Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1580fafbbf965bf4b2822ee5f31c6b2eea4d9963.cer
File:                     1580fafbbf965bf4b2822ee5f31c6b2eea4d9963.cer (raw, json)
Hash identifier:          ouQ9G7isIVb2f9gP+v/FtgcqgFP0t3D00smcDB9VBbE=
Subject key identifier:   85:7E:AD:F1:69:DC:5E:63:C4:98:99:A7:F0:C1:92:88:00:2B:C8:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6E732
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/96760307-5e12-4ee6-8501-5e114b4da009/1580fafbbf965bf4b2822ee5f31c6b2eea4d9963.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/96760307-5e12-4ee6-8501-5e114b4da009/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:32 +0000
Certificate not after:    Fri 24 May 2024 17:18:43 +0000
Subordinate resources:    IP: 138.185.116.0/22
                          IP: 201.150.60.0/22
                          IP: 2803:3580::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15132466 (0xe6e732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:32 2017 GMT
            Not After : May 24 17:18:43 2024 GMT
        Subject: CN=1580fafbbf965bf4b2822ee5f31c6b2eea4d9963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:50:3e:39:44:63:de:b0:cb:a5:56:4c:2b:8c:
                    91:68:3c:73:d7:3d:e0:bb:e8:8f:8e:e4:4d:d0:ff:
                    c2:b4:73:b9:a3:1a:9e:23:33:dc:99:27:35:96:3d:
                    d7:dc:8d:cc:2e:7b:6d:5c:f3:c7:a6:6a:81:b0:82:
                    ee:12:41:a2:4f:04:a1:4c:f1:56:a8:a9:e1:dd:a4:
                    0c:d3:41:29:89:f7:59:c6:f9:ad:bf:4a:7f:14:49:
                    0d:b7:4a:9a:bb:9f:77:3c:b1:4c:93:e8:d6:86:37:
                    ad:cb:2f:de:b5:b8:8f:0a:63:ea:22:7f:04:6a:83:
                    27:68:b0:93:92:3a:60:61:35:9e:4e:39:cd:ac:8b:
                    27:1c:aa:6c:41:ce:c3:e0:f9:61:06:2a:70:69:1b:
                    96:87:a4:06:78:82:92:d2:28:02:65:df:85:03:89:
                    4a:59:61:b1:22:33:8a:19:8b:a8:43:1e:14:0f:cb:
                    a0:36:b0:68:c9:64:1b:6d:b6:58:bc:58:b2:a1:2a:
                    1e:91:2c:ba:45:a2:41:7a:a8:e8:6c:3e:94:7a:d4:
                    9e:ca:c4:3a:76:53:c1:1d:35:ac:2e:97:0a:9f:5b:
                    2d:1e:88:e0:4b:3b:f1:d3:04:bf:94:d4:9e:72:41:
                    71:45:98:f8:0c:e5:73:ea:07:a6:9c:bf:64:86:f0:
                    3b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7E:AD:F1:69:DC:5E:63:C4:98:99:A7:F0:C1:92:88:00:2B:C8:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/96760307-5e12-4ee6-8501-5e114b4da009/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/96760307-5e12-4ee6-8501-5e114b4da009/1580fafbbf965bf4b2822ee5f31c6b2eea4d9963.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.116.0/22
                  201.150.60.0/22
                IPv6:
                  2803:3580::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:7f:c6:8b:35:d8:85:6e:61:41:39:c2:e6:19:96:4d:ec:9b:
         4e:15:b1:3b:24:a2:f5:6b:c2:34:5b:e0:75:da:a5:49:ab:93:
         0b:a4:f7:92:e9:78:d4:16:7a:2c:c0:9d:1d:53:b1:a9:de:7a:
         3f:5c:c1:e0:b1:52:8c:84:d4:00:eb:b6:4b:cf:41:76:bc:f3:
         d7:b3:f6:df:d2:f4:c3:7b:64:e4:4d:c8:18:36:2a:78:a1:6d:
         65:28:d6:dd:52:3a:d3:3e:c4:45:78:fc:25:ce:3c:e3:89:3e:
         d3:37:fb:0c:49:02:9b:95:43:61:26:25:29:dc:4f:5b:78:21:
         fa:cd:b0:4a:84:32:a3:d9:80:d9:e2:78:ba:c1:72:db:03:ed:
         d8:46:8c:a7:7c:5a:ef:93:8f:d6:2a:8f:89:91:65:71:31:30:
         c3:e1:56:b8:88:68:6c:6b:18:2c:22:f0:a0:fe:8e:09:15:f5:
         89:9b:b2:13:2b:d6:1e:fe:53:c6:95:01:b2:34:1e:69:2c:0b:
         c4:4a:6b:2a:78:9f:43:88:f4:54:53:38:92:06:5d:46:81:5b:
         6c:1b:c2:45:cb:5a:8c:05:93:92:6b:05:47:bf:87:04:1f:70:
         75:4d:a3:b3:c6:fc:27:d1:36:fd:4a:97:33:db:cf:d8:68:43:
         99:5f:d2:ae
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgIEAObnMjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzczMloXDTI0MDUyNDE3MTg0
M1owMzExMC8GA1UEAxMoMTU4MGZhZmJiZjk2NWJmNGIyODIyZWU1ZjMxYzZiMmVl
YTRkOTk2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIhQPjlEY96w
y6VWTCuMkWg8c9c94Lvoj47kTdD/wrRzuaManiMz3JknNZY919yNzC57bVzzx6Zq
gbCC7hJBok8EoUzxVqip4d2kDNNBKYn3Wcb5rb9KfxRJDbdKmrufdzyxTJPo1oY3
rcsv3rW4jwpj6iJ/BGqDJ2iwk5I6YGE1nk45zayLJxyqbEHOw+D5YQYqcGkbloek
BniCktIoAmXfhQOJSllhsSIzihmLqEMeFA/LoDawaMlkG222WLxYsqEqHpEsukWi
QXqo6Gw+lHrUnsrEOnZTwR01rC6XCp9bLR6I4Es78dMEv5TUnnJBcUWY+Azlc+oH
ppy/ZIbwO5ECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSFfq3xadxeY8SYmafwwZKI
ACvIAjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85Njc2MDMwNy01ZTEy
LTRlZTYtODUwMS01ZTExNGI0ZGEwMDkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTY3NjAzMDctNWUxMi00
ZWU2LTg1MDEtNWUxMTRiNGRhMDA5LzE1ODBmYWZiYmY5NjViZjRiMjgyMmVlNWYz
MWM2YjJlZWE0ZDk5NjMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAoq5dAMEAsmWPDANBAIAAjAHAwUA
KAM1gDANBgkqhkiG9w0BAQsFAAOCAQEAcX/GizXYhW5hQTnC5hmWTeybThWxOySi
9WvCNFvgddqlSauTC6T3kul41BZ6LMCdHVOxqd56P1zB4LFSjITUAOu2S89Bdrzz
17P239L0w3tk5E3IGDYqeKFtZSjW3VI60z7ERXj8Jc4844k+0zf7DEkCm5VDYSYl
KdxPW3gh+s2wSoQyo9mA2eJ4usFy2wPt2EaMp3xa75OP1iqPiZFlcTEww+FWuIho
bGsYLCLwoP6OCRX1iZuyEyvWHv5TxpUBsjQeaSwLxEprKnifQ4j0VFM4kgZdRoFb
bBvCRctajAWTkmsFR7+HBB9wdU2js8b8J9E2/UqXM9vP2GhDmV/Srg==
-----END CERTIFICATE-----