Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1976970d3a4209e79111635c6355777637147412.cer
File:                     1976970d3a4209e79111635c6355777637147412.cer (raw, json)
Hash identifier:          oTw3zcYknc07vkpTkGqDwlP1VAaF2OVloBXzYFilEOY=
Subject key identifier:   C8:40:0D:A9:6D:56:A6:3C:A4:A8:3E:6E:65:C9:11:33:FD:2F:77:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EAE886
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8b066309-a923-4581-a1b3-d11e46a96866/1976970d3a4209e79111635c6355777637147412.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8b066309-a923-4581-a1b3-d11e46a96866/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:32 +0000
Certificate not after:    Sun 23 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 27733
                          AS: 264722
                          IP: 200.10.228.0/22
                          IP: 2001:1320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15394950 (0xeae886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:32 2017 GMT
            Not After : Jun 23 15:00:00 2024 GMT
        Subject: CN=1976970d3a4209e79111635c6355777637147412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2d:66:ae:38:cf:36:ff:74:e9:14:f6:bc:e5:
                    7e:e1:06:cb:4f:70:24:d2:e1:88:b5:98:57:8f:47:
                    32:5a:05:bc:65:28:2a:db:31:6c:f1:e8:8b:c4:43:
                    54:1c:7b:cb:ac:62:4a:68:65:60:29:0f:5c:25:35:
                    75:7f:9b:cc:07:75:81:f7:df:66:db:fa:e6:4f:03:
                    44:72:05:bc:c8:c2:da:53:40:5e:ce:fe:58:94:16:
                    c9:22:b2:43:f8:74:a3:04:e8:b6:2b:d0:80:06:c6:
                    ae:c9:d0:51:5f:6d:01:49:eb:d6:ec:2e:ff:d3:c5:
                    e7:81:1c:e0:a2:5d:10:2a:b6:ef:55:c2:b4:f8:89:
                    13:7a:3b:33:de:26:85:e4:4c:a1:83:0f:73:b6:ca:
                    61:d1:b0:1a:d5:27:0a:45:cb:65:20:1d:a3:a9:19:
                    c2:8f:f3:72:b6:16:d5:5b:ba:2d:72:55:ea:93:c2:
                    22:8e:cb:53:48:66:4c:a7:89:92:13:2f:be:66:dc:
                    a8:a9:8b:44:29:8e:ba:fd:9a:a3:0b:85:8a:6d:75:
                    5f:ad:30:10:d7:a8:48:9f:75:43:ee:f7:5b:c6:1a:
                    36:ff:6e:d3:07:1c:5f:50:63:b6:fa:66:2d:f3:30:
                    f8:a7:5b:46:18:01:36:5b:d5:21:83:0a:f8:23:0c:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:40:0D:A9:6D:56:A6:3C:A4:A8:3E:6E:65:C9:11:33:FD:2F:77:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8b066309-a923-4581-a1b3-d11e46a96866/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8b066309-a923-4581-a1b3-d11e46a96866/1976970d3a4209e79111635c6355777637147412.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.228.0/22
                IPv6:
                  2001:1320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27733
                  264722

    Signature Algorithm: sha256WithRSAEncryption
         c6:f3:c4:08:78:a9:3c:cc:d9:a2:a2:22:b2:7b:15:b3:e0:86:
         cd:3d:1e:5d:a4:64:9a:92:18:57:68:83:96:af:7e:46:ee:09:
         5c:e0:9b:40:63:f0:d5:ab:00:df:71:c1:69:b0:42:45:c9:0c:
         97:da:19:22:79:5b:57:53:50:a5:3d:05:b5:b3:3f:bc:a5:d7:
         f1:5d:f0:42:d3:e7:11:94:20:57:22:5e:26:66:4c:89:ab:7e:
         f7:36:44:ad:bc:b8:77:6d:8f:0e:2e:94:0d:5f:dd:8a:6d:f5:
         19:20:ee:29:64:2b:6e:0d:b8:4b:95:74:dd:cd:e5:e1:c3:68:
         c3:08:5f:fa:82:b9:b9:a1:f9:89:38:47:f2:33:aa:54:7b:d5:
         42:12:98:57:5b:7c:aa:f8:33:a6:aa:78:be:c0:71:cf:71:dc:
         a6:af:31:0f:7e:a4:98:ab:11:c2:fd:6d:a0:f8:3a:16:b5:77:
         48:99:ec:6b:79:b7:7a:74:1f:41:d4:7a:cf:3e:64:6b:61:dd:
         d9:29:06:2d:5d:40:3f:de:1a:f7:be:51:72:f6:4c:af:34:e0:
         10:2c:96:6f:a4:1f:f8:6f:50:60:be:be:94:cb:65:3a:05:10:
         f5:13:b8:0b:bf:1d:0c:03:5f:74:9f:67:a5:c7:1b:13:40:84:
         16:f6:6d:19
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgIEAOrohjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzczMloXDTI0MDYyMzE1MDAw
MFowMzExMC8GA1UEAxMoMTk3Njk3MGQzYTQyMDllNzkxMTE2MzVjNjM1NTc3NzYz
NzE0NzQxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIYtZq44zzb/
dOkU9rzlfuEGy09wJNLhiLWYV49HMloFvGUoKtsxbPHoi8RDVBx7y6xiSmhlYCkP
XCU1dX+bzAd1gfffZtv65k8DRHIFvMjC2lNAXs7+WJQWySKyQ/h0owTotivQgAbG
rsnQUV9tAUnr1uwu/9PF54Ec4KJdECq271XCtPiJE3o7M94mheRMoYMPc7bKYdGw
GtUnCkXLZSAdo6kZwo/zcrYW1Vu6LXJV6pPCIo7LU0hmTKeJkhMvvmbcqKmLRCmO
uv2aowuFim11X60wENeoSJ91Q+73W8YaNv9u0wccX1BjtvpmLfMw+KdbRhgBNlvV
IYMK+CMMFbsCAwEAAaOCAw0wggMJMB0GA1UdDgQWBBTIQA2pbVamPKSoPm5lyREz
/S93xjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84YjA2NjMwOS1hOTIz
LTQ1ODEtYTFiMy1kMTFlNDZhOTY4NjYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOGIwNjYzMDktYTkyMy00
NTgxLWExYjMtZDExZTQ2YTk2ODY2LzE5NzY5NzBkM2E0MjA5ZTc5MTExNjM1YzYz
NTU3Nzc2MzcxNDc0MTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsgK5DANBAIAAjAHAwUAIAETIDAe
BggrBgEFBQcBCAEB/wQPMA2gCzAJAgJsVQIDBAoSMA0GCSqGSIb3DQEBCwUAA4IB
AQDG88QIeKk8zNmioiKyexWz4IbNPR5dpGSakhhXaIOWr35G7glc4JtAY/DVqwDf
ccFpsEJFyQyX2hkieVtXU1ClPQW1sz+8pdfxXfBC0+cRlCBXIl4mZkyJq373NkSt
vLh3bY8OLpQNX92KbfUZIO4pZCtuDbhLlXTdzeXhw2jDCF/6grm5ofmJOEfyM6pU
e9VCEphXW3yq+DOmqni+wHHPcdymrzEPfqSYqxHC/W2g+DoWtXdImexrebd6dB9B
1HrPPmRrYd3ZKQYtXUA/3hr3vlFy9kyvNOAQLJZvpB/4b1Bgvr6Uy2U6BRD1E7gL
vx0MA190n2elxxsTQIQW9m0Z
-----END CERTIFICATE-----