Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9478f23e3a1abb0f6d0fa43aa951eb27d6ec00c.cer
File:                     b9478f23e3a1abb0f6d0fa43aa951eb27d6ec00c.cer (raw, json)
Hash identifier:          BAvZrd5/G4fuqISUFdfpoxU2TFTrJXHAarlVl1gwUpM=
Subject key identifier:   11:6A:C1:D9:55:1F:E3:5F:A5:A7:BE:4D:7F:4E:AF:D4:C2:39:B9:AA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E27E03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c752683c-8f51-490e-8a07-751745131d2b/b9478f23e3a1abb0f6d0fa43aa951eb27d6ec00c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c752683c-8f51-490e-8a07-751745131d2b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 28 Nov 2017 15:16:08 +0000
Certificate not after:    Wed 24 Apr 2024 20:10:45 +0000
Subordinate resources:    AS: 263789
                          IP: 138.121.84.0/22
                          IP: 2803:8c40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14843395 (0xe27e03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 28 15:16:08 2017 GMT
            Not After : Apr 24 20:10:45 2024 GMT
        Subject: CN=b9478f23e3a1abb0f6d0fa43aa951eb27d6ec00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:0f:44:78:61:af:28:a2:37:b9:d5:1c:e7:
                    dd:a2:6a:5f:49:f3:1d:7c:d8:74:73:2d:21:d4:1e:
                    b6:e7:c0:41:54:b0:b7:ec:8f:fe:86:1c:74:aa:e6:
                    32:d9:67:e3:b9:b0:5a:97:2b:2c:30:c1:b8:61:82:
                    8c:d5:d9:f4:61:2a:58:35:ad:a6:e3:41:89:56:d4:
                    ff:c1:b7:92:0c:bd:3e:2a:fb:dd:05:e5:91:7e:2a:
                    46:1d:7e:a7:af:2c:f4:eb:04:58:d4:a5:34:2a:83:
                    a4:cc:3d:51:9e:ac:76:cf:3c:83:3c:ed:e5:b4:b2:
                    a8:62:42:f0:8b:a2:5d:aa:c1:56:ef:d3:7c:ad:bb:
                    30:f5:df:7d:31:08:97:f9:ad:e9:bb:83:73:ab:32:
                    4d:41:29:8e:a6:39:8b:15:20:da:7b:99:f5:a9:6b:
                    f0:a2:21:ce:69:85:e5:ec:93:ab:61:58:59:91:65:
                    2b:58:a1:5c:8b:da:9a:cf:c6:65:e7:eb:f6:71:99:
                    45:3b:21:72:f6:0a:54:b1:9e:2d:93:57:81:15:ec:
                    b6:81:46:94:f8:68:42:9d:37:e8:fb:33:cc:42:db:
                    7a:11:c6:f0:b5:08:8f:1e:a0:fb:b6:b8:58:31:55:
                    34:cf:1a:15:aa:28:68:08:e0:cb:fa:99:58:3d:74:
                    76:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6A:C1:D9:55:1F:E3:5F:A5:A7:BE:4D:7F:4E:AF:D4:C2:39:B9:AA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c752683c-8f51-490e-8a07-751745131d2b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c752683c-8f51-490e-8a07-751745131d2b/b9478f23e3a1abb0f6d0fa43aa951eb27d6ec00c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.84.0/22
                IPv6:
                  2803:8c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263789

    Signature Algorithm: sha256WithRSAEncryption
         4c:02:ec:58:db:6d:68:86:ab:b8:92:36:9b:51:81:c1:10:e5:
         4a:06:df:69:ac:f6:5e:06:51:3e:61:e8:ac:b8:80:92:e9:10:
         46:d4:62:4a:8f:d1:39:f2:86:ff:39:13:bc:3d:49:1a:35:8e:
         e5:ca:39:17:a4:d5:84:f3:a1:c1:08:41:79:f2:67:3c:91:23:
         a8:46:92:9e:11:da:f2:aa:8d:88:31:8d:01:67:d6:39:28:af:
         7c:8a:60:c7:e6:6c:d3:ef:0c:0c:77:e2:ed:00:b0:c2:5b:2f:
         ea:59:a1:b8:2d:10:3e:e9:ce:15:bd:f7:6f:92:aa:1d:da:09:
         17:51:1a:03:4d:26:9d:af:b9:23:a0:5d:c0:a6:4e:1c:e5:25:
         25:28:e3:40:17:ec:a8:ed:b1:2b:d3:94:ae:18:01:66:1a:ae:
         02:49:a3:cc:c8:41:5c:53:2a:95:c4:ef:88:65:8a:c9:98:de:
         fd:c9:24:3a:c9:dd:95:d5:6b:c3:a5:40:9d:36:34:72:c1:cb:
         d4:b9:a4:8b:b4:32:e4:d4:c8:6d:f5:e7:c3:20:bf:22:71:8c:
         2d:b6:61:e2:cd:24:44:91:d9:a3:51:fb:e3:41:a2:fd:53:19:
         61:75:71:1c:b0:64:62:28:5f:49:18:bf:0a:b9:3a:94:db:30:
         cf:10:08:07
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOJ+AzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTEyODE1MTYwOFoXDTI0MDQyNDIwMTA0
NVowMzExMC8GA1UEAxMoYjk0NzhmMjNlM2ExYWJiMGY2ZDBmYTQzYWE5NTFlYjI3
ZDZlYzAwYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ8xD0R4Ya8o
oje51Rzn3aJqX0nzHXzYdHMtIdQetufAQVSwt+yP/oYcdKrmMtln47mwWpcrLDDB
uGGCjNXZ9GEqWDWtpuNBiVbU/8G3kgy9Pir73QXlkX4qRh1+p68s9OsEWNSlNCqD
pMw9UZ6sds88gzzt5bSyqGJC8IuiXarBVu/TfK27MPXffTEIl/mt6buDc6syTUEp
jqY5ixUg2nuZ9alr8KIhzmmF5eyTq2FYWZFlK1ihXIvams/GZefr9nGZRTshcvYK
VLGeLZNXgRXstoFGlPhoQp036PszzELbehHG8LUIjx6g+7a4WDFVNM8aFaooaAjg
y/qZWD10dhUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQRasHZVR/jX6Wnvk1/Tq/U
wjm5qjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jNzUyNjgzYy04ZjUx
LTQ5MGUtOGEwNy03NTE3NDUxMzFkMmIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzc1MjY4M2MtOGY1MS00
OTBlLThhMDctNzUxNzQ1MTMxZDJiL2I5NDc4ZjIzZTNhMWFiYjBmNmQwZmE0M2Fh
OTUxZWIyN2Q2ZWMwMGMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAop5VDANBAIAAjAHAwUAKAOMQDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBm0wDQYJKoZIhvcNAQELBQADggEBAEwC
7FjbbWiGq7iSNptRgcEQ5UoG32ms9l4GUT5h6Ky4gJLpEEbUYkqP0Tnyhv85E7w9
SRo1juXKORek1YTzocEIQXnyZzyRI6hGkp4R2vKqjYgxjQFn1jkor3yKYMfmbNPv
DAx34u0AsMJbL+pZobgtED7pzhW992+Sqh3aCRdRGgNNJp2vuSOgXcCmThzlJSUo
40AX7KjtsSvTlK4YAWYargJJo8zIQVxTKpXE74hlismY3v3JJDrJ3ZXVa8OlQJ02
NHLBy9S5pIu0MuTUyG3158MgvyJxjC22YeLNJESR2aNR++NBov1TGWF1cRywZGIo
X0kYvwq5OpTbMM8QCAc=
-----END CERTIFICATE-----