78:37:91:2c:23:
                    db:2b:e1:fc:ba:93:90:9d:15:8a:3a:d3:c8:07:96:
                    5f:66:dc:b7:57:4e:ee:f7:d2:8b:d8:e5:11:da:db:
                    e0:d8:84:37:bc:be:ea:34:f4:6f:66:f1:66:9c:7a:
                    ba:c8:2f:28:9f:a3:a8:79:c4:aa:c7:d5:39:b4:11:
                    1f:2b:6c:64:03:e1:29:97:e3:74:74:83:99:b8:ac:
                    5d:70:94:0c:26:b8:68:73:2d:82:30:e4:83:c6:2b:
                    bf:4a:f8:94:af:72:67:0a:eb:c6:c0:c8:4d:17:a7:
                    e9:34:81:f2:01:4f:63:8d:28:1c:48:49:31:1b:99:
                    ca:1e:35:e0:1a:c3:c0:14:97:c5:19:fd:86:0c:4c:
                    b9:f4:52:89:4b:7f:ae:77:d5:a0:a8:d5:e6:c1:68:
                    29:0e:2f:28:08:64:8c:66:c4:b6:07:c0:97:59:bb:
                    c4:cc:7a:0c:43:be:64:20:09:1d:41:56:91:27:88:
                    46:95:9f:f0:6e:0a:f3:92:89:38:a0:3c:07:2a:c5:
                    8c:a0:7b:e7:6c:cd:83:17:3e:85:e0:9d:04:aa:2b:
                    a2:22:25:c8:0d:0f:c7:2c:72:34:b9:73:21:99:1b:
                    cc:d0:4e:9c:c3:87:e8:ae:f3:25:4f:dd:4f:75:ae:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:54:E0:16:C8:17:9A:BB:D7:8D:61:85:E7:4F:E0:2A:5E:D6:D5:FB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e11e4b56-56b0-4c90-a0b5-6406c4e1a7a8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e11e4b56-56b0-4c90-a0b5-6406c4e1a7a8/aef9fcb57e330becab3bfc6b2df780b9d23861cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.44.0/22
                IPv6:
                  2803:e520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266687

    Signature Algorithm: sha256WithRSAEncryption
         8b:7e:c1:c9:09:19:c0:73:00:04:53:85:29:9b:c7:4f:b6:84:
         56:e6:e9:a8:57:ec:7e:9e:65:7c:1c:8e:c3:5c:b9:63:a1:30:
         07:12:bb:5c:cb:e8:e1:c4:f4:9b:d7:9b:60:1c:01:03:0d:c7:
         69:19:a2:3a:f5:42:9a:c8:d4:e6:99:f2:52:39:fe:db:bf:f6:
         fb:2f:b5:a9:0f:24:af:b9:95:1f:77:26:5b:14:06:3e:28:ed:
         62:47:54:14:34:36:4d:16:2f:9a:68:fa:11:59:c5:b5:58:26:
         ae:3d:cf:b6:01:4e:36:73:9d:e9:b5:76:a6:38:78:55:5c:19:
         bb:32:1d:5a:e0:40:83:ff:5e:4d:fd:0e:c8:50:38:20:10:6d:
         f3:ee:16:1c:53:a9:4f:fb:7d:79:3c:90:ee:c5:56:74:46:91:
         c0:24:3b:5f:37:f3:f2:d0:6d:a4:8e:74:bd:08:e2:8e:4b:43:
         55:46:a4:25:1a:7e:63:1f:c3:e9:22:12:41:b3:ed:6f:2c:d5:
         d8:f3:63:7e:52:75:2c:ff:31:ed:2b:10:61:70:fe:45:f7:78:
         44:96:84:4f:bb:0d:55:06:35:a4:4d:df:cf:c7:04:05:c8:4f:
         23:c2:63:61:ef:ce:7c:84:db:03:ec:e0:e8:14:71:5c:4d:83:
         82:44:19:85
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPrWgjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTIyNzE3NTgyNFoXDTI0MTAyNzA0MDAw
MFowMzExMC8GA1UEAxMoYWVmOWZjYjU3ZTMzMGJlY2FiM2JmYzZiMmRmNzgwYjlk
MjM4NjFjYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIPP4nr/MdZi
PXg3kSwj2yvh/LqTkJ0VijrTyAeWX2bct1dO7vfSi9jlEdrb4NiEN7y+6jT0b2bx
Zpx6usgvKJ+jqHnEqsfVObQRHytsZAPhKZfjdHSDmbisXXCUDCa4aHMtgjDkg8Yr
v0r4lK9yZwrrxsDITRen6TSB8gFPY40oHEhJMRuZyh414BrDwBSXxRn9hgxMufRS
iUt/rnfVoKjV5sFoKQ4vKAhkjGbEtgfAl1m7xMx6DEO+ZCAJHUFWkSeIRpWf8G4K
85KJOKA8ByrFjKB752zNgxc+heCdBKoroiIlyA0PxyxyNLlzIZkbzNBOnMOH6K7z
JU/dT3WuirkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRlVOAWyBeau9eNYYXnT+Aq
XtbV+zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lMTFlNGI1Ni01NmIw
LTRjOTAtYTBiNS02NDA2YzRlMWE3YTgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTExZTRiNTYtNTZiMC00
YzkwLWEwYjUtNjQwNmM0ZTFhN2E4L2FlZjlmY2I1N2UzMzBiZWNhYjNiZmM2YjJk
Zjc4MGI5ZDIzODYxY2MubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3lLDANBAIAAjAHAwUAKAPlIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEb8wDQYJKoZIhvcNAQELBQADggEBAIt+
wckJGcBzAARThSmbx0+2hFbm6ahX7H6eZXwcjsNcuWOhMAcSu1zL6OHE9JvXm2Ac
AQMNx2kZojr1QprI1OaZ8lI5/tu/9vsvtakPJK+5lR93JlsUBj4o7WJHVBQ0Nk0W
L5po+hFZxbVYJq49z7YBTjZznem1dqY4eFVcGbsyHVrgQIP/Xk39DshQOCAQbfPu
FhxTqU/7fXk8kO7FVnRGkcAkO1838/LQbaSOdL0I4o5LQ1VGpCUafmMfw+kiEkGz
7W8s1djzY35SdSz/Me0rEGFw/kX3eESWhE+7DVUGNaRN38/HBAXITyPCY2HvznyE
2wPs4OgUcVxNg4JEGYU=
-----END CERTIFICATE-----