Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f659416c64fe0a5bd2ceeaad4dd0260ce3ec4bf7.cer
File:                     f659416c64fe0a5bd2ceeaad4dd0260ce3ec4bf7.cer (raw, json)
Hash identifier:          qhn83tGGG1zmssr1H3qraiMxYEdCOZIwwfSwLReOkPI=
Subject key identifier:   03:BC:2F:9B:03:8D:66:27:79:4B:6F:AC:AF:23:28:F7:96:1E:05:40
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE9611
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/f659416c64fe0a5bd2ceeaad4dd0260ce3ec4bf7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 20 May 2019 19:58:33 +0000
Certificate not after:    Thu 27 Jun 2024 21:35:29 +0000
Subordinate resources:    AS: 266894
                          IP: 45.161.32.0/22
                          IP: 2803:56a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15635985 (0xee9611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 20 19:58:33 2019 GMT
            Not After : Jun 27 21:35:29 2024 GMT
        Subject: CN=f659416c64fe0a5bd2ceeaad4dd0260ce3ec4bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:5f:06:27:6e:ee:d1:4d:86:c2:10:2e:f3:
                    7b:7f:59:7e:2e:89:c6:cb:1c:26:70:f1:2b:2f:ed:
                    69:ac:5d:a3:2b:16:4e:51:45:f1:94:36:c0:48:a2:
                    bb:43:74:a6:60:7f:97:8a:5b:e7:91:e5:cb:d5:f1:
                    50:60:ae:b4:53:27:7c:13:b2:dd:cb:aa:87:5a:be:
                    d2:b8:6b:41:c1:8b:3b:f1:09:95:35:d3:cf:bd:56:
                    33:ef:14:3a:da:d5:0c:84:7e:63:54:8c:7b:b0:93:
                    ff:05:f4:e0:50:6b:cc:eb:a7:34:11:4e:b5:ff:a2:
                    d1:a0:c9:6c:93:99:e0:6a:c1:4f:61:e9:cf:5c:bb:
                    f1:72:05:71:5d:be:6e:75:3c:b0:0d:68:7c:6e:56:
                    78:be:6e:3c:ef:01:e5:75:5b:6a:ef:ee:16:ab:f1:
                    fb:22:c8:1c:63:6d:b6:a9:c4:f1:3c:fd:f1:fa:ee:
                    65:6a:63:da:bb:64:1f:19:f8:cd:a0:58:2b:b6:9e:
                    b8:2f:19:f9:c7:3b:87:e5:50:18:d2:fe:68:7d:75:
                    36:dc:bb:7e:7c:ce:9a:d2:45:79:6b:47:db:95:b2:
                    de:c7:e7:7c:9e:d4:06:c3:b8:74:65:54:7d:6e:b9:
                    b7:02:75:0a:74:67:df:8e:8c:d3:62:c7:e1:f9:3e:
                    9c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BC:2F:9B:03:8D:66:27:79:4B:6F:AC:AF:23:28:F7:96:1E:05:40
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/f659416c64fe0a5bd2ceeaad4dd0260ce3ec4bf7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.32.0/22
                IPv6:
                  2803:56a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266894

    Signature Algorithm: sha256WithRSAEncryption
         7d:eb:f1:9d:1b:c8:5d:f9:d7:e7:f6:20:5c:2b:53:81:d6:6b:
         91:2e:7e:a8:af:b3:fe:07:7e:e8:b3:ca:67:a1:97:1d:0f:ae:
         9c:7b:4a:05:cf:10:17:aa:07:cf:0f:ef:91:09:f6:0f:94:17:
         b7:f3:fe:1d:ce:cc:4a:d8:fc:4a:db:95:79:d7:94:09:98:18:
         30:69:ec:3b:81:4a:fe:3d:7c:50:29:71:01:93:8a:99:24:b0:
         6f:a0:61:4a:ff:e2:02:59:cc:50:8d:9d:6e:9e:d8:4d:8c:5d:
         5c:d1:08:92:5e:8b:aa:34:4b:2e:38:da:f7:06:cc:f9:3a:d7:
         55:e5:76:58:3c:54:d8:87:10:5f:50:2c:bb:c2:36:b1:53:bb:
         f3:75:10:09:4b:eb:42:82:3a:ba:fe:e0:44:b9:08:39:46:1a:
         a2:bc:a3:46:e0:e4:50:60:95:01:17:45:0a:6b:37:75:b3:16:
         ab:57:70:87:5d:0b:3a:66:4a:30:93:e9:f5:0e:04:f0:89:09:
         f5:e3:ca:bd:ab:e9:33:89:00:64:9e:45:31:8e:6e:74:9d:90:
         90:bd:49:76:e6:50:9f:80:4a:bf:5e:c6:1b:d0:21:9f:08:f9:
         8b:5f:3f:6d:8a:84:6f:ad:a6:e2:6c:69:95:cd:9f:0a:96:f1:
         42:12:33:9f
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAO6WETANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDUyMDE5NTgzM1oXDTI0MDYyNzIxMzUy
OVowMzExMC8GA1UEAxMoZjY1OTQxNmM2NGZlMGE1YmQyY2VlYWFkNGRkMDI2MGNl
M2VjNGJmNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALyoXwYnbu7R
TYbCEC7ze39Zfi6JxsscJnDxKy/taaxdoysWTlFF8ZQ2wEiiu0N0pmB/l4pb55Hl
y9XxUGCutFMnfBOy3cuqh1q+0rhrQcGLO/EJlTXTz71WM+8UOtrVDIR+Y1SMe7CT
/wX04FBrzOunNBFOtf+i0aDJbJOZ4GrBT2Hpz1y78XIFcV2+bnU8sA1ofG5WeL5u
PO8B5XVbau/uFqvx+yLIHGNttqnE8Tz98fruZWpj2rtkHxn4zaBYK7aeuC8Z+cc7
h+VQGNL+aH11Nty7fnzOmtJFeWtH25Wy3sfnfJ7UBsO4dGVUfW65twJ1CnRn346M
02LH4fk+nEECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQDvC+bA41mJ3lLb6yvIyj3
lh4FQDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yMWJmYjAyZC1lZDJm
LTQ5ODItODMyZi0xYWY4ZDg3ZWE3YjAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjFiZmIwMmQtZWQyZi00
OTgyLTgzMmYtMWFmOGQ4N2VhN2IwL2Y2NTk0MTZjNjRmZTBhNWJkMmNlZWFhZDRk
ZDAyNjBjZTNlYzRiZjcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2hIDANBAIAAjAHAwUAKANWoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEo4wDQYJKoZIhvcNAQELBQADggEBAH3r
8Z0byF351+f2IFwrU4HWa5Eufqivs/4Hfuizymehlx0Prpx7SgXPEBeqB88P75EJ
9g+UF7fz/h3OzErY/ErblXnXlAmYGDBp7DuBSv49fFApcQGTipkksG+gYUr/4gJZ
zFCNnW6e2E2MXVzRCJJei6o0Sy442vcGzPk611Xldlg8VNiHEF9QLLvCNrFTu/N1
EAlL60KCOrr+4ES5CDlGGqK8o0bg5FBglQEXRQprN3WzFqtXcIddCzpmSjCT6fUO
BPCJCfXjyr2r6TOJAGSeRTGObnSdkJC9SXbmUJ+ASr9exhvQIZ8I+YtfP22KhG+t
puJsaZXNnwqW8UISM58=
-----END CERTIFICATE-----