Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc196811ad94bf06a04dbd9b9e1659b5f0e56908.cer
File:                     fc196811ad94bf06a04dbd9b9e1659b5f0e56908.cer (raw, json)
Hash identifier:          qPHl2Jm5P9qAUZy3xiVSAeWslC5tJwUI2o7xqwZLLw0=
Subject key identifier:   4B:13:A2:2E:F7:E5:86:9E:EF:DA:DE:14:B5:1A:40:55:D2:DC:DF:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC5E07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/fc196811ad94bf06a04dbd9b9e1659b5f0e56908.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:38 +0000
Certificate not after:    Sat 17 Feb 2024 18:05:06 +0000
Subordinate resources:    AS: 263754
                          IP: 138.117.8.0/22
                          IP: 2803:7040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14441991 (0xdc5e07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:38 2017 GMT
            Not After : Feb 17 18:05:06 2024 GMT
        Subject: CN=fc196811ad94bf06a04dbd9b9e1659b5f0e56908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:d3:48:03:02:2e:83:bb:29:28:f2:ed:6a:
                    9e:ad:3e:2e:ad:ee:54:af:c9:61:47:6f:b4:32:2b:
                    d0:51:e6:7b:62:10:0a:08:fa:e6:9b:82:88:02:e7:
                    e6:07:c9:11:bd:ca:62:5e:e7:12:4f:e8:da:15:01:
                    65:27:ec:87:fa:a9:cf:96:64:93:82:1f:12:60:fa:
                    17:29:5a:c1:37:b3:2f:9d:1c:8b:77:69:a1:a7:1d:
                    32:92:a2:20:0c:70:63:a3:c4:f2:7a:6e:93:91:90:
                    44:f6:93:e5:b8:05:78:37:a3:33:7e:09:15:58:de:
                    a3:3e:c1:71:a1:8d:13:1e:5f:fb:a9:a4:1f:5f:bc:
                    76:ab:93:b8:b4:56:ec:24:27:43:9b:4d:c0:59:4b:
                    9a:84:d4:50:65:a2:80:c7:f0:e6:23:8b:66:a8:f8:
                    24:02:d9:7d:1e:80:8c:62:02:10:7c:94:09:14:a9:
                    74:ea:08:8f:52:8b:b1:b2:d6:91:93:78:3d:57:2a:
                    c3:30:37:a6:e6:61:9f:16:f3:4b:4d:cb:14:40:33:
                    b3:a7:52:9f:26:b6:f8:e4:f4:85:9e:b6:fd:de:67:
                    25:61:5b:58:e4:d6:a3:fb:7d:de:46:31:4c:42:ac:
                    18:65:5c:da:b2:48:cb:d2:7c:3a:ab:21:e6:42:6e:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:13:A2:2E:F7:E5:86:9E:EF:DA:DE:14:B5:1A:40:55:D2:DC:DF:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/fc196811ad94bf06a04dbd9b9e1659b5f0e56908.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.8.0/22
                IPv6:
                  2803:7040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263754

    Signature Algorithm: sha256WithRSAEncryption
         12:be:0d:c7:d2:30:2e:65:59:47:d0:c1:1b:a3:17:51:f3:83:
         f0:f6:ec:b1:e3:86:4c:49:03:81:0e:53:15:e9:d2:31:93:a3:
         e5:86:38:e2:d4:11:0c:a0:79:63:57:e1:cf:4c:89:da:fe:fb:
         06:cd:63:a2:1d:bb:98:92:af:54:7e:4f:b8:b0:d2:15:b1:ea:
         73:b2:33:42:07:bb:db:b6:86:4a:f9:99:06:62:a0:91:8d:c5:
         a0:4a:bf:df:4c:1a:1f:8e:af:06:df:9f:ca:b8:f3:cf:14:8a:
         dc:f1:cb:5f:23:c5:e7:2c:0c:91:a6:32:b5:25:54:66:be:2a:
         cd:ef:cc:db:ea:d5:1a:f9:3a:fd:e7:97:02:67:a2:47:a3:7b:
         c3:ba:cc:0a:07:a0:89:6b:fc:fd:b7:5b:d0:58:05:d1:be:2d:
         a1:08:3e:40:f8:45:5d:13:2a:43:e3:28:a6:e8:40:aa:a4:b1:
         ff:19:0d:b7:d3:33:b2:c8:7d:39:ff:0a:75:5d:75:df:1e:cb:
         3c:d4:40:95:ed:1a:95:3f:81:ce:03:5c:a9:84:bc:32:29:36:
         d5:74:f2:05:6b:1f:7e:f2:a4:3e:62:bd:fa:79:da:7e:fe:78:
         48:ec:93:e5:2a:13:bd:54:1b:08:c5:00:8d:97:3a:a6:8a:b6:
         3c:4b:0e:70
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANxeBzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzOFoXDTI0MDIxNzE4MDUw
NlowMzExMC8GA1UEAxMoZmMxOTY4MTFhZDk0YmYwNmEwNGRiZDliOWUxNjU5YjVm
MGU1NjkwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALdQ00gDAi6D
uyko8u1qnq0+Lq3uVK/JYUdvtDIr0FHme2IQCgj65puCiALn5gfJEb3KYl7nEk/o
2hUBZSfsh/qpz5Zkk4IfEmD6FylawTezL50ci3dpoacdMpKiIAxwY6PE8npuk5GQ
RPaT5bgFeDejM34JFVjeoz7BcaGNEx5f+6mkH1+8dquTuLRW7CQnQ5tNwFlLmoTU
UGWigMfw5iOLZqj4JALZfR6AjGICEHyUCRSpdOoIj1KLsbLWkZN4PVcqwzA3puZh
nxbzS03LFEAzs6dSnya2+OT0hZ62/d5nJWFbWOTWo/t93kYxTEKsGGVc2rJIy9J8
Oqsh5kJu+VcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRLE6Iu9+WGnu/a3hS1GkBV
0tzfyTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83MGUwZWRlYS0zMzgz
LTRiNDEtYjc5MS04ODg2YWM1N2U5NGYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzBlMGVkZWEtMzM4My00
YjQxLWI3OTEtODg4NmFjNTdlOTRmL2ZjMTk2ODExYWQ5NGJmMDZhMDRkYmQ5Yjll
MTY1OWI1ZjBlNTY5MDgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAop1CDANBAIAAjAHAwUAKANwQDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBkowDQYJKoZIhvcNAQELBQADggEBABK+
DcfSMC5lWUfQwRujF1Hzg/D27LHjhkxJA4EOUxXp0jGTo+WGOOLUEQygeWNX4c9M
idr++wbNY6Idu5iSr1R+T7iw0hWx6nOyM0IHu9u2hkr5mQZioJGNxaBKv99MGh+O
rwbfn8q4888Uitzxy18jxecsDJGmMrUlVGa+Ks3vzNvq1Rr5Ov3nlwJnokeje8O6
zAoHoIlr/P23W9BYBdG+LaEIPkD4RV0TKkPjKKboQKqksf8ZDbfTM7LIfTn/CnVd
dd8eyzzUQJXtGpU/gc4DXKmEvDIpNtV08gVrH37ypD5ivfp52n7+eEjsk+UqE71U
GwjFAI2XOqaKtjxLDnA=
-----END CERTIFICATE-----