Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0736b876e6c976d927742fb22fc1d06c98292216.cer
File:                     0736b876e6c976d927742fb22fc1d06c98292216.cer (raw, json)
Hash identifier:          VujPMvpSJK2WkfACmy3ke88Vy8SywY3HXYo51ZoNH9o=
Subject key identifier:   E4:C8:26:B0:8C:18:BD:7F:97:7F:2B:35:5F:70:5D:26:C2:59:2A:07
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E210FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/0736b876e6c976d927742fb22fc1d06c98292216.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:23 +0000
Certificate not after:    Sun 21 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 262262
                          IP: 138.204.180.0/22
                          IP: 170.231.52.0/22
                          IP: 170.247.84.0/22
                          IP: 190.124.16.0/21
                          IP: 2803:b700::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14815486 (0xe210fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:23 2017 GMT
            Not After : Apr 21 06:00:00 2024 GMT
        Subject: CN=0736b876e6c976d927742fb22fc1d06c98292216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:67:08:f2:ca:f0:bf:e8:fd:8e:1d:92:fc:
                    0b:91:03:76:44:a2:37:9d:1b:fb:d2:b6:2c:1e:e1:
                    f9:58:3d:50:5e:f7:23:6c:29:48:af:dc:7a:e2:fa:
                    9d:61:82:cd:9b:01:13:b7:07:10:e5:8d:e2:46:f0:
                    9d:78:b3:3d:82:59:ef:02:e7:d4:c4:4e:54:5a:fe:
                    61:bd:91:ba:c0:8e:71:0d:07:21:92:da:00:84:cd:
                    5b:5e:c0:f6:90:a3:f3:5a:0f:4b:3d:38:16:02:3d:
                    51:8a:85:38:c3:4f:22:2e:ca:19:2c:4e:26:e5:f4:
                    0b:9a:76:e3:20:5c:db:2f:a5:2a:c0:62:eb:c5:f7:
                    3a:dc:d8:d4:d5:f7:e3:b5:43:37:bd:55:a9:d4:1d:
                    30:d6:92:eb:18:80:13:f8:fc:3b:b4:b1:48:9c:5f:
                    b5:c8:17:96:0f:06:a4:14:86:3a:3b:f6:80:eb:c9:
                    ce:1c:98:c1:5c:27:f1:55:4c:d2:ff:e5:6b:3e:16:
                    a4:f9:bc:47:5c:d6:b8:32:65:33:b9:68:5d:d1:11:
                    8e:4f:b2:47:a6:26:2c:47:bd:d0:c2:2a:4a:46:16:
                    03:a8:b9:5d:0e:4b:a3:2a:fa:33:e7:f7:a3:3b:5b:
                    5a:37:59:a2:ba:cd:86:0f:7b:fd:11:46:c0:54:af:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C8:26:B0:8C:18:BD:7F:97:7F:2B:35:5F:70:5D:26:C2:59:2A:07
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/0736b876e6c976d927742fb22fc1d06c98292216.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.180.0/22
                  170.231.52.0/22
                  170.247.84.0/22
                  190.124.16.0/21
                IPv6:
                  2803:b700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262262

    Signature Algorithm: sha256WithRSAEncryption
         21:fa:77:18:8a:e8:fc:2c:a0:c5:50:ff:16:33:74:a9:be:f7:
         c5:46:a1:97:50:64:28:53:42:03:ab:39:13:46:3a:c3:27:58:
         0f:00:a9:b3:69:ae:2a:dd:96:b6:a1:ac:d7:8d:0f:89:4b:7e:
         38:b0:59:1d:95:3e:72:b0:4b:2f:ad:7c:f3:d4:e8:8a:e4:f2:
         f6:d4:ff:58:74:fd:d6:d6:85:00:79:d4:c2:f8:43:22:6e:fc:
         3c:24:23:2e:21:ce:14:a7:1e:09:6e:4c:8e:0e:38:57:3c:d6:
         7d:1d:76:e2:ac:1e:a7:d6:35:3e:1a:52:b3:24:be:16:da:e5:
         9a:4d:28:9e:f9:ff:e8:d0:a5:95:65:fd:95:8a:4d:27:4f:32:
         48:38:35:cf:b8:44:5a:66:c4:9b:ab:74:79:9f:c6:17:d9:10:
         c7:58:21:56:de:61:0f:99:13:70:d1:0e:c6:dd:c4:12:54:41:
         49:52:d2:fb:f1:7e:8a:87:f8:0b:95:e3:30:d7:ec:a2:af:04:
         8b:67:9b:c9:b3:28:f0:1c:9d:19:18:02:3f:2f:eb:76:3a:2a:
         54:9f:40:24:20:44:26:b8:e7:a0:ae:88:65:14:7a:6a:cc:b4:
         0e:b1:86:f7:53:d0:f7:d5:9d:6e:7e:05:68:c6:bc:6f:d6:9c:
         ae:66:28:b8
-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgIEAOIQ/jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcyM1oXDTI0MDQyMTA2MDAw
MFowMzExMC8GA1UEAxMoMDczNmI4NzZlNmM5NzZkOTI3NzQyZmIyMmZjMWQwNmM5
ODI5MjIxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJQ2ZwjyyvC/
6P2OHZL8C5EDdkSiN50b+9K2LB7h+Vg9UF73I2wpSK/ceuL6nWGCzZsBE7cHEOWN
4kbwnXizPYJZ7wLn1MROVFr+Yb2RusCOcQ0HIZLaAITNW17A9pCj81oPSz04FgI9
UYqFOMNPIi7KGSxOJuX0C5p24yBc2y+lKsBi68X3OtzY1NX347VDN71VqdQdMNaS
6xiAE/j8O7SxSJxftcgXlg8GpBSGOjv2gOvJzhyYwVwn8VVM0v/laz4WpPm8R1zW
uDJlM7loXdERjk+yR6YmLEe90MIqSkYWA6i5XQ5Loyr6M+f3oztbWjdZorrNhg97
/RFGwFSvm/8CAwEAAaOCAxswggMXMB0GA1UdDgQWBBTkyCawjBi9f5d/KzVfcF0m
wlkqBzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xNzczMmJhNi03NmQz
LTQ1Y2EtODIyZS04MDJiNTRmYzk4MDAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTc3MzJiYTYtNzZkMy00
NWNhLTgyMmUtODAyYjU0ZmM5ODAwLzA3MzZiODc2ZTZjOTc2ZDkyNzc0MmZiMjJm
YzFkMDZjOTgyOTIyMTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAorMtAMEAqrnNAMEAqr3VAMEA758
EDANBAIAAjAHAwUAKAO3ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAHYwDQYJ
KoZIhvcNAQELBQADggEBACH6dxiK6PwsoMVQ/xYzdKm+98VGoZdQZChTQgOrORNG
OsMnWA8AqbNprirdlrahrNeND4lLfjiwWR2VPnKwSy+tfPPU6Irk8vbU/1h0/dbW
hQB51ML4QyJu/DwkIy4hzhSnHgluTI4OOFc81n0dduKsHqfWNT4aUrMkvhba5ZpN
KJ75/+jQpZVl/ZWKTSdPMkg4Nc+4RFpmxJurdHmfxhfZEMdYIVbeYQ+ZE3DRDsbd
xBJUQUlS0vvxfoqH+AuV4zDX7KKvBItnm8mzKPAcnRkYAj8v63Y6KlSfQCQgRCa4
56CuiGUUemrMtA6xhvdT0PfVnW5+BWjGvG/WnK5mKLg=
-----END CERTIFICATE-----