Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.cer
File:                     e676b8ddc3fa11ce4b5bb1513584be10d9033c41.cer (raw, json)
Hash identifier:          ISmtolxkQJXJg2c7j7TFhNN8nHA0wxHZzUW0XkPZvrE=
Subject key identifier:   CB:58:61:19:F8:B0:A1:1C:E7:AB:9E:E1:7A:57:B5:2F:CE:5B:3E:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F064B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:48 +0000
Certificate not after:    Fri 02 Aug 2024 17:16:03 +0000
Subordinate resources:    AS: 263688
                          IP: 170.150.140.0/22
                          IP: 201.131.38.0/23
                          IP: 2801:1f:a000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15754425 (0xf064b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:48 2017 GMT
            Not After : Aug  2 17:16:03 2024 GMT
        Subject: CN=e676b8ddc3fa11ce4b5bb1513584be10d9033c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:00:84:a8:b5:f3:36:dd:f7:21:da:b3:04:ce:
                    fc:07:80:b6:e3:5d:dc:34:f9:f3:37:78:4d:01:bb:
                    d1:7c:22:0d:31:44:7c:67:75:e3:73:b6:8e:81:9f:
                    b5:ff:db:63:e4:57:90:09:3f:dc:f4:53:bb:db:a8:
                    93:1e:a7:d5:31:9c:ef:2a:7d:0e:14:f6:2d:33:64:
                    a1:27:e3:5f:97:cb:eb:d9:d9:44:eb:d7:92:58:f8:
                    a1:20:bb:7b:f9:a6:f1:55:a5:34:2f:4b:86:9a:10:
                    d1:11:59:ee:87:92:ba:5f:e1:8f:52:39:90:15:11:
                    dd:83:19:5d:a2:d4:b2:ee:aa:14:ae:a9:00:0a:1c:
                    c3:ef:64:f6:25:ce:cf:12:eb:be:19:a6:00:e1:83:
                    94:cd:3d:27:b4:69:a0:c1:bc:94:14:cd:0e:d0:c5:
                    c8:79:88:72:95:38:ac:c5:63:90:0f:d7:59:38:70:
                    02:22:cd:44:6e:e6:06:6a:7e:a3:6c:80:a4:e4:a2:
                    85:b9:c1:18:21:a6:d8:16:0a:4a:9a:9c:0e:74:40:
                    59:fa:bb:50:14:df:2c:de:5a:92:2b:8a:99:2f:3f:
                    bb:fd:22:54:cf:0f:93:b2:bf:19:c4:7a:8e:13:da:
                    b0:b0:99:34:57:86:ce:a6:ef:0d:2d:31:04:ad:d0:
                    9b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:58:61:19:F8:B0:A1:1C:E7:AB:9E:E1:7A:57:B5:2F:CE:5B:3E:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.140.0/22
                  201.131.38.0/23
                IPv6:
                  2801:1f:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263688

    Signature Algorithm: sha256WithRSAEncryption
         46:5a:aa:16:50:52:76:b1:12:75:7a:ef:f4:20:8f:ac:56:1b:
         4a:5b:8f:ea:ae:2d:76:52:4c:02:5d:68:43:f1:84:24:1a:b1:
         84:f4:56:7a:30:f5:28:2e:69:55:72:96:08:4e:b6:9b:61:33:
         f7:6a:7f:56:ca:12:02:15:dc:65:4f:5f:2c:f3:ed:82:87:18:
         e9:72:47:d2:b7:29:bb:f1:73:27:a6:c0:9c:62:d9:21:d0:a7:
         76:b3:41:05:19:99:ed:5e:1b:5f:ba:d7:ea:90:65:39:4d:92:
         9c:90:b1:05:fc:03:05:76:29:b3:3c:bc:96:27:9b:6c:cd:73:
         ea:f4:88:b3:cc:2b:97:b5:58:68:9b:f6:9b:c3:5a:68:8e:f7:
         75:c7:5a:4b:e9:99:6a:21:eb:84:35:60:7a:42:67:f9:5d:d9:
         56:06:41:76:06:ab:58:0d:27:8c:4b:e6:c4:40:bc:15:46:04:
         4e:57:ab:74:7c:e6:50:7b:fd:07:c5:33:a2:d0:d2:e2:77:8a:
         18:1c:ae:aa:31:1b:eb:08:3d:64:22:37:88:6b:4b:05:c1:d7:
         94:e7:70:74:fb:1f:1d:a0:4d:5b:1b:07:d7:c8:17:6d:65:db:
         86:1a:b2:e3:e8:70:29:89:e4:d6:1b:c2:16:c4:8f:a4:9c:e5:
         ba:54:77:88
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIEAPBkuTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0OFoXDTI0MDgwMjE3MTYw
M1owMzExMC8GA1UEAxMoZTY3NmI4ZGRjM2ZhMTFjZTRiNWJiMTUxMzU4NGJlMTBk
OTAzM2M0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAAhKi18zbd
9yHaswTO/AeAtuNd3DT58zd4TQG70XwiDTFEfGd143O2joGftf/bY+RXkAk/3PRT
u9uokx6n1TGc7yp9DhT2LTNkoSfjX5fL69nZROvXklj4oSC7e/mm8VWlNC9LhpoQ
0RFZ7oeSul/hj1I5kBUR3YMZXaLUsu6qFK6pAAocw+9k9iXOzxLrvhmmAOGDlM09
J7RpoMG8lBTNDtDFyHmIcpU4rMVjkA/XWThwAiLNRG7mBmp+o2yApOSihbnBGCGm
2BYKSpqcDnRAWfq7UBTfLN5akiuKmS8/u/0iVM8Pk7K/GcR6jhPasLCZNFeGzqbv
DS0xBK3QmyECAwEAAaOCAxEwggMNMB0GA1UdDgQWBBTLWGEZ+LChHOernuF6V7Uv
zls+jTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zMjU5ZWNjMC1kYTNm
LTRiOTUtODEwYS1kMzc3NGU3ZGNhNjQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzI1OWVjYzAtZGEzZi00
Yjk1LTgxMGEtZDM3NzRlN2RjYTY0L2U2NzZiOGRkYzNmYTExY2U0YjViYjE1MTM1
ODRiZTEwZDkwMzNjNDEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAqqWjAMEAcmDJjAPBAIAAjAJAwcA
KAEAH6AAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGCDANBgkqhkiG9w0BAQsF
AAOCAQEARlqqFlBSdrESdXrv9CCPrFYbSluP6q4tdlJMAl1oQ/GEJBqxhPRWejD1
KC5pVXKWCE62m2Ez92p/VsoSAhXcZU9fLPPtgocY6XJH0rcpu/FzJ6bAnGLZIdCn
drNBBRmZ7V4bX7rX6pBlOU2SnJCxBfwDBXYpszy8liebbM1z6vSIs8wrl7VYaJv2
m8NaaI73dcdaS+mZaiHrhDVgekJn+V3ZVgZBdgarWA0njEvmxEC8FUYETlerdHzm
UHv9B8UzotDS4neKGByuqjEb6wg9ZCI3iGtLBcHXlOdwdPsfHaBNWxsH18gXbWXb
hhqy4+hwKYnk1hvCFsSPpJzlulR3iA==
-----END CERTIFICATE-----