Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eefb0957552d83f7eb3f4c2e840ca7da96e2bc6.cer
File:                     0eefb0957552d83f7eb3f4c2e840ca7da96e2bc6.cer (raw, json)
Hash identifier:          H8Z2pAcMNObncsui4FBFbX9weuCTHcHhNRuKNqfpf6Y=
Subject key identifier:   FD:CD:1E:18:B6:94:AE:D9:06:5F:FE:7E:B2:5C:EA:40:9C:F8:DC:BA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9DEC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/34e58049-00b6-4d17-93db-a48019977e6a/0eefb0957552d83f7eb3f4c2e840ca7da96e2bc6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/34e58049-00b6-4d17-93db-a48019977e6a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2017 14:31:09 +0000
Certificate not after:    Fri 18 Oct 2024 17:49:41 +0000
Subordinate resources:    AS: 266674
                          IP: 45.228.72.0/22
                          IP: 2803:5920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16375489 (0xf9dec1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 20 14:31:09 2017 GMT
            Not After : Oct 18 17:49:41 2024 GMT
        Subject: CN=0eefb0957552d83f7eb3f4c2e840ca7da96e2bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:c6:69:a1:3b:86:f6:fb:74:34:53:1a:b8:
                    d7:90:18:bb:ce:31:76:67:2f:d8:e5:df:09:ae:ff:
                    60:66:05:77:bf:76:f5:b1:1f:b3:3c:8f:a3:c7:a2:
                    55:01:19:7a:f6:d8:85:2a:7b:fa:76:a0:fe:0a:fe:
                    c4:86:9c:38:e3:de:24:bc:f3:a2:08:91:62:c1:15:
                    21:b4:63:dd:10:2f:74:01:a7:95:8f:ec:49:d2:b7:
                    64:4b:b1:05:df:8a:cf:75:d8:9f:f7:bf:23:75:20:
                    6d:8b:b9:42:a5:70:7e:9e:6a:6a:94:45:ea:a0:4a:
                    70:65:b8:35:00:cb:bc:87:c7:8e:1c:29:89:06:9d:
                    42:d5:0c:54:d7:85:61:c2:4d:95:2b:ca:2b:9f:9d:
                    cb:ee:7b:57:3e:f3:42:b1:0e:d8:07:70:91:40:74:
                    7d:11:3e:a7:79:3f:7c:5e:ef:78:16:a9:fa:62:d0:
                    df:01:6c:dc:94:5f:fa:72:b6:7f:49:31:a4:d9:21:
                    11:02:23:65:44:b7:03:73:82:07:72:ed:fe:af:44:
                    4b:15:80:43:48:df:18:84:37:77:27:0f:61:f4:9f:
                    86:e7:62:66:d6:54:25:06:83:5e:c0:9d:23:23:72:
                    be:1c:a2:0f:b7:15:8a:8d:63:fa:6c:a2:04:27:1c:
                    9a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CD:1E:18:B6:94:AE:D9:06:5F:FE:7E:B2:5C:EA:40:9C:F8:DC:BA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/34e58049-00b6-4d17-93db-a48019977e6a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/34e58049-00b6-4d17-93db-a48019977e6a/0eefb0957552d83f7eb3f4c2e840ca7da96e2bc6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.72.0/22
                IPv6:
                  2803:5920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266674

    Signature Algorithm: sha256WithRSAEncryption
         bf:f0:37:2f:cf:f2:60:8b:77:b9:5e:4c:6c:4d:f5:1e:4b:e3:
         d9:84:01:0e:1c:0c:40:61:51:9a:d6:15:4d:ca:70:ab:e3:5d:
         47:e0:d7:1b:4a:a1:3b:08:7d:e5:60:21:98:63:2b:73:fe:0f:
         fd:dc:f5:a9:f5:f7:e7:0a:d2:bf:a0:19:62:79:3f:7d:a1:71:
         4e:ea:05:80:1a:b9:33:19:4c:83:a3:3c:79:f1:c7:e5:3e:01:
         b1:48:e4:25:7f:07:99:c7:3d:f4:95:3d:ef:f7:c9:a0:af:7f:
         1f:fb:c8:96:85:cf:f4:eb:9b:92:35:d5:df:05:9f:1a:47:ef:
         c9:26:b8:11:b9:9c:83:3b:63:b7:fc:19:14:02:4c:c9:0d:e4:
         1f:8a:fc:f6:96:c3:a5:ec:f5:a3:fa:57:a0:5d:bc:89:c9:54:
         99:8e:d6:cb:36:0e:fd:1a:07:9e:0d:64:65:85:9f:8c:03:f0:
         64:f3:06:5b:fb:75:52:0b:99:d3:e9:ca:c4:9a:a5:59:21:33:
         2f:61:be:e7:19:fe:47:0e:b8:6f:b3:b9:0b:8a:16:44:c1:05:
         81:66:42:66:6f:e3:3a:98:c0:61:80:da:ad:ab:3d:9e:5c:1e:
         e0:04:76:d6:1c:34:47:1d:dc:ce:b9:b6:41:71:c2:b8:3b:47:
         81:1f:6b:f5
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPnewTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTIyMDE0MzEwOVoXDTI0MTAxODE3NDk0
MVowMzExMC8GA1UEAxMoMGVlZmIwOTU3NTUyZDgzZjdlYjNmNGMyZTg0MGNhN2Rh
OTZlMmJjNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMYGxmmhO4b2
+3Q0Uxq415AYu84xdmcv2OXfCa7/YGYFd7929bEfszyPo8eiVQEZevbYhSp7+nag
/gr+xIacOOPeJLzzogiRYsEVIbRj3RAvdAGnlY/sSdK3ZEuxBd+Kz3XYn/e/I3Ug
bYu5QqVwfp5qapRF6qBKcGW4NQDLvIfHjhwpiQadQtUMVNeFYcJNlSvKK5+dy+57
Vz7zQrEO2AdwkUB0fRE+p3k/fF7veBap+mLQ3wFs3JRf+nK2f0kxpNkhEQIjZUS3
A3OCB3Lt/q9ESxWAQ0jfGIQ3dycPYfSfhudiZtZUJQaDXsCdIyNyvhyiD7cVio1j
+myiBCccmlMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBT9zR4YtpSu2QZf/n6yXOpA
nPjcujAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zNGU1ODA0OS0wMGI2
LTRkMTctOTNkYi1hNDgwMTk5NzdlNmEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzRlNTgwNDktMDBiNi00
ZDE3LTkzZGItYTQ4MDE5OTc3ZTZhLzBlZWZiMDk1NzU1MmQ4M2Y3ZWIzZjRjMmU4
NDBjYTdkYTk2ZTJiYzYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3kSDANBAIAAjAHAwUAKANZIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEbIwDQYJKoZIhvcNAQELBQADggEBAL/w
Ny/P8mCLd7leTGxN9R5L49mEAQ4cDEBhUZrWFU3KcKvjXUfg1xtKoTsIfeVgIZhj
K3P+D/3c9an19+cK0r+gGWJ5P32hcU7qBYAauTMZTIOjPHnxx+U+AbFI5CV/B5nH
PfSVPe/3yaCvfx/7yJaFz/Trm5I11d8FnxpH78kmuBG5nIM7Y7f8GRQCTMkN5B+K
/PaWw6Xs9aP6V6BdvInJVJmO1ss2Dv0aB54NZGWFn4wD8GTzBlv7dVILmdPpysSa
pVkhMy9hvucZ/kcOuG+zuQuKFkTBBYFmQmZv4zqYwGGA2q2rPZ5cHuAEdtYcNEcd
3M65tkFxwrg7R4Efa/U=
-----END CERTIFICATE-----