Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/11869f7f22154a34c19132d7b218f55be9d05f96.cer
File:                     11869f7f22154a34c19132d7b218f55be9d05f96.cer (raw, json)
Hash identifier:          5z8gcI9F1UIobOMkzJLpJ5R00s/wVqbsV1UD4JjoURY=
Subject key identifier:   6A:3F:15:9D:D7:B8:C2:FE:A1:93:BF:3E:A3:B7:7A:70:90:EA:6E:0C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA07D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d8ee2b7a-1355-4275-b17a-145ebc9e04a1/11869f7f22154a34c19132d7b218f55be9d05f96.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d8ee2b7a-1355-4275-b17a-145ebc9e04a1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:09 +0000
Certificate not after:    Sat 19 Oct 2024 22:52:30 +0000
Subordinate resources:    AS: 64133
                          AS: 264836
                          IP: 170.82.112.0/22
                          IP: 2803:c2c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16386008 (0xfa07d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:09 2017 GMT
            Not After : Oct 19 22:52:30 2024 GMT
        Subject: CN=11869f7f22154a34c19132d7b218f55be9d05f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:a5:b1:e9:f8:b7:d4:e1:c1:cf:3e:d8:0f:
                    cf:3c:a5:17:1d:00:88:52:21:ff:fa:c1:99:cf:ae:
                    50:e9:22:e5:e9:24:40:8d:83:24:83:83:ef:db:a1:
                    21:35:69:b0:3d:fb:4f:f5:44:b2:04:91:51:4f:5a:
                    77:d3:94:b4:68:69:65:d3:84:d4:96:2c:85:68:c2:
                    79:f2:0e:7e:d1:65:10:30:e7:ea:cd:81:e1:07:af:
                    a6:31:fa:da:fa:40:79:01:c8:f8:90:79:01:8f:30:
                    bf:41:ae:31:5a:55:e0:b9:cf:30:3a:d2:f0:94:81:
                    32:c1:0c:3b:ae:5f:21:2b:00:60:a7:41:f1:81:be:
                    5e:16:09:77:1e:b3:71:6b:cd:2c:8c:76:37:21:1f:
                    fc:61:06:d4:62:a7:68:9d:80:5b:0d:9f:0d:ce:4e:
                    28:d6:ae:eb:80:81:a6:1f:a4:82:67:45:20:3d:19:
                    6d:87:3b:08:a4:8a:f9:79:e4:b9:75:42:ca:a2:80:
                    43:fb:49:df:5e:ab:2b:d7:c0:bb:cc:e1:50:99:2b:
                    27:97:16:82:5f:83:b7:0a:74:4b:54:b4:c2:a1:ea:
                    88:76:7e:9c:26:7c:3e:7f:cf:77:7c:a6:53:d5:15:
                    82:3a:27:e8:e7:78:32:3b:cd:02:75:e3:d5:2d:8e:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3F:15:9D:D7:B8:C2:FE:A1:93:BF:3E:A3:B7:7A:70:90:EA:6E:0C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d8ee2b7a-1355-4275-b17a-145ebc9e04a1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d8ee2b7a-1355-4275-b17a-145ebc9e04a1/11869f7f22154a34c19132d7b218f55be9d05f96.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.112.0/22
                IPv6:
                  2803:c2c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64133
                  264836

    Signature Algorithm: sha256WithRSAEncryption
         09:94:71:aa:48:ea:08:a5:76:84:8d:fa:8b:7f:af:ba:be:c9:
         e8:cd:88:68:cf:c8:de:60:94:8c:08:af:4b:e2:e5:3b:4f:c4:
         52:32:69:1b:c8:3d:43:70:55:a5:bf:9d:ca:6f:05:1f:ed:24:
         17:fc:a3:fb:3a:f9:c2:61:2b:b3:00:1b:86:c3:bf:3a:d5:d5:
         1d:a0:b9:2c:cb:3d:a2:56:53:63:cb:10:de:95:85:26:af:6a:
         a1:69:18:c3:da:46:5d:36:5f:88:d7:2c:86:b1:f8:3f:65:6a:
         b9:d7:32:80:e8:63:16:88:f4:9b:de:23:98:6b:26:06:de:82:
         9f:f5:c9:4b:e3:71:75:48:73:5f:40:86:b8:df:f9:8c:0b:b6:
         96:82:15:bc:cf:60:ea:24:a8:a8:40:25:66:21:64:9a:f3:b6:
         94:de:5a:be:b4:5c:d8:54:fa:58:f8:f4:10:6c:32:af:0a:58:
         47:4d:42:9b:f1:07:f9:9d:38:1b:4c:2a:b6:c1:ed:93:45:f9:
         05:3e:bc:9c:6f:1c:e5:2d:4c:e2:50:58:a4:da:f4:fa:c1:7a:
         58:d3:51:48:ea:f5:5a:35:24:c5:52:32:38:65:80:b7:4f:63:
         1d:00:2e:a5:e3:94:f5:af:6f:47:b9:3b:2e:da:03:c7:18:56:
         0e:11:63:f4
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIEAPoH2DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcwOVoXDTI0MTAxOTIyNTIz
MFowMzExMC8GA1UEAxMoMTE4NjlmN2YyMjE1NGEzNGMxOTEzMmQ3YjIxOGY1NWJl
OWQwNWY5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIi2pbHp+LfU
4cHPPtgPzzylFx0AiFIh//rBmc+uUOki5ekkQI2DJIOD79uhITVpsD37T/VEsgSR
UU9ad9OUtGhpZdOE1JYshWjCefIOftFlEDDn6s2B4QevpjH62vpAeQHI+JB5AY8w
v0GuMVpV4LnPMDrS8JSBMsEMO65fISsAYKdB8YG+XhYJdx6zcWvNLIx2NyEf/GEG
1GKnaJ2AWw2fDc5OKNau64CBph+kgmdFID0ZbYc7CKSK+XnkuXVCyqKAQ/tJ316r
K9fAu8zhUJkrJ5cWgl+Dtwp0S1S0wqHqiHZ+nCZ8Pn/Pd3ymU9UVgjon6Od4MjvN
AnXj1S2O7IcCAwEAAaOCAw4wggMKMB0GA1UdDgQWBBRqPxWd17jC/qGTvz6jt3pw
kOpuDDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kOGVlMmI3YS0xMzU1
LTQyNzUtYjE3YS0xNDVlYmM5ZTA0YTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDhlZTJiN2EtMTM1NS00
Mjc1LWIxN2EtMTQ1ZWJjOWUwNGExLzExODY5ZjdmMjIxNTRhMzRjMTkxMzJkN2Iy
MThmNTViZTlkMDVmOTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqpScDANBAIAAjAHAwUAKAPCwDAf
BggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA+oUCAwQKhDANBgkqhkiG9w0BAQsFAAOC
AQEACZRxqkjqCKV2hI36i3+vur7J6M2IaM/I3mCUjAivS+LlO0/EUjJpG8g9Q3BV
pb+dym8FH+0kF/yj+zr5wmErswAbhsO/OtXVHaC5LMs9olZTY8sQ3pWFJq9qoWkY
w9pGXTZfiNcshrH4P2VqudcygOhjFoj0m94jmGsmBt6Cn/XJS+NxdUhzX0CGuN/5
jAu2loIVvM9g6iSoqEAlZiFkmvO2lN5avrRc2FT6WPj0EGwyrwpYR01Cm/EH+Z04
G0wqtsHtk0X5BT68nG8c5S1M4lBYpNr0+sF6WNNRSOr1WjUkxVIyOGWAt09jHQAu
peOU9a9vR7k7LtoDxxhWDhFj9A==
-----END CERTIFICATE-----