Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7ff8a69f03dcbd51ba2407e8bf1a73d2aeb4ec9.cer
File:                     f7ff8a69f03dcbd51ba2407e8bf1a73d2aeb4ec9.cer (raw, json)
Hash identifier:          67QReI26iV+JwelOkdMW+G2cNJvTBYZIiwe80h+uPjE=
Subject key identifier:   73:EE:DC:58:A2:51:1A:93:7E:EA:7D:55:34:63:EF:31:F8:3E:CF:63
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDD9FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/71aca22d-6ca2-4d5f-a990-d53e121577b7/f7ff8a69f03dcbd51ba2407e8bf1a73d2aeb4ec9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/71aca22d-6ca2-4d5f-a990-d53e121577b7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:56 +0000
Certificate not after:    Wed 17 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 263836
                          IP: 143.0.92.0/22
                          IP: 2803:5640::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15587837 (0xedd9fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:56 2017 GMT
            Not After : Jul 17 06:00:00 2024 GMT
        Subject: CN=f7ff8a69f03dcbd51ba2407e8bf1a73d2aeb4ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:16:f9:9e:99:ef:08:20:fb:3a:ea:45:55:
                    28:1a:01:0b:02:ce:00:94:47:74:71:b1:c7:75:2b:
                    a4:3d:2e:64:c8:20:d1:1f:44:4b:3f:d3:fc:25:4d:
                    ab:98:62:39:4c:e6:b4:53:cd:ed:80:e7:1e:b1:48:
                    06:d5:df:ba:a2:74:ae:0d:0d:70:eb:1f:fe:68:8e:
                    ab:0e:f6:4b:31:2e:82:29:97:3b:73:bc:65:92:ff:
                    f8:03:b9:4f:a5:28:3d:7b:ce:85:9c:5c:b1:60:c2:
                    18:6c:43:78:63:13:8a:bf:07:f0:07:5b:f7:4e:d4:
                    aa:7b:da:7a:1a:cf:10:bf:ff:aa:f3:b0:1f:ec:d2:
                    83:23:0b:68:77:22:0d:24:ad:36:ce:53:d4:68:86:
                    08:bd:e9:16:fb:32:59:73:4b:9d:40:cc:0d:c5:01:
                    0a:90:5c:9d:f6:26:ba:e2:f5:42:0e:c4:37:78:41:
                    01:64:f5:0b:3c:ff:43:d3:0c:e5:89:73:47:31:4f:
                    17:e4:80:6f:c1:95:2d:8c:d2:62:81:d4:86:5c:a3:
                    ba:c5:ea:39:c9:23:94:9e:f9:9b:65:b2:bb:f1:7b:
                    be:bd:ac:65:97:a5:ff:60:92:01:d0:50:8b:e8:86:
                    57:b3:94:da:34:e2:5c:ae:ff:ae:47:b2:40:05:e2:
                    27:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EE:DC:58:A2:51:1A:93:7E:EA:7D:55:34:63:EF:31:F8:3E:CF:63
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/71aca22d-6ca2-4d5f-a990-d53e121577b7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/71aca22d-6ca2-4d5f-a990-d53e121577b7/f7ff8a69f03dcbd51ba2407e8bf1a73d2aeb4ec9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.92.0/22
                IPv6:
                  2803:5640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263836

    Signature Algorithm: sha256WithRSAEncryption
         80:5d:41:6f:14:c0:91:a7:87:44:9b:f6:e3:cf:c7:d1:4f:c5:
         d0:93:03:6f:36:7e:ff:dd:85:48:15:83:92:80:1f:15:c5:3c:
         4b:2a:2c:80:90:0c:b2:90:9c:87:80:d3:db:37:53:61:a9:9a:
         10:ba:d9:b6:ec:31:fe:34:bf:fe:b4:51:f5:85:d7:c9:fe:45:
         15:6f:58:f0:63:33:b8:97:21:85:fa:b0:88:d2:f0:99:59:7d:
         c0:77:75:36:78:17:63:7e:7c:e4:e2:97:17:36:f3:77:b5:c8:
         88:df:da:76:1a:7e:15:6c:46:80:22:ac:9f:57:c1:a6:0e:ab:
         a9:eb:72:cc:ba:31:61:7e:7a:9f:d5:09:8e:cc:99:b7:ec:55:
         17:38:49:5c:52:48:e0:c7:78:ac:70:d8:ae:d4:28:af:86:2b:
         cb:1f:71:ff:70:44:d7:04:da:b6:76:ff:2b:df:58:88:d4:56:
         5a:ae:30:9c:1a:8d:a9:a6:3b:76:9c:32:0e:ce:b7:80:d1:3d:
         2d:5b:0a:9f:ef:c2:b2:85:39:6e:a4:2f:8d:6c:ad:55:e6:f8:
         52:c0:0a:d5:f3:0d:31:3e:e1:7e:25:7f:de:c6:fc:8c:a7:ec:
         3b:7a:33:07:f2:a4:28:48:af:c2:46:1e:92:68:fc:d9:dd:44:
         36:c1:c2:a5
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAO3Z/TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1NloXDTI0MDcxNzA2MDAw
MFowMzExMC8GA1UEAxMoZjdmZjhhNjlmMDNkY2JkNTFiYTI0MDdlOGJmMWE3M2Qy
YWViNGVjOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJOCFvmeme8I
IPs66kVVKBoBCwLOAJRHdHGxx3UrpD0uZMgg0R9ESz/T/CVNq5hiOUzmtFPN7YDn
HrFIBtXfuqJ0rg0NcOsf/miOqw72SzEugimXO3O8ZZL/+AO5T6UoPXvOhZxcsWDC
GGxDeGMTir8H8Adb907UqnvaehrPEL//qvOwH+zSgyMLaHciDSStNs5T1GiGCL3p
FvsyWXNLnUDMDcUBCpBcnfYmuuL1Qg7EN3hBAWT1Czz/Q9MM5YlzRzFPF+SAb8GV
LYzSYoHUhlyjusXqOckjlJ75m2Wyu/F7vr2sZZel/2CSAdBQi+iGV7OU2jTiXK7/
rkeyQAXiJwMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRz7txYolEak37qfVU0Y+8x
+D7PYzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83MWFjYTIyZC02Y2Ey
LTRkNWYtYTk5MC1kNTNlMTIxNTc3YjcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzFhY2EyMmQtNmNhMi00
ZDVmLWE5OTAtZDUzZTEyMTU3N2I3L2Y3ZmY4YTY5ZjAzZGNiZDUxYmEyNDA3ZThi
ZjFhNzNkMmFlYjRlYzkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAo8AXDANBAIAAjAHAwUAKANWQDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBpwwDQYJKoZIhvcNAQELBQADggEBAIBd
QW8UwJGnh0Sb9uPPx9FPxdCTA282fv/dhUgVg5KAHxXFPEsqLICQDLKQnIeA09s3
U2GpmhC62bbsMf40v/60UfWF18n+RRVvWPBjM7iXIYX6sIjS8JlZfcB3dTZ4F2N+
fOTilxc283e1yIjf2nYafhVsRoAirJ9XwaYOq6nrcsy6MWF+ep/VCY7MmbfsVRc4
SVxSSODHeKxw2K7UKK+GK8sfcf9wRNcE2rZ2/yvfWIjUVlquMJwajammO3acMg7O
t4DRPS1bCp/vwrKFOW6kL41srVXm+FLACtXzDTE+4X4lf97G/Iyn7Dt6MwfypChI
r8JGHpJo/NndRDbBwqU=
-----END CERTIFICATE-----