Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd3bd11871d7a19dd2b97bb97aaad07aef4beeda.cer
File:                     bd3bd11871d7a19dd2b97bb97aaad07aef4beeda.cer (raw, json)
Hash identifier:          2aBM2N9qE1PT1aMyPQ8FFJLam5MjqfdiTjBS1dh4Xk4=
Subject key identifier:   43:2A:75:F9:AD:3F:D6:4D:E9:E8:66:6F:38:0A:6D:B9:56:57:E9:33
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F33AFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/bd3bd11871d7a19dd2b97bb97aaad07aef4beeda.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 11 Dec 2019 10:43:44 +0000
Certificate not after:    Thu 29 Aug 2024 05:13:19 +0000
Subordinate resources:    AS: 269824
                          IP: 45.186.104.0/22
                          IP: 2803:9760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15940350 (0xf33afe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 11 10:43:44 2019 GMT
            Not After : Aug 29 05:13:19 2024 GMT
        Subject: CN=bd3bd11871d7a19dd2b97bb97aaad07aef4beeda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:39:f7:50:68:64:8d:0d:59:d5:a9:0e:25:
                    c2:b7:46:1e:a8:ad:80:ff:5a:f6:99:8a:dc:10:85:
                    5f:f1:52:8a:75:1a:cd:df:68:d6:ea:11:80:b6:54:
                    f6:c9:33:08:fe:63:33:3c:51:0c:e4:6b:8b:3b:9f:
                    a9:9d:12:78:e8:14:a5:44:9e:67:ef:ff:57:bd:fc:
                    b1:4a:2f:f6:9d:83:f8:d3:d8:a2:7e:ed:76:b9:dc:
                    1c:03:36:fa:ac:1b:19:98:76:90:ac:1a:2a:6b:44:
                    0d:ad:e2:99:fe:0e:e0:67:5e:08:67:f0:68:40:8c:
                    34:aa:b7:f5:33:72:0c:15:b9:8e:e6:68:f4:3b:ab:
                    8e:a5:56:63:d5:01:06:b8:96:02:4d:8f:d7:51:a9:
                    18:4d:b3:42:72:0a:45:58:96:f6:8f:3c:98:06:27:
                    65:26:db:7d:6b:f4:fd:5c:b7:e5:87:90:ac:22:76:
                    a8:99:c8:a8:5f:95:db:af:8c:fe:23:70:c5:59:c0:
                    58:13:de:9e:35:ff:68:53:a5:b9:87:5d:59:52:0c:
                    1c:ab:6b:bb:56:6e:bb:89:da:d4:ce:1f:eb:39:b9:
                    12:2f:45:1e:90:bd:53:fe:b6:85:9d:00:28:79:4a:
                    4b:99:3d:cb:9a:b7:26:eb:58:31:cb:0c:40:d9:9a:
                    3c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2A:75:F9:AD:3F:D6:4D:E9:E8:66:6F:38:0A:6D:B9:56:57:E9:33
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/bd3bd11871d7a19dd2b97bb97aaad07aef4beeda.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.104.0/22
                IPv6:
                  2803:9760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269824

    Signature Algorithm: sha256WithRSAEncryption
         99:ba:22:3e:f0:35:6a:69:7c:7b:48:3a:f1:8f:67:5d:e9:9e:
         95:5c:6e:cc:e9:fb:68:c8:2e:0f:5d:7e:8c:f6:7e:9f:70:c0:
         21:e8:64:ab:3d:19:3f:21:9e:be:3f:74:3f:16:a0:50:b4:4b:
         2a:ff:78:b6:30:25:99:a7:14:82:12:fe:46:5c:2b:f3:9e:ae:
         86:ee:80:5b:c6:c6:d1:52:54:b2:d3:97:c3:68:a2:0f:df:6f:
         f0:f0:86:92:ce:48:ab:ab:ce:84:df:3c:9b:8f:74:a0:74:e7:
         9d:53:15:27:3c:5f:15:f5:15:12:7f:5b:21:03:84:f9:5f:41:
         66:0b:3e:ff:2f:3d:be:41:e0:47:13:b7:39:14:d6:ac:99:a6:
         db:a6:0a:7a:10:a1:c1:22:2d:f0:57:79:cf:48:69:41:ac:67:
         c5:5a:3c:fb:0d:c7:e8:2a:5b:3c:bf:6b:da:dd:68:bc:e9:44:
         c0:22:35:fb:c5:09:00:55:c3:9d:74:2c:56:16:7f:9a:b3:a0:
         06:aa:30:a4:a2:51:6b:d9:b4:6a:d9:89:fd:c2:09:d7:48:a3:
         7e:e7:5b:e7:b7:7f:85:bb:a7:eb:21:42:ec:71:27:93:d5:52:
         a6:95:42:b7:43:f6:47:dc:ba:02:fb:4c:11:2c:9a:95:df:70:
         95:61:08:ee
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPM6/jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MTIxMTEwNDM0NFoXDTI0MDgyOTA1MTMx
OVowMzExMC8GA1UEAxMoYmQzYmQxMTg3MWQ3YTE5ZGQyYjk3YmI5N2FhYWQwN2Fl
ZjRiZWVkYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK85OfdQaGSN
DVnVqQ4lwrdGHqitgP9a9pmK3BCFX/FSinUazd9o1uoRgLZU9skzCP5jMzxRDORr
izufqZ0SeOgUpUSeZ+//V738sUov9p2D+NPYon7tdrncHAM2+qwbGZh2kKwaKmtE
Da3imf4O4GdeCGfwaECMNKq39TNyDBW5juZo9DurjqVWY9UBBriWAk2P11GpGE2z
QnIKRViW9o88mAYnZSbbfWv0/Vy35YeQrCJ2qJnIqF+V26+M/iNwxVnAWBPenjX/
aFOluYddWVIMHKtru1Zuu4na1M4f6zm5Ei9FHpC9U/62hZ0AKHlKS5k9y5q3JutY
McsMQNmaPGECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRDKnX5rT/WTenoZm84Cm25
VlfpMzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mMTUzOTZiYi1mNzlk
LTQzY2UtOWJhOS05ZWI3MDIwNjdmOTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjE1Mzk2YmItZjc5ZC00
M2NlLTliYTktOWViNzAyMDY3ZjkxL2JkM2JkMTE4NzFkN2ExOWRkMmI5N2JiOTdh
YWFkMDdhZWY0YmVlZGEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi26aDANBAIAAjAHAwUAKAOXYDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHgAwDQYJKoZIhvcNAQELBQADggEBAJm6
Ij7wNWppfHtIOvGPZ13pnpVcbszp+2jILg9dfoz2fp9wwCHoZKs9GT8hnr4/dD8W
oFC0Syr/eLYwJZmnFIIS/kZcK/OerobugFvGxtFSVLLTl8Noog/fb/DwhpLOSKur
zoTfPJuPdKB0551TFSc8XxX1FRJ/WyEDhPlfQWYLPv8vPb5B4EcTtzkU1qyZptum
CnoQocEiLfBXec9IaUGsZ8VaPPsNx+gqWzy/a9rdaLzpRMAiNfvFCQBVw510LFYW
f5qzoAaqMKSiUWvZtGrZif3CCddIo37nW+e3f4W7p+shQuxxJ5PVUqaVQrdD9kfc
ugL7TBEsmpXfcJVhCO4=
-----END CERTIFICATE-----