Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.cer
File:                     fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.cer (raw, json)
Hash identifier:          cEc48aKNGp4Z3nr3um+y8LWrdQ9IR3E67572HWMRrMY=
Subject key identifier:   C9:AF:3E:90:B4:D4:15:3A:ED:3C:22:DD:4D:BE:95:F2:3E:74:2D:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCF154
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:50 +0000
Certificate not after:    Sat 24 Feb 2024 06:00:00 +0000
Subordinate resources:    AS: 27897
                          IP: 158.170.0.0/16
                          IP: 2801:0:150::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14479700 (0xdcf154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:50 2017 GMT
            Not After : Feb 24 06:00:00 2024 GMT
        Subject: CN=fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8e:e4:49:0d:05:16:d8:8c:04:09:27:52:b2:
                    b6:43:d3:2c:fe:07:3d:c5:54:f1:c5:47:71:45:da:
                    0f:fb:df:8b:bc:87:fb:48:a1:c9:f7:13:50:b7:95:
                    d2:0d:ac:8b:65:ff:4d:03:7c:c3:9f:76:67:01:0e:
                    d5:fa:9b:8e:d3:93:ea:a9:56:a9:fa:bc:12:11:21:
                    53:a1:40:cf:a7:b4:d0:99:4b:cd:4f:ef:a9:55:76:
                    f7:bc:01:52:04:aa:df:d3:40:cd:48:ea:fb:d4:18:
                    eb:b8:40:3b:c9:32:f7:e4:5d:12:4e:e3:8b:10:b4:
                    dc:c2:13:1b:e2:a0:5d:39:53:58:8f:80:a2:07:66:
                    e0:6e:6b:ff:d1:91:e5:59:ed:d8:f7:09:5a:43:57:
                    4e:37:8b:68:8c:9a:bf:72:ff:0b:7e:04:41:27:63:
                    28:18:fb:bb:0f:a3:0c:ad:86:58:62:b0:50:fc:9a:
                    8d:e6:45:18:64:ff:5b:3f:db:40:3d:19:aa:14:68:
                    65:f8:a4:12:13:3e:a7:44:dc:a6:1b:59:17:59:cc:
                    73:21:44:6a:13:2f:0c:b7:d6:f5:9d:64:6b:b1:e3:
                    be:f5:8f:36:43:6f:f9:2c:b2:5a:4d:3d:74:81:fb:
                    a3:6c:d9:69:1d:cf:dc:a6:9a:24:3a:ce:b9:a9:81:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AF:3E:90:B4:D4:15:3A:ED:3C:22:DD:4D:BE:95:F2:3E:74:2D:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.170.0.0/16
                IPv6:
                  2801:0:150::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27897

    Signature Algorithm: sha256WithRSAEncryption
         60:0f:38:fe:b6:9b:3a:4b:f2:86:ac:fd:64:f0:fc:e5:4c:66:
         d4:99:62:d6:02:35:97:b2:2f:f4:2e:ec:99:78:98:4b:35:69:
         68:aa:78:fc:fa:7f:62:3f:22:a9:11:37:44:55:b6:96:89:b1:
         35:e9:0a:0d:9c:d6:72:6c:f4:c5:05:3d:1b:af:22:25:86:bf:
         80:94:b9:4e:c6:64:9a:e2:3b:c9:32:53:0d:51:f0:53:56:f0:
         ee:ba:f9:5a:86:7c:02:5c:62:e5:bb:21:f9:50:b7:2b:12:af:
         68:ae:83:9e:23:52:75:b3:02:71:59:ea:b3:41:e1:4e:24:96:
         3c:67:79:b4:dc:f1:2c:99:c9:f2:78:b4:d9:46:39:fd:0b:28:
         42:eb:c9:f6:32:29:d0:78:46:85:59:85:f7:51:21:c7:b8:b2:
         6d:07:68:f1:6c:2b:4d:ea:e7:4d:6c:b8:48:08:ff:c6:ef:7c:
         03:93:a9:4f:5d:63:4d:31:06:7f:04:29:78:08:7e:86:89:3b:
         dc:ba:6f:a4:27:62:39:54:6c:65:68:6e:34:9c:6e:78:bf:48:
         f7:d3:a5:bd:b9:cc:e5:b5:55:73:73:f3:59:7c:60:46:95:8a:
         bc:cf:d6:6b:f5:5d:38:4b:e4:fc:83:52:c2:f4:2f:fd:f7:ed:
         7f:16:15:2b
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANzxVDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1MFoXDTI0MDIyNDA2MDAw
MFowMzExMC8GA1UEAxMoZmNkMTk3OTNmZGQ1ZjZkMjgzZjNjYzE5MjViN2Q4MWNl
ZWI0NTBmMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIiO5EkNBRbY
jAQJJ1KytkPTLP4HPcVU8cVHcUXaD/vfi7yH+0ihyfcTULeV0g2si2X/TQN8w592
ZwEO1fqbjtOT6qlWqfq8EhEhU6FAz6e00JlLzU/vqVV297wBUgSq39NAzUjq+9QY
67hAO8ky9+RdEk7jixC03MITG+KgXTlTWI+Aogdm4G5r/9GR5Vnt2PcJWkNXTjeL
aIyav3L/C34EQSdjKBj7uw+jDK2GWGKwUPyajeZFGGT/Wz/bQD0ZqhRoZfikEhM+
p0TcphtZF1nMcyFEahMvDLfW9Z1ka7HjvvWPNkNv+SyyWk09dIH7o2zZaR3P3Kaa
JDrOuamBdHMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTJrz6QtNQVOu08It1NvpXy
PnQtszAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMzY4MGM3ZC1hZmMy
LTQ1NTYtYWNlZS01MjdmZTcwMGFkMzAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTM2ODBjN2QtYWZjMi00
NTU2LWFjZWUtNTI3ZmU3MDBhZDMwL2ZjZDE5NzkzZmRkNWY2ZDI4M2YzY2MxOTI1
YjdkODFjZWViNDUwZjAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wCwQCAAEwBQMDAJ6qMA8EAgACMAkDBwAoAQAAAVAw
GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbPkwDQYJKoZIhvcNAQELBQADggEBAGAP
OP62mzpL8oas/WTw/OVMZtSZYtYCNZeyL/Qu7Jl4mEs1aWiqePz6f2I/IqkRN0RV
tpaJsTXpCg2c1nJs9MUFPRuvIiWGv4CUuU7GZJriO8kyUw1R8FNW8O66+VqGfAJc
YuW7IflQtysSr2iug54jUnWzAnFZ6rNB4U4kljxnebTc8SyZyfJ4tNlGOf0LKELr
yfYyKdB4RoVZhfdRIce4sm0HaPFsK03q501suEgI/8bvfAOTqU9dY00xBn8EKXgI
foaJO9y6b6QnYjlUbGVobjScbni/SPfTpb25zOW1VXNz81l8YEaVirzP1mv1XThL
5PyDUsL0L/337X8WFSs=
-----END CERTIFICATE-----