Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer
File:                     d53e5113cbffa42dda2928ee24c7eff1286a8644.cer (raw, json)
Hash identifier:          kunXob0nmx4R1prD+2UqlKM8ifiZo1fk6esL3s3qQxQ=
Subject key identifier:   0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE2CFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/d53e5113cbffa42dda2928ee24c7eff1286a8644.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 21 Jun 2019 04:28:11 +0000
Certificate not after:    Sat 09 Mar 2024 19:23:31 +0000
Subordinate resources:    AS: 267849
                          IP: 45.175.164.0/22
                          IP: 2803:ac60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14560509 (0xde2cfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 04:28:11 2019 GMT
            Not After : Mar  9 19:23:31 2024 GMT
        Subject: CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:31:f4:cc:d5:e6:2b:4e:cf:22:cf:61:47:82:
                    3a:e3:13:05:f2:b7:74:d2:9e:0e:82:69:a3:2f:c9:
                    3c:7a:34:ce:ce:6b:83:52:e9:19:60:9e:0e:0f:2e:
                    fa:4a:23:74:4f:73:ff:e4:a9:f3:53:b9:85:c5:0f:
                    d4:c7:aa:0d:c1:df:36:b6:3e:38:ac:a7:eb:f1:d9:
                    7b:7a:03:ec:a9:ce:55:d4:82:90:b6:8f:a5:db:28:
                    6b:aa:03:ee:5f:36:90:4c:f9:d9:65:c5:ba:da:2c:
                    d5:77:20:38:6f:55:03:bd:51:16:15:0d:c7:32:d0:
                    ca:e0:fe:04:27:a1:8c:24:16:8e:b7:9d:a9:b1:fc:
                    30:86:2c:21:ec:ae:da:71:e0:90:7c:6f:c6:6a:8b:
                    24:29:ec:41:8e:39:57:a8:ab:98:d6:20:fc:d9:fa:
                    d1:06:3e:e3:97:6d:a5:ae:c1:da:1a:95:e5:e6:37:
                    82:99:bc:e1:c6:3b:e7:1e:28:80:55:71:1e:2a:91:
                    6f:9f:fc:ff:14:e9:d1:a9:ce:16:ac:73:2f:9d:14:
                    39:58:b4:c2:aa:2b:9e:27:f1:01:6e:98:7d:13:3b:
                    56:a6:ed:3e:47:19:d5:93:8f:55:a9:d3:e2:ad:a5:
                    9b:86:ba:0c:cb:fc:a8:c0:07:cb:b9:b9:9a:f7:c1:
                    bd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/d53e5113cbffa42dda2928ee24c7eff1286a8644.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.164.0/22
                IPv6:
                  2803:ac60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267849

    Signature Algorithm: sha256WithRSAEncryption
         36:28:b5:a8:47:e1:a0:bb:59:ce:55:f6:8a:eb:14:ce:d9:14:
         b4:b7:51:6d:a8:18:20:9b:1c:cd:09:e9:fc:c2:58:a4:7e:85:
         c9:3b:b3:6c:5d:82:8f:ff:f3:3a:9b:54:4b:29:ef:86:c3:4f:
         5b:75:5f:1a:af:93:41:e4:8d:ea:e7:87:c4:af:4c:1d:fd:59:
         81:90:4a:f4:f6:01:52:ab:dd:68:cf:1c:93:43:d0:30:37:e5:
         6b:dc:bd:a2:2a:ab:ba:90:ef:53:8e:4f:79:c6:01:a5:b6:f1:
         d8:c3:03:97:29:5a:d1:0d:66:24:b9:67:31:36:d4:12:5d:ea:
         b4:0b:0c:cf:4b:09:dc:9f:4d:90:f4:cc:fb:46:da:98:45:ac:
         c8:8e:ed:ad:54:24:03:7f:30:15:42:0d:a5:ec:db:be:07:e0:
         78:1a:21:41:d2:9b:e4:aa:60:f4:b9:39:d4:f6:37:99:a4:20:
         b4:20:e3:1c:c4:73:50:14:04:4b:69:fc:a1:8a:fa:59:e9:8d:
         1a:1d:ce:67:b8:ac:92:c2:a8:8c:8a:34:33:25:8a:84:4d:90:
         2b:b5:53:05:d7:b0:25:0c:6c:02:d3:53:5b:1a:45:00:0c:6c:
         9e:e2:4c:31:f7:aa:c4:b5:66:d1:b1:2d:21:76:52:aa:41:f3:
         46:f2:ab:54
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAN4s/TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDYyMTA0MjgxMVoXDTI0MDMwOTE5MjMz
MVowMzExMC8GA1UEAxMoZDUzZTUxMTNjYmZmYTQyZGRhMjkyOGVlMjRjN2VmZjEy
ODZhODY0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOQx9MzV5itO
zyLPYUeCOuMTBfK3dNKeDoJpoy/JPHo0zs5rg1LpGWCeDg8u+kojdE9z/+Sp81O5
hcUP1MeqDcHfNrY+OKyn6/HZe3oD7KnOVdSCkLaPpdsoa6oD7l82kEz52WXFutos
1XcgOG9VA71RFhUNxzLQyuD+BCehjCQWjredqbH8MIYsIeyu2nHgkHxvxmqLJCns
QY45V6irmNYg/Nn60QY+45dtpa7B2hqV5eY3gpm84cY75x4ogFVxHiqRb5/8/xTp
0anOFqxzL50UOVi0wqornifxAW6YfRM7VqbtPkcZ1ZOPVanT4q2lm4a6DMv8qMAH
y7m5mvfBvVkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQLk0tbIDjIf/qtHjdfhF+r
LoLtXTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lMTQ1MmJlZC0yNmE2
LTQyOTgtYWNkMy0wOWU0YmJjNDQ1NDIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTE0NTJiZWQtMjZhNi00
Mjk4LWFjZDMtMDllNGJiYzQ0NTQyL2Q1M2U1MTEzY2JmZmE0MmRkYTI5MjhlZTI0
YzdlZmYxMjg2YTg2NDQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2vpDANBAIAAjAHAwUAKAOsYDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFkkwDQYJKoZIhvcNAQELBQADggEBADYo
tahH4aC7Wc5V9orrFM7ZFLS3UW2oGCCbHM0J6fzCWKR+hck7s2xdgo//8zqbVEsp
74bDT1t1Xxqvk0Hkjernh8SvTB39WYGQSvT2AVKr3WjPHJND0DA35WvcvaIqq7qQ
71OOT3nGAaW28djDA5cpWtENZiS5ZzE21BJd6rQLDM9LCdyfTZD0zPtG2phFrMiO
7a1UJAN/MBVCDaXs274H4HgaIUHSm+SqYPS5OdT2N5mkILQg4xzEc1AUBEtp/KGK
+lnpjRodzme4rJLCqIyKNDMlioRNkCu1UwXXsCUMbALTU1saRQAMbJ7iTDH3qsS1
ZtGxLSF2UqpB80byq1Q=
-----END CERTIFICATE-----