Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.cer
File:                     b7f1296c01cda2bce364cd2e1662759a0dfc92bd.cer (raw, json)
Hash identifier:          LmAuoM8RktPcXhg5Sq3yfQBFBy8dT5QVWfTi+/aaVrU=
Subject key identifier:   CB:8E:5F:B1:CF:1C:FC:20:81:36:1B:EB:51:E0:A2:36:F6:EB:87:9E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E15238
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:02 +0000
Certificate not after:    Fri 12 Apr 2024 16:03:01 +0000
Subordinate resources:    AS: 263248
                          IP: 170.84.108.0/22
                          IP: 200.192.236.0/22
                          IP: 2803:980::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14766648 (0xe15238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:02 2017 GMT
            Not After : Apr 12 16:03:01 2024 GMT
        Subject: CN=b7f1296c01cda2bce364cd2e1662759a0dfc92bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:87:33:01:fe:d0:fe:2c:51:a0:32:a0:02:ff:
                    42:9b:a1:c0:ac:85:6c:73:35:4e:fd:54:24:15:c2:
                    51:3b:b9:d3:f3:47:4b:85:3f:94:4e:d8:1b:90:4c:
                    18:92:39:5a:bf:f8:4b:5c:3a:62:0b:d4:d1:98:46:
                    19:1f:b0:fe:b8:a3:ad:6e:6c:3e:10:2e:39:56:5d:
                    4b:60:7d:0c:77:3c:55:37:23:16:03:cf:34:6c:da:
                    50:58:0a:5a:dc:b0:b3:94:b0:6e:c8:bf:5d:7a:38:
                    15:bf:36:b9:bf:63:26:c9:b3:12:78:b8:bd:c5:eb:
                    0d:2f:23:ac:07:5e:6a:f0:e2:83:43:bd:6c:e4:01:
                    e3:22:a5:d1:0a:ae:f1:d8:47:2e:80:ee:ab:2a:69:
                    0f:16:7c:82:9b:37:db:96:d6:9b:e9:9b:c4:b6:55:
                    63:0b:a4:2f:9d:d1:ed:87:cf:db:39:37:3e:1f:43:
                    9e:9e:16:3b:9d:c8:7b:4c:fa:f7:9c:ff:aa:61:c6:
                    70:8d:fd:d1:16:d5:1a:9e:05:ff:a2:76:f6:8a:21:
                    0a:e0:9b:88:6f:af:16:b0:b5:80:00:74:1e:39:fd:
                    d8:f9:c2:0c:91:59:0b:b7:a9:24:28:51:4d:01:75:
                    42:38:8e:a5:10:59:f0:d4:d2:23:05:f7:cd:3f:30:
                    2c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8E:5F:B1:CF:1C:FC:20:81:36:1B:EB:51:E0:A2:36:F6:EB:87:9E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.108.0/22
                  200.192.236.0/22
                IPv6:
                  2803:980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263248

    Signature Algorithm: sha256WithRSAEncryption
         26:be:9d:05:c9:72:ee:39:5d:0f:f3:b7:b7:8d:97:f4:c8:49:
         9a:a9:d7:39:b2:7c:27:f4:cf:08:e1:cd:35:9b:27:9b:27:eb:
         ba:3e:36:56:d0:5b:b4:5b:d5:71:c0:a3:7e:de:d2:2f:cb:85:
         02:53:64:8a:dd:e0:03:a8:0d:2f:84:86:4c:03:a9:6a:1d:ab:
         df:74:cf:92:26:dc:c8:7f:c8:71:ac:9c:67:01:a1:e0:c0:36:
         2f:a1:97:e9:a6:2d:da:f2:66:c1:cb:ab:c0:2f:67:f5:c2:01:
         a4:a8:5b:85:93:b0:53:c0:2b:93:02:89:e4:c9:33:f2:66:60:
         f1:87:e0:ff:30:59:ea:be:25:73:be:65:42:b6:c4:4b:8d:7b:
         93:2c:d0:1f:54:50:ae:d6:b2:72:90:2e:a6:b5:e3:77:05:e0:
         2c:c7:76:c8:0e:17:de:93:6c:39:8a:9c:0c:89:61:ea:e9:0c:
         0b:d7:c6:f9:ab:cc:da:e3:09:32:99:69:0a:12:4c:00:f7:49:
         fe:b3:b5:96:f3:17:49:fc:6d:c1:1f:ab:91:e3:03:04:6e:8e:
         55:36:e2:79:ae:bb:26:8f:77:ce:a1:32:98:b9:ce:e7:f0:f6:
         7f:c2:30:05:4c:f6:92:d0:a4:7d:cd:e8:39:06:b1:8c:21:24:
         83:82:34:60
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAOFSODANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcwMloXDTI0MDQxMjE2MDMw
MVowMzExMC8GA1UEAxMoYjdmMTI5NmMwMWNkYTJiY2UzNjRjZDJlMTY2Mjc1OWEw
ZGZjOTJiZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJeHMwH+0P4s
UaAyoAL/QpuhwKyFbHM1Tv1UJBXCUTu50/NHS4U/lE7YG5BMGJI5Wr/4S1w6YgvU
0ZhGGR+w/rijrW5sPhAuOVZdS2B9DHc8VTcjFgPPNGzaUFgKWtyws5Swbsi/XXo4
Fb82ub9jJsmzEni4vcXrDS8jrAdeavDig0O9bOQB4yKl0Qqu8dhHLoDuqyppDxZ8
gps325bWm+mbxLZVYwukL53R7YfP2zk3Ph9Dnp4WO53Ie0z695z/qmHGcI390RbV
Gp4F/6J29oohCuCbiG+vFrC1gAB0Hjn92PnCDJFZC7epJChRTQF1QjiOpRBZ8NTS
IwX3zT8wLLECAwEAAaOCAw8wggMLMB0GA1UdDgQWBBTLjl+xzxz8IIE2G+tR4KI2
9uuHnjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lYmQ0NzUxNC1mOTQw
LTQ1YmUtYmFjNC05Y2Y4ZGM4MTQwMjgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWJkNDc1MTQtZjk0MC00
NWJlLWJhYzQtOWNmOGRjODE0MDI4L2I3ZjEyOTZjMDFjZGEyYmNlMzY0Y2QyZTE2
NjI3NTlhMGRmYzkyYmQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqpUbAMEAsjA7DANBAIAAjAHAwUA
KAMJgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBFAwDQYJKoZIhvcNAQELBQAD
ggEBACa+nQXJcu45XQ/zt7eNl/TISZqp1zmyfCf0zwjhzTWbJ5sn67o+NlbQW7Rb
1XHAo37e0i/LhQJTZIrd4AOoDS+EhkwDqWodq990z5Im3Mh/yHGsnGcBoeDANi+h
l+mmLdryZsHLq8AvZ/XCAaSoW4WTsFPAK5MCieTJM/JmYPGH4P8wWeq+JXO+ZUK2
xEuNe5Ms0B9UUK7WsnKQLqa143cF4CzHdsgOF96TbDmKnAyJYerpDAvXxvmrzNrj
CTKZaQoSTAD3Sf6ztZbzF0n8bcEfq5HjAwRujlU24nmuuyaPd86hMpi5zufw9n/C
MAVM9pLQpH3N6DkGsYwhJIOCNGA=
-----END CERTIFICATE-----