Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer
File:                     bb40d10524d57adf72ab2d55530078d68f27ac5a.cer (raw, json)
Hash identifier:          s5L4ZkALCH+0IFglYjQxOCNMNaLv340rDXiPNzowmxw=
Subject key identifier:   B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6678A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/bb40d10524d57adf72ab2d55530078d68f27ac5a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2020 23:40:31 +0000
Certificate not after:    Sun 03 Dec 2023 20:07:12 +0000
Subordinate resources:    AS: 269928
                          IP: 200.108.190.0/24
                          IP: 2803:32e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14051210 (0xd6678a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  4 23:40:31 2020 GMT
            Not After : Dec  3 20:07:12 2023 GMT
        Subject: CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:84:46:42:28:19:05:c6:e7:e8:d5:66:94:
                    84:c3:5f:2a:5d:f3:92:ed:d0:38:a3:3a:66:14:69:
                    f8:fe:7a:7f:ad:61:61:1d:87:90:d5:ef:ed:e5:b2:
                    98:a7:77:76:c5:fb:bf:0d:f4:30:8b:47:2d:d7:d3:
                    78:b2:ae:fd:9e:a7:b6:a7:17:e4:59:3a:73:cf:26:
                    3e:ee:79:5a:08:92:2a:fd:a6:bb:2f:89:ac:99:ed:
                    44:14:fb:ba:e4:d5:0b:1d:16:fa:da:64:09:62:75:
                    bf:a3:1f:ce:a1:4e:d2:53:ec:67:ec:ef:7b:f3:15:
                    97:6a:8f:32:19:de:37:94:04:b6:ee:0e:a3:5a:73:
                    9a:01:9c:73:43:fc:a2:99:f6:1b:6b:29:e2:48:f1:
                    19:f3:de:16:30:ae:45:2b:eb:e4:70:93:6a:a3:d0:
                    7b:cc:33:ef:00:83:c3:20:27:31:47:11:39:af:30:
                    5e:9e:49:13:c8:ef:3c:7a:eb:cb:70:8f:76:23:31:
                    27:68:f4:fe:6d:5a:31:09:6c:a5:64:00:24:1b:13:
                    49:6b:b1:cc:81:eb:aa:6c:18:e4:df:8b:d6:47:e4:
                    99:96:5c:60:d1:1e:56:f4:c2:63:70:07:27:6f:35:
                    f5:5c:f4:7d:39:b6:bd:ed:60:a6:8c:25:47:e8:36:
                    d7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/bb40d10524d57adf72ab2d55530078d68f27ac5a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.190.0/24
                IPv6:
                  2803:32e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269928

    Signature Algorithm: sha256WithRSAEncryption
         a5:b3:29:42:41:7d:aa:24:27:85:14:ac:2d:0a:17:4c:73:a5:
         1d:e1:25:ad:0d:75:68:6a:4d:bd:e8:1a:de:61:25:0b:56:3a:
         ef:e2:81:ba:86:39:d2:aa:01:fd:ef:2d:17:db:48:c9:de:06:
         f9:82:80:94:f2:dd:7b:30:b0:d2:f8:f5:52:22:67:f5:d8:88:
         a1:10:1b:a8:0c:3f:b7:c4:76:83:a1:ec:57:1c:bd:26:58:92:
         b3:e9:92:31:20:d2:e4:6d:06:d9:3f:0f:1e:53:2e:ae:54:5c:
         6e:3f:2f:df:dc:21:0b:95:2e:5b:22:34:76:63:cd:45:95:a6:
         0d:9b:fb:47:42:11:d8:8b:9c:73:bb:21:40:a8:00:43:ad:fb:
         a5:0e:60:2f:67:10:29:7f:28:0b:70:19:13:70:7f:20:5f:16:
         8d:08:35:ba:d4:23:92:9b:1d:63:3a:8f:03:7a:6a:d8:f6:22:
         8d:35:70:f6:2f:28:d2:26:cf:76:bc:af:4e:d6:5f:3f:c0:18:
         9f:58:0f:5d:46:1a:18:30:58:b6:4d:37:52:6f:ee:cd:29:35:
         c8:20:c4:3d:5b:b6:42:8b:5e:c8:d6:67:7c:bb:ff:0a:12:96:
         83:7d:62:da:74:d1:f5:b7:64:4f:d9:60:18:2d:67:85:1c:26:
         ff:36:5a:fe
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANZnijANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDIwNDIzNDAzMVoXDTIzMTIwMzIwMDcx
MlowMzExMC8GA1UEAxMoYmI0MGQxMDUyNGQ1N2FkZjcyYWIyZDU1NTMwMDc4ZDY4
ZjI3YWM1YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJwNhEZCKBkF
xufo1WaUhMNfKl3zku3QOKM6ZhRp+P56f61hYR2HkNXv7eWymKd3dsX7vw30MItH
LdfTeLKu/Z6ntqcX5Fk6c88mPu55WgiSKv2muy+JrJntRBT7uuTVCx0W+tpkCWJ1
v6MfzqFO0lPsZ+zve/MVl2qPMhneN5QEtu4Oo1pzmgGcc0P8opn2G2sp4kjxGfPe
FjCuRSvr5HCTaqPQe8wz7wCDwyAnMUcROa8wXp5JE8jvPHrry3CPdiMxJ2j0/m1a
MQlspWQAJBsTSWuxzIHrqmwY5N+L1kfkmZZcYNEeVvTCY3AHJ2819Vz0fTm2ve1g
powlR+g217ECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSzndE1I1jKMkr/uGvgW3oy
vshsUjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lYWM3ZGMyNS0zZGFm
LTQ3ZDctOTk0Yi1lZTQ4NzE0MmMwZGQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWFjN2RjMjUtM2RhZi00
N2Q3LTk5NGItZWU0ODcxNDJjMGRkL2JiNDBkMTA1MjRkNTdhZGY3MmFiMmQ1NTUz
MDA3OGQ2OGYyN2FjNWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMhsvjANBAIAAjAHAwUAKAMy4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHmgwDQYJKoZIhvcNAQELBQADggEBAKWz
KUJBfaokJ4UUrC0KF0xzpR3hJa0NdWhqTb3oGt5hJQtWOu/igbqGOdKqAf3vLRfb
SMneBvmCgJTy3XswsNL49VIiZ/XYiKEQG6gMP7fEdoOh7FccvSZYkrPpkjEg0uRt
Btk/Dx5TLq5UXG4/L9/cIQuVLlsiNHZjzUWVpg2b+0dCEdiLnHO7IUCoAEOt+6UO
YC9nECl/KAtwGRNwfyBfFo0INbrUI5KbHWM6jwN6atj2Io01cPYvKNImz3a8r07W
Xz/AGJ9YD11GGhgwWLZNN1Jv7s0pNcggxD1btkKLXsjWZ3y7/woSloN9Ytp00fW3
ZE/ZYBgtZ4UcJv82Wv4=
-----END CERTIFICATE-----