Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2e68f970c76de5428fef89a267a117e2763fcd.cer
File:                     ef2e68f970c76de5428fef89a267a117e2763fcd.cer (raw, json)
Hash identifier:          zyr7Z8ds81N2VHVMhi0xq2xJoChI51UW/AmVnIhESis=
Subject key identifier:   5A:69:8B:B2:96:83:9D:70:63:82:99:6D:75:91:A7:D4:E0:6D:D7:1C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF3D69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/ef2e68f970c76de5428fef89a267a117e2763fcd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 19 Aug 2019 19:30:04 +0000
Certificate not after:    Wed 20 Mar 2024 20:55:45 +0000
Subordinate resources:    AS: 267859
                          IP: 45.176.116.0/22
                          IP: 2803:8260::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14630249 (0xdf3d69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 19 19:30:04 2019 GMT
            Not After : Mar 20 20:55:45 2024 GMT
        Subject: CN=ef2e68f970c76de5428fef89a267a117e2763fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9a:e1:07:97:c6:a2:0d:13:a0:f4:3a:c9:a4:
                    12:02:b6:58:78:85:df:96:01:ba:be:51:8d:5e:e9:
                    ab:1d:5b:28:2b:dd:e3:20:c5:12:5f:62:46:f4:85:
                    32:7f:fb:ed:87:10:d8:85:2f:dd:e0:62:f8:ee:22:
                    77:c8:b4:7a:ad:bb:b2:00:eb:d7:d6:a4:4c:b1:35:
                    47:63:6f:da:e3:1b:2d:df:1b:f4:ee:3a:d2:06:07:
                    d3:50:19:0b:b0:3b:d6:dc:e1:fd:f3:66:a3:95:b5:
                    10:9c:38:c5:7a:7e:08:16:97:b0:4e:38:53:ce:21:
                    18:5d:8e:79:00:9e:75:7b:8f:19:50:f7:ac:69:3f:
                    35:bb:ca:46:7f:9f:93:f5:37:3c:f4:12:3f:95:60:
                    a4:25:0a:34:1d:97:7e:11:0e:b7:7c:f4:59:76:b5:
                    d2:b4:6a:1e:44:43:a4:65:3f:92:a0:78:cf:c4:8d:
                    2c:1b:ab:b1:ab:8a:b3:9e:07:cc:79:4c:8f:b5:31:
                    9a:eb:c8:45:bc:b9:db:21:e3:83:11:36:2b:11:10:
                    20:50:ab:98:e4:24:7e:04:c6:b1:4c:a7:7a:1f:f9:
                    63:93:4d:30:a1:b1:d1:7c:ee:c2:72:54:2b:d2:b4:
                    95:ea:2e:5f:4b:ed:cc:cc:c9:57:30:02:6a:0e:25:
                    a7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:69:8B:B2:96:83:9D:70:63:82:99:6D:75:91:A7:D4:E0:6D:D7:1C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/ef2e68f970c76de5428fef89a267a117e2763fcd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.116.0/22
                IPv6:
                  2803:8260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267859

    Signature Algorithm: sha256WithRSAEncryption
         77:0e:d9:fa:86:d4:f0:87:62:83:9d:1e:53:d2:97:8d:03:54:
         4d:72:a5:d2:a3:35:a7:a4:ba:76:7b:c5:34:c9:87:32:0a:3f:
         04:0a:60:cd:2b:8e:61:53:c0:f6:4c:45:af:a7:51:d4:15:ed:
         7e:93:46:48:d3:50:98:13:91:03:cc:74:5b:99:17:78:94:2a:
         cc:3f:f7:dd:42:d6:97:8e:07:59:42:9f:b7:b7:b9:9f:4a:eb:
         92:f8:e4:bf:3b:e3:cc:f5:c3:a6:ca:d8:01:ea:d6:3b:f7:17:
         33:fc:01:45:44:92:d2:84:be:e3:a3:a9:f9:d5:fd:a3:b4:01:
         e5:5a:db:85:b6:29:36:c6:03:d8:3c:3d:82:5e:4e:2c:40:d6:
         7f:e7:28:a3:90:45:11:6c:a8:5d:4b:66:1f:30:65:19:f9:1c:
         f0:89:cc:b7:8c:c8:ba:55:b4:dc:93:a7:63:84:ad:68:11:4e:
         51:8d:86:f1:63:b8:e9:72:7c:d4:d1:9a:fd:7e:5e:7d:6c:05:
         1f:45:21:d2:e1:7d:8c:f2:6d:5c:69:d9:97:57:dd:24:bc:18:
         6e:63:34:49:39:fa:f9:03:4f:e8:7d:c1:e0:b5:d5:f0:e1:cc:
         7f:15:33:cf:61:63:6f:73:d8:7a:0e:be:c3:ec:34:8d:b4:14:
         0f:8c:09:08
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAN89aTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDgxOTE5MzAwNFoXDTI0MDMyMDIwNTU0
NVowMzExMC8GA1UEAxMoZWYyZTY4Zjk3MGM3NmRlNTQyOGZlZjg5YTI2N2ExMTdl
Mjc2M2ZjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIaa4QeXxqIN
E6D0OsmkEgK2WHiF35YBur5RjV7pqx1bKCvd4yDFEl9iRvSFMn/77YcQ2IUv3eBi
+O4id8i0eq27sgDr19akTLE1R2Nv2uMbLd8b9O460gYH01AZC7A71tzh/fNmo5W1
EJw4xXp+CBaXsE44U84hGF2OeQCedXuPGVD3rGk/NbvKRn+fk/U3PPQSP5VgpCUK
NB2XfhEOt3z0WXa10rRqHkRDpGU/kqB4z8SNLBursauKs54HzHlMj7UxmuvIRby5
2yHjgxE2KxEQIFCrmOQkfgTGsUyneh/5Y5NNMKGx0XzuwnJUK9K0leouX0vtzMzJ
VzACag4lp/ECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRaaYuyloOdcGOCmW11kafU
4G3XHDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mMGY5MDJiYy0zNzVm
LTRhMjAtOGExMS1mZGRhZGUxMDg3ZTQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjBmOTAyYmMtMzc1Zi00
YTIwLThhMTEtZmRkYWRlMTA4N2U0L2VmMmU2OGY5NzBjNzZkZTU0MjhmZWY4OWEy
NjdhMTE3ZTI3NjNmY2QubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2wdDANBAIAAjAHAwUAKAOCYDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFlMwDQYJKoZIhvcNAQELBQADggEBAHcO
2fqG1PCHYoOdHlPSl40DVE1ypdKjNaekunZ7xTTJhzIKPwQKYM0rjmFTwPZMRa+n
UdQV7X6TRkjTUJgTkQPMdFuZF3iUKsw/991C1peOB1lCn7e3uZ9K65L45L8748z1
w6bK2AHq1jv3FzP8AUVEktKEvuOjqfnV/aO0AeVa24W2KTbGA9g8PYJeTixA1n/n
KKOQRRFsqF1LZh8wZRn5HPCJzLeMyLpVtNyTp2OErWgRTlGNhvFjuOlyfNTRmv1+
Xn1sBR9FIdLhfYzybVxp2ZdX3SS8GG5jNEk5+vkDT+h9weC11fDhzH8VM89hY29z
2HoOvsPsNI20FA+MCQg=
-----END CERTIFICATE-----