Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/081acaf6c099f3fe380fb58f107c4f30db2c4ab0.cer
File:                     081acaf6c099f3fe380fb58f107c4f30db2c4ab0.cer (raw, json)
Hash identifier:          T60CkQPuhFnZ7u/wYfdB6ha+ceioQhiFd77Pr9+NTF8=
Subject key identifier:   F1:FF:F3:F3:66:AE:F4:E1:FE:54:16:89:7A:5E:FF:B8:5F:9F:6F:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBCDC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b001c800-6c10-4dc5-a954-d283443006fe/081acaf6c099f3fe380fb58f107c4f30db2c4ab0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b001c800-6c10-4dc5-a954-d283443006fe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:30 +0000
Certificate not after:    Sun 30 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 52394
                          IP: 201.221.120.0/24
                          IP: 2801:0:3e0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15453632 (0xebcdc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:30 2017 GMT
            Not After : Jun 30 06:00:00 2024 GMT
        Subject: CN=081acaf6c099f3fe380fb58f107c4f30db2c4ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:62:bf:86:57:9b:44:36:22:38:ba:0f:9f:
                    1c:7e:db:b6:e3:a4:df:02:ed:ba:cd:ed:4a:08:45:
                    37:32:2d:f6:ff:59:15:cc:34:be:cb:cd:f2:4e:8b:
                    d9:15:2e:27:9c:2f:47:47:4f:b2:8c:9a:e4:3a:50:
                    ed:79:50:0c:b8:aa:39:e6:3b:7b:a9:83:26:68:4c:
                    98:36:d5:ab:90:26:02:32:82:69:39:e2:44:4a:6f:
                    ae:0a:7a:bf:7f:e8:4a:48:47:32:50:02:9d:e4:c5:
                    fb:8f:57:17:f8:0b:18:de:eb:05:08:5e:e8:1f:9d:
                    b6:9d:f7:1d:8d:28:7c:93:59:2a:96:7e:33:1f:94:
                    62:26:d2:d6:c7:40:37:c5:86:7e:e8:e7:de:22:67:
                    bb:75:e7:d6:35:a7:7b:f6:8a:6b:df:e5:0a:18:e0:
                    b9:27:be:7b:4d:d7:b2:04:b0:30:d0:70:0f:6e:ed:
                    eb:04:71:92:84:e1:7e:ea:a1:d8:5f:d6:e4:64:e4:
                    64:a1:85:0f:33:ed:d8:55:64:75:40:28:61:6d:15:
                    99:a4:d7:5b:7a:20:1c:dd:52:30:69:81:15:70:3e:
                    4d:0a:3f:cb:f5:76:e9:b3:24:fb:79:a1:8e:9c:94:
                    59:62:4a:b2:7d:cd:bf:0f:2d:cf:36:46:76:ce:e4:
                    00:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FF:F3:F3:66:AE:F4:E1:FE:54:16:89:7A:5E:FF:B8:5F:9F:6F:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b001c800-6c10-4dc5-a954-d283443006fe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b001c800-6c10-4dc5-a954-d283443006fe/081acaf6c099f3fe380fb58f107c4f30db2c4ab0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.120.0/24
                IPv6:
                  2801:0:3e0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52394

    Signature Algorithm: sha256WithRSAEncryption
         6e:a6:ef:8e:36:ef:b0:34:77:0d:21:11:f0:45:cd:fb:d4:af:
         23:cf:98:7d:f7:8c:2d:6a:b9:42:49:38:b7:c0:3c:6b:db:00:
         8a:45:ba:a8:6d:53:38:c4:de:b8:f4:39:a3:65:d0:d4:4b:bb:
         75:2a:5b:cb:a6:f3:24:b7:c2:7c:e3:8b:a4:18:2c:dd:0f:6a:
         89:69:39:46:a6:0f:e0:59:07:d9:6a:fd:87:97:c8:67:83:89:
         fc:7b:03:1b:6d:b8:0d:3f:e9:d2:08:29:5b:bf:6b:bc:e9:10:
         d1:8d:95:77:49:83:21:07:03:7a:c3:33:1c:1f:59:73:8c:0a:
         20:03:db:b1:86:9c:e7:d1:d0:61:da:0b:4e:95:be:3f:32:2a:
         b3:3f:76:17:a0:07:90:4f:a8:b4:8a:7f:a6:d2:ec:60:f8:20:
         f6:7b:80:c0:f4:19:87:3b:80:e5:8a:05:72:f6:ee:ad:b2:3a:
         99:42:29:a4:f6:63:02:bb:96:26:75:2c:c7:6f:fe:cd:45:71:
         da:54:61:12:06:ce:81:25:b9:10:af:b9:e4:22:3e:73:05:be:
         44:ba:d7:7c:0f:1a:1d:b1:07:72:80:e8:9c:5e:ba:11:a1:24:
         32:24:d1:16:99:c3:76:ce:b3:c0:a3:a6:17:e2:fb:ec:2f:a3:
         35:23:4a:b2
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAOvNwDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzMFoXDTI0MDYzMDA2MDAw
MFowMzExMC8GA1UEAxMoMDgxYWNhZjZjMDk5ZjNmZTM4MGZiNThmMTA3YzRmMzBk
YjJjNGFiMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMksYr+GV5tE
NiI4ug+fHH7btuOk3wLtus3tSghFNzIt9v9ZFcw0vsvN8k6L2RUuJ5wvR0dPsoya
5DpQ7XlQDLiqOeY7e6mDJmhMmDbVq5AmAjKCaTniREpvrgp6v3/oSkhHMlACneTF
+49XF/gLGN7rBQhe6B+dtp33HY0ofJNZKpZ+Mx+UYibS1sdAN8WGfujn3iJnu3Xn
1jWne/aKa9/lChjguSe+e03XsgSwMNBwD27t6wRxkoThfuqh2F/W5GTkZKGFDzPt
2FVkdUAoYW0VmaTXW3ogHN1SMGmBFXA+TQo/y/V26bMk+3mhjpyUWWJKsn3Nvw8t
zzZGds7kALMCAwEAAaOCAwswggMHMB0GA1UdDgQWBBTx//PzZq704f5UFol6Xv+4
X59vmDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iMDAxYzgwMC02YzEw
LTRkYzUtYTk1NC1kMjgzNDQzMDA2ZmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjAwMWM4MDAtNmMxMC00
ZGM1LWE5NTQtZDI4MzQ0MzAwNmZlLzA4MWFjYWY2YzA5OWYzZmUzODBmYjU4ZjEw
N2M0ZjMwZGIyYzRhYjAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMndeDAPBAIAAjAJAwcAKAEAAAPg
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMqjANBgkqhkiG9w0BAQsFAAOCAQEA
bqbvjjbvsDR3DSER8EXN+9SvI8+YffeMLWq5Qkk4t8A8a9sAikW6qG1TOMTeuPQ5
o2XQ1Eu7dSpby6bzJLfCfOOLpBgs3Q9qiWk5RqYP4FkH2Wr9h5fIZ4OJ/HsDG224
DT/p0ggpW79rvOkQ0Y2Vd0mDIQcDesMzHB9Zc4wKIAPbsYac59HQYdoLTpW+PzIq
sz92F6AHkE+otIp/ptLsYPgg9nuAwPQZhzuA5YoFcvburbI6mUIppPZjAruWJnUs
x2/+zUVx2lRhEgbOgSW5EK+55CI+cwW+RLrXfA8aHbEHcoDonF66EaEkMiTRFpnD
ds6zwKOmF+L77C+jNSNKsg==
-----END CERTIFICATE-----