Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1601587c86f050f1e8c1ee48149ea2ed9a3abd1e.cer
File:                     1601587c86f050f1e8c1ee48149ea2ed9a3abd1e.cer (raw, json)
Hash identifier:          8PStWpK3PBxzLH1MpoXvTsGstnlGP+9qqwiLjoDq/PA=
Subject key identifier:   D7:71:5D:B0:75:55:7D:BC:5D:7A:19:77:BA:28:42:1D:F6:D4:E1:50
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3F673
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1168630f-e47e-4915-8fbf-7d38b817bc3e/1601587c86f050f1e8c1ee48149ea2ed9a3abd1e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1168630f-e47e-4915-8fbf-7d38b817bc3e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:40 +0000
Certificate not after:    Mon 06 May 2024 21:51:22 +0000
Subordinate resources:    AS: 263704
                          IP: 138.185.204.0/22
                          IP: 2803:9c40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14939763 (0xe3f673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:40 2017 GMT
            Not After : May  6 21:51:22 2024 GMT
        Subject: CN=1601587c86f050f1e8c1ee48149ea2ed9a3abd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:64:ee:12:66:b1:67:ee:0e:dd:0b:d7:b0:9b:
                    60:85:d9:e2:f0:d0:fc:3c:f0:03:fd:8e:b7:ed:88:
                    2f:5f:af:1d:36:32:eb:9c:34:d4:a9:c1:ba:58:c1:
                    b2:1c:7c:84:bf:9e:0a:a1:3b:2a:8d:5a:24:de:04:
                    b4:3d:ab:34:d5:aa:15:e7:1a:6c:30:12:67:4a:3f:
                    db:0a:5d:9f:ad:8f:f3:67:74:ff:6d:fd:31:7f:42:
                    9e:13:4d:67:c4:3a:98:ba:05:f0:cd:e3:cb:b5:f0:
                    d9:82:65:14:3e:77:88:23:56:58:e8:b5:1b:e8:94:
                    e8:35:0b:46:d7:09:08:a6:c3:e4:fc:f2:92:64:79:
                    a3:ef:32:74:a4:ec:dc:ea:6f:25:45:4f:b4:df:ca:
                    f7:e0:a2:52:51:a0:8e:9d:bb:f8:7e:b3:25:ff:03:
                    28:df:e1:8c:54:fe:20:56:27:f1:78:4b:af:7f:c3:
                    ee:94:86:60:c8:91:5e:1b:a3:44:de:0a:34:08:d3:
                    39:b1:95:4e:33:51:ca:05:91:4b:40:72:b0:3a:43:
                    db:9e:ff:e2:41:11:7c:7b:23:a3:29:40:7e:0f:ef:
                    d3:65:e6:87:15:f9:e4:8b:f3:7e:68:0d:0e:2b:1e:
                    50:40:79:41:dc:e0:48:54:84:15:ec:3b:44:52:f9:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:71:5D:B0:75:55:7D:BC:5D:7A:19:77:BA:28:42:1D:F6:D4:E1:50
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1168630f-e47e-4915-8fbf-7d38b817bc3e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1168630f-e47e-4915-8fbf-7d38b817bc3e/1601587c86f050f1e8c1ee48149ea2ed9a3abd1e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.204.0/22
                IPv6:
                  2803:9c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263704

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:0e:20:31:ec:d6:6a:e8:e7:f9:b1:cf:67:b6:50:2d:f0:
         fb:28:28:d2:4c:a7:5d:b0:85:f5:67:fa:ff:72:b7:93:8f:15:
         ab:5c:e1:5e:8e:47:64:a8:69:20:19:aa:7f:e3:ee:05:c1:c7:
         b2:5a:76:a3:57:ef:e9:91:45:0c:d0:56:f3:8e:f5:b0:4d:da:
         cb:8b:c6:81:8e:41:c6:a3:8f:67:ee:87:b5:2c:14:d4:ba:b8:
         8d:1d:f1:70:d4:ad:e8:a0:6f:28:2e:73:52:a3:f4:e2:6c:fd:
         87:f5:7a:12:5c:ce:e5:c8:46:c2:ba:6d:5e:78:9f:b3:71:dc:
         c8:7e:f2:6f:e9:78:fd:6a:12:14:cc:2d:a3:36:ad:c1:9b:73:
         5b:8e:cf:3c:34:79:c7:b8:52:e1:e8:87:02:ce:79:4c:6d:56:
         ea:48:4b:4a:cc:3c:47:05:ac:b0:48:ef:f2:54:49:5f:14:1b:
         39:8e:78:82:bc:8f:54:cd:ac:7d:59:17:2f:1f:c6:ad:c3:b0:
         36:92:68:83:61:2a:37:f1:12:c5:a7:c4:6e:46:96:8c:26:90:
         d3:bd:3d:a3:84:2f:da:60:2d:57:9b:53:5e:8b:27:60:96:35:
         57:66:c2:0a:32:4f:d4:09:f5:c9:b2:e8:21:4a:b1:22:ec:0e:
         fe:bd:3d:87
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOP2czANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0MFoXDTI0MDUwNjIxNTEy
MlowMzExMC8GA1UEAxMoMTYwMTU4N2M4NmYwNTBmMWU4YzFlZTQ4MTQ5ZWEyZWQ5
YTNhYmQxZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJhk7hJmsWfu
Dt0L17CbYIXZ4vDQ/DzwA/2Ot+2IL1+vHTYy65w01KnBuljBshx8hL+eCqE7Ko1a
JN4EtD2rNNWqFecabDASZ0o/2wpdn62P82d0/239MX9CnhNNZ8Q6mLoF8M3jy7Xw
2YJlFD53iCNWWOi1G+iU6DULRtcJCKbD5PzykmR5o+8ydKTs3OpvJUVPtN/K9+Ci
UlGgjp27+H6zJf8DKN/hjFT+IFYn8XhLr3/D7pSGYMiRXhujRN4KNAjTObGVTjNR
ygWRS0BysDpD257/4kERfHsjoylAfg/v02XmhxX55IvzfmgNDiseUEB5QdzgSFSE
Few7RFL5OdMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTXcV2wdVV9vF16GXe6KEId
9tThUDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xMTY4NjMwZi1lNDdl
LTQ5MTUtOGZiZi03ZDM4YjgxN2JjM2UvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTE2ODYzMGYtZTQ3ZS00
OTE1LThmYmYtN2QzOGI4MTdiYzNlLzE2MDE1ODdjODZmMDUwZjFlOGMxZWU0ODE0
OWVhMmVkOWEzYWJkMWUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoq5zDANBAIAAjAHAwUAKAOcQDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBhgwDQYJKoZIhvcNAQELBQADggEBACtQ
DiAx7NZq6Of5sc9ntlAt8PsoKNJMp12whfVn+v9yt5OPFatc4V6OR2SoaSAZqn/j
7gXBx7JadqNX7+mRRQzQVvOO9bBN2suLxoGOQcajj2fuh7UsFNS6uI0d8XDUreig
byguc1Kj9OJs/Yf1ehJczuXIRsK6bV54n7Nx3Mh+8m/peP1qEhTMLaM2rcGbc1uO
zzw0ece4UuHohwLOeUxtVupIS0rMPEcFrLBI7/JUSV8UGzmOeIK8j1TNrH1ZFy8f
xq3DsDaSaINhKjfxEsWnxG5GlowmkNO9PaOEL9pgLVebU16LJ2CWNVdmwgoyT9QJ
9cmy6CFKsSLsDv69PYc=
-----END CERTIFICATE-----