Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4c34beded58f9028077382865f49d5f2d2c5b13.cer
File:                     c4c34beded58f9028077382865f49d5f2d2c5b13.cer (raw, json)
Hash identifier:          dVlXn3FO0R+oRTf+NzA14X7NNYfywoovoIn5gzeu340=
Subject key identifier:   A9:C0:A9:D6:35:53:63:70:EC:A3:47:35:41:B1:AF:2F:94:2E:F3:E4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01033428
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3a99f809-08d7-44c0-a4ac-0647313941e1/c4c34beded58f9028077382865f49d5f2d2c5b13.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3a99f809-08d7-44c0-a4ac-0647313941e1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:31 +0000
Certificate not after:    Wed 08 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 265666
                          IP: 45.5.56.0/22
                          IP: 2803:eec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16987176 (0x1033428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:31 2017 GMT
            Not After : Jan  8 05:00:00 2025 GMT
        Subject: CN=c4c34beded58f9028077382865f49d5f2d2c5b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b7:0c:b4:ab:71:f5:bc:3d:08:c1:35:4f:3b:
                    60:18:ce:85:1b:0a:3d:fb:7c:cb:ad:24:db:58:36:
                    68:0e:d0:af:06:51:34:de:13:e3:41:8c:7a:94:ca:
                    40:e6:8d:3a:a9:3a:a5:f7:f1:17:1e:2b:ed:84:07:
                    ce:2c:08:fc:c8:ad:c0:b0:4c:ea:e0:27:55:45:3c:
                    d7:b8:59:85:54:e6:7d:ed:1e:8f:f8:30:17:b6:ee:
                    8a:c6:88:d4:3a:f1:7a:0a:e6:d1:48:9e:9c:07:f9:
                    cd:dc:5b:9c:b3:39:a0:06:11:bb:da:4c:98:a0:49:
                    73:7a:6b:3d:e2:22:fc:28:f6:3e:ae:19:0f:17:ad:
                    15:74:78:bd:59:cc:2a:09:59:2f:f0:5a:d2:80:37:
                    1f:ac:96:88:f4:c2:4b:90:e0:b3:28:11:35:c9:9b:
                    d9:69:e1:90:71:42:15:eb:7b:97:71:10:b8:0d:fb:
                    db:a0:d9:9e:23:b5:89:df:02:d5:14:63:3e:7a:dd:
                    ab:6f:e8:c5:5a:6e:dc:08:c0:bd:24:b7:e8:be:5f:
                    c8:19:a6:df:3f:3c:b0:1a:66:ba:7e:bb:bd:80:88:
                    a3:f5:dc:a4:ce:d6:51:9f:dd:4e:6c:01:bf:d8:c0:
                    89:2b:e8:c8:e6:75:ed:54:e1:f9:ed:8c:ce:41:27:
                    e6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C0:A9:D6:35:53:63:70:EC:A3:47:35:41:B1:AF:2F:94:2E:F3:E4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3a99f809-08d7-44c0-a4ac-0647313941e1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3a99f809-08d7-44c0-a4ac-0647313941e1/c4c34beded58f9028077382865f49d5f2d2c5b13.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.56.0/22
                IPv6:
                  2803:eec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265666

    Signature Algorithm: sha256WithRSAEncryption
         8a:31:9c:8f:05:1a:ab:f9:f1:ab:f3:08:b8:d0:cb:8a:ac:84:
         16:54:41:da:4c:6e:1d:6c:3b:a0:b8:6b:74:bc:9e:e0:43:e3:
         a7:4b:04:0e:4e:92:47:3c:b8:9c:12:29:ae:7b:91:7c:4e:d2:
         51:5d:71:c9:b8:a4:ae:61:84:a8:a9:8a:6e:83:f4:07:79:de:
         35:7f:0a:30:e5:27:e9:61:f5:4a:51:df:2a:87:39:02:90:1d:
         a6:12:92:44:c5:c5:95:fb:e5:c4:c2:e2:ba:60:57:0a:9a:b7:
         66:fa:6b:6b:73:f0:f9:d6:42:ce:3d:17:4f:ba:9a:0b:76:bf:
         8d:36:48:5f:c8:21:c0:98:0c:44:4b:9d:c0:93:04:99:23:b9:
         cb:ae:53:da:b9:6d:a4:d7:98:93:63:9e:13:e6:32:8f:b1:5e:
         5d:ea:d6:76:21:5d:be:4b:25:2f:f6:ec:61:a2:7b:c1:ad:2f:
         08:34:8b:b7:6f:8c:bf:f2:ae:8f:89:1c:71:ba:26:48:fc:89:
         37:9e:2c:29:f6:da:d7:85:1a:d5:68:b9:c2:e0:70:71:7b:c9:
         76:82:2b:91:34:4b:d0:9b:af:c3:2b:e5:c0:53:e5:d9:6c:71:
         1d:c6:13:72:b3:8a:1e:22:58:16:3a:45:b1:8d:07:f9:8e:a0:
         07:f2:be:b3
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQM0KDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzczMVoXDTI1MDEwODA1MDAw
MFowMzExMC8GA1UEAxMoYzRjMzRiZWRlZDU4ZjkwMjgwNzczODI4NjVmNDlkNWYy
ZDJjNWIxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI63DLSrcfW8
PQjBNU87YBjOhRsKPft8y60k21g2aA7QrwZRNN4T40GMepTKQOaNOqk6pffxFx4r
7YQHziwI/MitwLBM6uAnVUU817hZhVTmfe0ej/gwF7buisaI1Drxegrm0UienAf5
zdxbnLM5oAYRu9pMmKBJc3prPeIi/Cj2Pq4ZDxetFXR4vVnMKglZL/Ba0oA3H6yW
iPTCS5DgsygRNcmb2WnhkHFCFet7l3EQuA3726DZniO1id8C1RRjPnrdq2/oxVpu
3AjAvSS36L5fyBmm3z88sBpmun67vYCIo/XcpM7WUZ/dTmwBv9jAiSvoyOZ17VTh
+e2MzkEn5h8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSpwKnWNVNjcOyjRzVBsa8v
lC7z5DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zYTk5ZjgwOS0wOGQ3
LTQ0YzAtYTRhYy0wNjQ3MzEzOTQxZTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2E5OWY4MDktMDhkNy00
NGMwLWE0YWMtMDY0NzMxMzk0MWUxL2M0YzM0YmVkZWQ1OGY5MDI4MDc3MzgyODY1
ZjQ5ZDVmMmQyYzViMTMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0FODANBAIAAjAHAwUAKAPuwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDcIwDQYJKoZIhvcNAQELBQADggEBAIox
nI8FGqv58avzCLjQy4qshBZUQdpMbh1sO6C4a3S8nuBD46dLBA5Okkc8uJwSKa57
kXxO0lFdccm4pK5hhKipim6D9Ad53jV/CjDlJ+lh9UpR3yqHOQKQHaYSkkTFxZX7
5cTC4rpgVwqat2b6a2tz8PnWQs49F0+6mgt2v402SF/IIcCYDERLncCTBJkjucuu
U9q5baTXmJNjnhPmMo+xXl3q1nYhXb5LJS/27GGie8GtLwg0i7dvjL/yro+JHHG6
Jkj8iTeeLCn22teFGtVoucLgcHF7yXaCK5E0S9Cbr8Mr5cBT5dlscR3GE3Kzih4i
WBY6RbGNB/mOoAfyvrM=
-----END CERTIFICATE-----