Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e0933c5ad794214542a885a938d88045b384ab9a.cer
File:                     e0933c5ad794214542a885a938d88045b384ab9a.cer (raw, json)
Hash identifier:          7ku4Uxj701OJ31WYtsVfUqctFcYum5ZHwRWTdt1iR80=
Subject key identifier:   96:78:97:24:39:0C:C2:56:A0:F2:00:36:3C:BE:9C:FD:BD:27:B6:E7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB02D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9e1fe89c-e803-4e85-a9d1-1694dfdecc20/e0933c5ad794214542a885a938d88045b384ab9a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9e1fe89c-e803-4e85-a9d1-1694dfdecc20/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:20 +0000
Certificate not after:    Wed 31 Jan 2024 20:32:25 +0000
Subordinate resources:    AS: 263800
                          IP: 138.97.200.0/22
                          IP: 2803:4040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14353109 (0xdb02d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:20 2017 GMT
            Not After : Jan 31 20:32:25 2024 GMT
        Subject: CN=e0933c5ad794214542a885a938d88045b384ab9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:18:cc:d1:2f:f9:ff:ee:72:a1:dc:ad:e3:
                    e7:77:0b:df:14:2c:e9:d8:7e:e2:93:cd:a0:f0:96:
                    99:0a:8c:75:f4:b8:d3:f2:6e:65:6f:9d:36:6f:b9:
                    1c:72:fa:a5:09:85:5e:6a:a9:a9:48:a9:57:f2:dd:
                    1e:0c:83:a4:e0:83:c3:70:15:64:6e:d1:90:19:2d:
                    a2:84:56:d4:c0:6c:85:e7:97:f0:5b:77:aa:76:55:
                    0c:55:1c:96:8f:1c:e5:1c:e5:ea:90:9f:03:00:af:
                    25:0c:70:82:41:02:1c:97:3d:91:b4:4c:7a:84:0c:
                    01:4f:29:34:86:f7:06:01:e3:12:92:e5:54:d2:db:
                    82:a1:ae:b4:f7:8b:b4:76:81:3f:fe:08:d3:c4:2b:
                    1f:c0:8f:5e:ca:27:10:91:6a:75:a3:30:49:43:63:
                    4d:24:59:c2:95:6a:ca:75:0e:c8:35:06:80:97:55:
                    4a:6b:03:89:55:a4:51:0c:31:f8:f5:27:52:0f:b0:
                    bf:78:08:51:8c:90:88:de:74:db:11:ec:41:1c:5f:
                    48:5f:e8:4c:2b:81:d0:54:8a:23:4c:4a:11:25:14:
                    d9:2a:cd:30:0d:2c:d4:61:f4:47:73:04:08:b8:14:
                    52:a8:61:95:78:20:43:c2:7c:57:62:c7:95:74:09:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:78:97:24:39:0C:C2:56:A0:F2:00:36:3C:BE:9C:FD:BD:27:B6:E7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9e1fe89c-e803-4e85-a9d1-1694dfdecc20/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9e1fe89c-e803-4e85-a9d1-1694dfdecc20/e0933c5ad794214542a885a938d88045b384ab9a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.200.0/22
                IPv6:
                  2803:4040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263800

    Signature Algorithm: sha256WithRSAEncryption
         7e:13:3a:cb:5d:56:c4:ab:70:d6:6e:29:a0:c0:c5:6d:67:f4:
         06:c9:d4:6d:b9:c1:46:eb:92:22:54:ab:74:4a:a9:07:ed:b9:
         4d:12:4c:06:e0:74:96:ca:07:b9:a3:c8:e5:fe:06:ca:85:01:
         75:a4:cc:0e:7e:28:75:4c:dc:1c:e9:0f:08:b7:b1:ac:3c:85:
         4e:d6:4f:08:91:08:22:df:3f:a3:d8:dc:be:7b:b4:95:c7:dd:
         ed:e7:dd:df:7d:18:5d:94:92:6d:ff:c7:86:4f:2e:3b:00:da:
         75:54:9c:5a:cd:fa:e7:2a:ed:5e:c3:ad:f3:2b:d1:66:01:fc:
         46:49:99:c6:26:52:3b:5b:33:42:9a:2b:c2:10:6c:80:e0:59:
         19:5c:60:c4:61:49:dd:0f:ae:b7:27:cf:c3:52:d8:7f:04:e3:
         e9:58:ab:ea:60:aa:35:5e:a1:60:24:f3:b8:83:e6:a2:3d:37:
         e1:66:57:74:a7:ff:62:74:ec:ff:90:65:4d:81:32:7f:50:e4:
         39:cb:6e:8d:c2:b0:14:f4:0f:17:6d:a0:54:e2:f0:b9:2a:75:
         af:86:f9:49:43:7a:94:82:df:f2:2e:cb:7e:7e:4d:1d:50:66:
         64:90:20:31:ee:78:8c:cd:b0:30:6f:3b:da:3c:9c:4e:b0:6c:
         d7:c6:da:cf
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANsC1TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyMFoXDTI0MDEzMTIwMzIy
NVowMzExMC8GA1UEAxMoZTA5MzNjNWFkNzk0MjE0NTQyYTg4NWE5MzhkODgwNDVi
Mzg0YWI5YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKhjGMzRL/n/
7nKh3K3j53cL3xQs6dh+4pPNoPCWmQqMdfS40/JuZW+dNm+5HHL6pQmFXmqpqUip
V/LdHgyDpOCDw3AVZG7RkBktooRW1MBsheeX8Ft3qnZVDFUclo8c5Rzl6pCfAwCv
JQxwgkECHJc9kbRMeoQMAU8pNIb3BgHjEpLlVNLbgqGutPeLtHaBP/4I08QrH8CP
XsonEJFqdaMwSUNjTSRZwpVqynUOyDUGgJdVSmsDiVWkUQwx+PUnUg+wv3gIUYyQ
iN502xHsQRxfSF/oTCuB0FSKI0xKESUU2SrNMA0s1GH0R3MECLgUUqhhlXggQ8J8
V2LHlXQJA5UCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSWeJckOQzCVqDyADY8vpz9
vSe25zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85ZTFmZTg5Yy1lODAz
LTRlODUtYTlkMS0xNjk0ZGZkZWNjMjAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWUxZmU4OWMtZTgwMy00
ZTg1LWE5ZDEtMTY5NGRmZGVjYzIwL2UwOTMzYzVhZDc5NDIxNDU0MmE4ODVhOTM4
ZDg4MDQ1YjM4NGFiOWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAophyDANBAIAAjAHAwUAKANAQDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBngwDQYJKoZIhvcNAQELBQADggEBAH4T
OstdVsSrcNZuKaDAxW1n9AbJ1G25wUbrkiJUq3RKqQftuU0STAbgdJbKB7mjyOX+
BsqFAXWkzA5+KHVM3BzpDwi3saw8hU7WTwiRCCLfP6PY3L57tJXH3e3n3d99GF2U
km3/x4ZPLjsA2nVUnFrN+ucq7V7DrfMr0WYB/EZJmcYmUjtbM0KaK8IQbIDgWRlc
YMRhSd0Prrcnz8NS2H8E4+lYq+pgqjVeoWAk87iD5qI9N+FmV3Sn/2J07P+QZU2B
Mn9Q5DnLbo3CsBT0DxdtoFTi8Lkqda+G+UlDepSC3/Iuy35+TR1QZmSQIDHueIzN
sDBvO9o8nE6wbNfG2s8=
-----END CERTIFICATE-----