Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcda816a9478e5fdfa19276ceb254457fbb05eaa.cer
File:                     bcda816a9478e5fdfa19276ceb254457fbb05eaa.cer (raw, json)
Hash identifier:          boHqBK9FBGA5LeX3t3JwmIsS5L8WPHC/VYw25M9EOiQ=
Subject key identifier:   68:71:C9:FB:8A:26:A0:33:D0:A0:3F:8F:E3:4B:FE:EF:A5:21:72:CD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DEA3E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3366c15a-4f4b-4255-a365-e497a746bf44/bcda816a9478e5fdfa19276ceb254457fbb05eaa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3366c15a-4f4b-4255-a365-e497a746bf44/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:56 +0000
Certificate not after:    Fri 15 Mar 2024 17:41:13 +0000
Subordinate resources:    AS: 263691
                          IP: 198.49.128.0/22
                          IP: 2803:3e80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14590950 (0xdea3e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:56 2017 GMT
            Not After : Mar 15 17:41:13 2024 GMT
        Subject: CN=bcda816a9478e5fdfa19276ceb254457fbb05eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fe:3d:32:97:1a:a9:58:97:46:a0:04:42:62:
                    4c:8a:4f:d6:8d:d0:53:88:ba:c9:1d:65:60:c3:e2:
                    cf:f5:a4:bd:8d:b7:68:14:dc:71:b3:e5:24:e5:8b:
                    04:08:74:dd:88:2d:05:eb:9e:d5:ee:b2:21:8d:0c:
                    5c:ec:f5:df:7c:1e:cf:d0:af:55:6e:46:51:27:61:
                    2b:d0:93:62:fb:b9:5b:ab:be:6e:2f:d1:19:92:dd:
                    dd:df:d0:18:b5:d9:69:da:b0:55:66:17:82:5d:c8:
                    03:2b:be:10:25:90:72:4e:64:1e:f3:13:ab:00:1d:
                    b0:24:0c:be:0a:50:03:94:11:42:fd:1a:b1:05:5d:
                    85:4f:41:11:33:d2:17:1f:31:e4:7c:f8:d2:44:82:
                    d6:77:5b:9a:41:cd:49:ce:fe:89:82:03:b2:04:8b:
                    9a:96:6b:7d:de:6c:06:09:cc:bf:72:b6:01:2a:45:
                    1f:d4:63:d6:72:fc:e7:a2:ff:5b:8c:19:6a:5f:04:
                    35:a4:32:f0:38:2d:62:1b:1f:73:ee:ef:07:b5:e1:
                    84:b4:6f:61:92:4d:ab:02:3e:c3:42:2c:ad:d0:7b:
                    7a:f4:31:f4:93:46:54:9b:51:4c:9c:58:1f:25:af:
                    a0:29:ea:42:bd:fb:04:10:5f:67:9a:2b:4c:5b:59:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:71:C9:FB:8A:26:A0:33:D0:A0:3F:8F:E3:4B:FE:EF:A5:21:72:CD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3366c15a-4f4b-4255-a365-e497a746bf44/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3366c15a-4f4b-4255-a365-e497a746bf44/bcda816a9478e5fdfa19276ceb254457fbb05eaa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.128.0/22
                IPv6:
                  2803:3e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263691

    Signature Algorithm: sha256WithRSAEncryption
         46:5a:78:72:4c:d6:71:61:e9:71:2b:de:0b:be:9c:ef:67:12:
         5e:5b:50:5d:9a:2e:c4:e9:1c:fa:3d:db:ab:54:33:08:ae:2f:
         11:ef:3e:47:20:6c:89:ff:b6:af:87:c1:17:63:20:60:a6:13:
         fe:b1:bb:0e:19:fb:9e:5a:25:45:20:ce:e3:44:0c:b6:b3:98:
         17:b4:b4:21:d7:d0:bf:64:7a:86:e5:03:19:16:c6:b4:ed:d0:
         91:e0:be:ba:e3:ef:4c:ac:e9:19:a8:ce:67:ab:8e:ef:1a:0f:
         40:1b:5c:4a:92:a0:69:bc:19:45:6e:10:db:11:ff:b3:1e:05:
         48:44:16:fc:41:05:11:37:ec:ca:c2:ba:33:e7:01:6e:ab:46:
         97:4e:2f:f7:c8:32:95:44:30:1a:cd:eb:b0:ad:6a:5e:15:58:
         97:04:6d:84:d3:5f:74:e3:6c:f0:38:18:a5:df:a9:65:8b:d4:
         2f:b1:2b:e5:8f:a7:cf:7c:1a:bd:8d:0b:21:ac:08:26:e9:4a:
         f3:b8:39:e2:36:fc:a0:b7:f7:6d:9a:98:07:41:61:b4:c3:b3:
         03:7b:e7:7c:04:13:26:04:d8:bc:9d:57:e3:a0:9a:a8:0b:29:
         1f:32:a1:8a:6f:29:5c:67:2e:c2:ef:6e:a1:20:d3:83:90:99:
         ae:86:50:df
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAN6j5jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1NloXDTI0MDMxNTE3NDEx
M1owMzExMC8GA1UEAxMoYmNkYTgxNmE5NDc4ZTVmZGZhMTkyNzZjZWIyNTQ0NTdm
YmIwNWVhYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIf+PTKXGqlY
l0agBEJiTIpP1o3QU4i6yR1lYMPiz/WkvY23aBTccbPlJOWLBAh03YgtBeue1e6y
IY0MXOz133wez9CvVW5GUSdhK9CTYvu5W6u+bi/RGZLd3d/QGLXZadqwVWYXgl3I
Ayu+ECWQck5kHvMTqwAdsCQMvgpQA5QRQv0asQVdhU9BETPSFx8x5Hz40kSC1ndb
mkHNSc7+iYIDsgSLmpZrfd5sBgnMv3K2ASpFH9Rj1nL856L/W4wZal8ENaQy8Dgt
Yhsfc+7vB7XhhLRvYZJNqwI+w0IsrdB7evQx9JNGVJtRTJxYHyWvoCnqQr37BBBf
Z5orTFtZlLcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRoccn7iiagM9CgP4/jS/7v
pSFyzTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zMzY2YzE1YS00ZjRi
LTQyNTUtYTM2NS1lNDk3YTc0NmJmNDQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzM2NmMxNWEtNGY0Yi00
MjU1LWEzNjUtZTQ5N2E3NDZiZjQ0L2JjZGE4MTZhOTQ3OGU1ZmRmYTE5Mjc2Y2Vi
MjU0NDU3ZmJiMDVlYWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsYxgDANBAIAAjAHAwUAKAM+gDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBgswDQYJKoZIhvcNAQELBQADggEBAEZa
eHJM1nFh6XEr3gu+nO9nEl5bUF2aLsTpHPo926tUMwiuLxHvPkcgbIn/tq+HwRdj
IGCmE/6xuw4Z+55aJUUgzuNEDLazmBe0tCHX0L9keoblAxkWxrTt0JHgvrrj70ys
6Rmozmerju8aD0AbXEqSoGm8GUVuENsR/7MeBUhEFvxBBRE37MrCujPnAW6rRpdO
L/fIMpVEMBrN67Ctal4VWJcEbYTTX3TjbPA4GKXfqWWL1C+xK+WPp898Gr2NCyGs
CCbpSvO4OeI2/KC3922amAdBYbTDswN753wEEyYE2LydV+OgmqgLKR8yoYpvKVxn
LsLvbqEg04OQma6GUN8=
-----END CERTIFICATE-----