Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb5dac75b816b6728a9f5aba0300386dab0d1cca.cer
File:                     fb5dac75b816b6728a9f5aba0300386dab0d1cca.cer (raw, json)
Hash identifier:          AftRcm2qQux3mIRDCXQq9m+4bHfBJQeBHKmOI8XsTJs=
Subject key identifier:   9D:58:1B:E5:9D:72:81:73:B1:8B:53:0A:F2:D6:CA:A9:3D:44:F0:C1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DAE43A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/77e2b0ce-5e5f-483b-8717-15744c842b43/fb5dac75b816b6728a9f5aba0300386dab0d1cca.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/77e2b0ce-5e5f-483b-8717-15744c842b43/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:29 +0000
Certificate not after:    Mon 29 Jan 2024 17:34:54 +0000
Subordinate resources:    AS: 265690
                          IP: 45.5.15.0/24
                          IP: 2801:13:d000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14345274 (0xdae43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:29 2017 GMT
            Not After : Jan 29 17:34:54 2024 GMT
        Subject: CN=fb5dac75b816b6728a9f5aba0300386dab0d1cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b1:8d:fd:21:77:f3:6b:c4:43:f1:3d:64:23:
                    e3:07:25:0a:e1:c8:33:38:ee:29:c0:f7:09:fc:1b:
                    32:25:7c:61:0b:6f:82:35:c9:b1:08:e3:11:72:32:
                    15:1a:0d:3c:d2:d5:54:d5:04:ce:0d:be:4d:5c:73:
                    18:cf:e2:66:4e:3e:b2:99:9f:fb:d1:83:5b:d0:93:
                    bf:d0:2b:70:71:65:5d:1a:cc:0e:37:cc:0b:e6:0d:
                    c1:56:e3:f9:a2:3a:67:46:fd:6b:ad:9e:95:b5:c5:
                    af:e4:9f:42:71:1d:de:68:91:46:84:6a:f6:bb:af:
                    c1:f9:8f:21:d2:65:26:4f:9f:05:eb:aa:6c:c4:bf:
                    21:41:b4:b0:6b:d9:a5:b1:1a:37:44:22:b5:82:a2:
                    b9:94:e4:45:af:3e:a8:74:24:3b:f0:68:8a:0f:e0:
                    2a:bd:3b:58:5a:b6:8d:83:a6:89:34:27:66:7a:80:
                    ee:d5:e3:18:d8:c8:82:3a:c5:cc:16:2e:16:8d:03:
                    4f:63:cb:31:1d:64:da:69:2a:4b:cb:45:fd:c3:2e:
                    ef:5b:e0:61:df:10:63:8c:d5:07:b2:0a:a0:b8:3a:
                    50:34:90:79:fe:11:ef:13:4b:68:99:ba:6c:b8:7e:
                    d7:30:73:99:ba:09:bb:f3:b0:09:4c:05:ef:8b:81:
                    2e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:58:1B:E5:9D:72:81:73:B1:8B:53:0A:F2:D6:CA:A9:3D:44:F0:C1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/77e2b0ce-5e5f-483b-8717-15744c842b43/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/77e2b0ce-5e5f-483b-8717-15744c842b43/fb5dac75b816b6728a9f5aba0300386dab0d1cca.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.15.0/24
                IPv6:
                  2801:13:d000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265690

    Signature Algorithm: sha256WithRSAEncryption
         48:b7:2b:04:d4:1c:af:de:95:39:d3:36:0b:3d:dd:15:95:6c:
         21:83:78:ca:73:26:22:1d:bd:17:a4:2d:31:d2:0e:d8:ed:06:
         12:ec:35:1c:f3:98:ed:60:e9:07:b4:69:12:1c:65:7e:99:7c:
         ba:7b:33:62:3e:c0:d5:09:60:0f:c2:f4:4a:20:3c:de:06:3e:
         d1:88:d9:00:63:21:26:db:1e:dc:35:bb:12:30:34:e8:82:e6:
         9f:75:b6:49:ad:2d:ce:d8:f4:95:e1:ba:ad:38:95:23:e7:85:
         02:a1:9c:99:e4:5e:cd:89:db:e3:91:e7:36:28:f5:61:01:4f:
         fb:df:b0:e8:94:97:ca:63:d2:80:0a:70:f6:2d:83:0f:0e:f7:
         98:5c:82:ff:b8:4f:61:dc:61:e1:ba:16:d8:3a:0e:9d:71:5f:
         ee:4f:89:5a:8a:a7:4c:7e:4e:24:22:32:ea:76:97:a2:ee:3b:
         78:fa:60:05:50:b1:9b:01:3a:ed:5b:0d:61:58:5b:0c:39:9e:
         48:d4:0a:86:ab:9f:c8:e3:01:91:69:bc:fa:64:27:e8:43:b1:
         11:c2:84:f8:ec:bc:cb:ab:00:f4:b8:7a:80:69:64:f4:92:37:
         43:b5:47:db:72:40:f2:c5:30:91:59:ae:18:0c:5b:b5:f7:d7:
         99:a2:37:18
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEANrkOjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyOVoXDTI0MDEyOTE3MzQ1
NFowMzExMC8GA1UEAxMoZmI1ZGFjNzViODE2YjY3MjhhOWY1YWJhMDMwMDM4NmRh
YjBkMWNjYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIaxjf0hd/Nr
xEPxPWQj4wclCuHIMzjuKcD3CfwbMiV8YQtvgjXJsQjjEXIyFRoNPNLVVNUEzg2+
TVxzGM/iZk4+spmf+9GDW9CTv9ArcHFlXRrMDjfMC+YNwVbj+aI6Z0b9a62elbXF
r+SfQnEd3miRRoRq9ruvwfmPIdJlJk+fBeuqbMS/IUG0sGvZpbEaN0QitYKiuZTk
Ra8+qHQkO/Boig/gKr07WFq2jYOmiTQnZnqA7tXjGNjIgjrFzBYuFo0DT2PLMR1k
2mkqS8tF/cMu71vgYd8QY4zVB7IKoLg6UDSQef4R7xNLaJm6bLh+1zBzmboJu/Ow
CUwF74uBLp0CAwEAAaOCAwswggMHMB0GA1UdDgQWBBSdWBvlnXKBc7GLUwry1sqp
PUTwwTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83N2UyYjBjZS01ZTVm
LTQ4M2ItODcxNy0xNTc0NGM4NDJiNDMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzdlMmIwY2UtNWU1Zi00
ODNiLTg3MTctMTU3NDRjODQyYjQzL2ZiNWRhYzc1YjgxNmI2NzI4YTlmNWFiYTAz
MDAzODZkYWIwZDFjY2EubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAC0FDzAPBAIAAjAJAwcAKAEAE9AA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQN2jANBgkqhkiG9w0BAQsFAAOCAQEA
SLcrBNQcr96VOdM2Cz3dFZVsIYN4ynMmIh29F6QtMdIO2O0GEuw1HPOY7WDpB7Rp
Ehxlfpl8unszYj7A1QlgD8L0SiA83gY+0YjZAGMhJtse3DW7EjA06ILmn3W2Sa0t
ztj0leG6rTiVI+eFAqGcmeRezYnb45HnNij1YQFP+9+w6JSXymPSgApw9i2DDw73
mFyC/7hPYdxh4boW2DoOnXFf7k+JWoqnTH5OJCIy6naXou47ePpgBVCxmwE67VsN
YVhbDDmeSNQKhqufyOMBkWm8+mQn6EOxEcKE+Oy8y6sA9Lh6gGlk9JI3Q7VH23JA
8sUwkVmuGAxbtffXmaI3GA==
-----END CERTIFICATE-----