Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8908cac79885ef864fb67bc8ac0a9bd63eb7df98.cer
File:                     8908cac79885ef864fb67bc8ac0a9bd63eb7df98.cer (raw, json)
Hash identifier:          qiqWjBsyPQC8bys3x7U38sxZJpeyP4V79sNj/hTDMHg=
Subject key identifier:   DD:7F:CB:39:65:9E:80:9A:C2:23:62:86:6B:39:05:9C:20:B5:9B:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010123F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e3554149-987a-48e1-868e-ca56c31c9bf7/8908cac79885ef864fb67bc8ac0a9bd63eb7df98.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e3554149-987a-48e1-868e-ca56c31c9bf7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 14 Jul 2018 04:17:40 +0000
Certificate not after:    Sat 14 Dec 2024 17:03:51 +0000
Subordinate resources:    AS: 266731
                          IP: 45.230.48.0/22
                          IP: 2803:3320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16851957 (0x10123f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 14 04:17:40 2018 GMT
            Not After : Dec 14 17:03:51 2024 GMT
        Subject: CN=8908cac79885ef864fb67bc8ac0a9bd63eb7df98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:cc:88:1d:05:ea:c6:60:49:33:6b:8d:00:
                    97:76:ec:ca:ef:b7:64:49:67:20:5e:8c:d0:0c:04:
                    33:fc:7f:9f:18:7d:f2:60:75:32:5b:ba:8f:99:3f:
                    c8:6c:55:92:f8:1f:a7:36:6c:1e:38:5c:3b:cf:90:
                    d3:1b:24:e5:8e:99:2f:a1:25:31:78:ae:e5:4b:35:
                    00:77:ae:fd:70:1d:4c:8d:47:13:b7:18:1a:e4:a9:
                    0f:40:ba:5a:bb:b5:06:72:39:5d:da:ac:ae:95:72:
                    de:bb:ac:cc:0b:03:ab:d0:11:db:cb:ca:70:b5:ae:
                    6f:62:a7:cd:5e:55:08:0a:7c:fd:d7:97:0d:19:5a:
                    40:1d:b6:ae:10:b6:fa:e5:76:5a:4f:83:7c:5c:a9:
                    5c:f3:19:3c:4b:7b:2c:75:73:6b:47:77:99:79:3c:
                    c5:48:07:e4:6d:0f:d7:fe:3c:5e:fb:08:89:3d:db:
                    f2:ab:a3:ae:ed:5b:fa:5b:7c:38:77:da:a2:cd:9f:
                    a6:97:ac:a2:5f:e2:53:72:31:9f:df:25:67:56:8e:
                    c1:6a:a0:fc:1f:3d:7b:ed:c8:ef:84:d6:49:93:96:
                    af:0e:60:0d:92:15:b3:92:53:71:75:9a:c4:7f:9f:
                    50:1a:a7:42:8e:f0:8d:a8:35:3b:28:aa:0e:3f:bb:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7F:CB:39:65:9E:80:9A:C2:23:62:86:6B:39:05:9C:20:B5:9B:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e3554149-987a-48e1-868e-ca56c31c9bf7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e3554149-987a-48e1-868e-ca56c31c9bf7/8908cac79885ef864fb67bc8ac0a9bd63eb7df98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.48.0/22
                IPv6:
                  2803:3320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266731

    Signature Algorithm: sha256WithRSAEncryption
         aa:c9:a0:d8:8b:8d:fd:96:57:c5:85:3d:4a:33:2c:3d:16:bb:
         40:1e:c7:0a:91:08:d9:94:b4:98:07:db:4b:0d:dd:ae:11:8a:
         94:50:88:e0:0d:dc:b1:f4:3a:11:23:04:65:15:db:31:4a:61:
         d6:0a:e3:b2:a8:89:67:74:a0:b9:52:88:fb:82:2b:e7:e2:cd:
         4f:dd:9a:aa:bd:ff:ab:48:87:5f:09:20:52:34:0d:90:29:38:
         de:ac:cd:87:a1:54:23:fd:28:f2:79:28:12:dd:0c:01:01:a4:
         46:44:71:a4:ba:a7:b5:68:9a:09:c8:2f:d3:41:06:64:68:90:
         ef:47:4b:1a:36:dd:80:db:91:67:df:dd:84:5a:1e:de:ba:c8:
         8e:70:d0:1b:30:6f:a2:1e:3f:42:e3:86:23:d1:22:70:cb:25:
         e0:88:12:25:8c:7f:e8:71:6b:e1:5a:6c:bd:45:ef:6f:9c:1c:
         50:6c:24:55:77:8c:07:03:dc:7c:3a:e0:55:d2:ae:a7:f8:39:
         de:b3:54:e3:5d:5b:52:c3:37:71:ed:fa:cd:25:aa:07:6d:6b:
         1d:04:1a:93:b5:2a:02:00:85:2d:db:15:72:03:cf:20:43:0c:
         01:69:cf:ba:23:5f:5b:45:7a:cb:57:74:e2:28:92:16:a2:ae:
         0f:a6:39:57
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQEj9TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDcxNDA0MTc0MFoXDTI0MTIxNDE3MDM1
MVowMzExMC8GA1UEAxMoODkwOGNhYzc5ODg1ZWY4NjRmYjY3YmM4YWMwYTliZDYz
ZWI3ZGY5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKsxzIgdBerG
YEkza40Al3bsyu+3ZElnIF6M0AwEM/x/nxh98mB1Mlu6j5k/yGxVkvgfpzZsHjhc
O8+Q0xsk5Y6ZL6ElMXiu5Us1AHeu/XAdTI1HE7cYGuSpD0C6Wru1BnI5XdqsrpVy
3ruszAsDq9AR28vKcLWub2KnzV5VCAp8/deXDRlaQB22rhC2+uV2Wk+DfFypXPMZ
PEt7LHVza0d3mXk8xUgH5G0P1/48XvsIiT3b8qujru1b+lt8OHfaos2fppesol/i
U3Ixn98lZ1aOwWqg/B89e+3I74TWSZOWrw5gDZIVs5JTcXWaxH+fUBqnQo7wjag1
OyiqDj+7PgUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTdf8s5ZZ6AmsIjYoZrOQWc
ILWbUjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lMzU1NDE0OS05ODdh
LTQ4ZTEtODY4ZS1jYTU2YzMxYzliZjcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTM1NTQxNDktOTg3YS00
OGUxLTg2OGUtY2E1NmMzMWM5YmY3Lzg5MDhjYWM3OTg4NWVmODY0ZmI2N2JjOGFj
MGE5YmQ2M2ViN2RmOTgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3mMDANBAIAAjAHAwUAKAMzIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEeswDQYJKoZIhvcNAQELBQADggEBAKrJ
oNiLjf2WV8WFPUozLD0Wu0AexwqRCNmUtJgH20sN3a4RipRQiOAN3LH0OhEjBGUV
2zFKYdYK47KoiWd0oLlSiPuCK+fizU/dmqq9/6tIh18JIFI0DZApON6szYehVCP9
KPJ5KBLdDAEBpEZEcaS6p7VomgnIL9NBBmRokO9HSxo23YDbkWff3YRaHt66yI5w
0Bswb6IeP0LjhiPRInDLJeCIEiWMf+hxa+FabL1F72+cHFBsJFV3jAcD3Hw64FXS
rqf4Od6zVONdW1LDN3Ht+s0lqgdtax0EGpO1KgIAhS3bFXIDzyBDDAFpz7ojX1tF
estXdOIokhairg+mOVc=
-----END CERTIFICATE-----