Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ec05497d0d54b20aeece687dbfae8bbe99720ed.cer
File:                     1ec05497d0d54b20aeece687dbfae8bbe99720ed.cer (raw, json)
Hash identifier:          z+TRny4Fdj1f0j/Ze8uBQs1IMbcEk2cgcsYM5aLr6x4=
Subject key identifier:   B9:C2:69:76:83:0C:63:A4:78:97:00:FF:F3:C0:72:FC:21:0C:D0:88
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D94F67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83bf4c8d-0782-4c34-aaf5-f8f46c1af758/1ec05497d0d54b20aeece687dbfae8bbe99720ed.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83bf4c8d-0782-4c34-aaf5-f8f46c1af758/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:19 +0000
Certificate not after:    Thu 11 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 52318
                          IP: 200.16.89.0/24
                          IP: 2801:14:b000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14241639 (0xd94f67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:19 2017 GMT
            Not After : Jan 11 05:00:00 2024 GMT
        Subject: CN=1ec05497d0d54b20aeece687dbfae8bbe99720ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:31:9e:9c:3a:05:8f:43:e2:f7:80:74:55:
                    d4:3f:89:bf:9a:40:02:82:7d:71:4d:03:1a:b8:67:
                    40:95:55:19:59:11:f9:df:5b:e2:fc:16:f5:47:2f:
                    9e:42:96:c8:cc:84:6b:c4:10:62:62:0f:ac:22:e8:
                    da:f1:2b:88:7b:e7:85:30:b4:c9:1a:4a:e5:10:44:
                    80:99:bc:1c:93:4e:00:f8:04:ab:88:e9:79:20:dd:
                    39:6c:5e:22:94:3e:dd:3e:29:f7:e8:6c:cb:d1:8a:
                    ca:9b:63:77:50:42:d8:e0:9a:14:dc:26:c3:8c:87:
                    47:24:71:63:66:26:7f:2c:5f:c0:a7:08:4d:8a:44:
                    cc:d7:c1:60:03:bf:63:d6:63:5f:41:e0:a2:49:9e:
                    e6:a9:3a:bd:89:a9:51:8b:4a:b6:a9:83:76:94:36:
                    3d:d6:3b:19:19:ca:b8:dd:26:b0:0d:34:6e:cd:3b:
                    8c:0e:28:7f:5c:01:de:bc:aa:c9:7f:b1:94:bc:45:
                    8f:04:73:1e:2a:22:3d:49:ae:23:d1:ed:12:d0:a1:
                    b1:42:f5:cd:e5:0f:28:ea:88:5a:30:7e:99:7f:41:
                    bd:6a:3f:c1:bf:7c:ce:52:9f:32:b3:25:ac:33:fc:
                    e9:7d:a9:00:f8:46:72:3c:9e:44:27:46:cd:b4:f1:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C2:69:76:83:0C:63:A4:78:97:00:FF:F3:C0:72:FC:21:0C:D0:88
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83bf4c8d-0782-4c34-aaf5-f8f46c1af758/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83bf4c8d-0782-4c34-aaf5-f8f46c1af758/1ec05497d0d54b20aeece687dbfae8bbe99720ed.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.89.0/24
                IPv6:
                  2801:14:b000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52318

    Signature Algorithm: sha256WithRSAEncryption
         a6:74:ce:14:b6:64:17:62:bf:28:59:db:75:42:51:cb:08:27:
         2a:db:83:9b:da:90:86:d7:ed:12:4f:96:ed:09:2c:db:b2:3b:
         a6:ed:0f:89:d5:ba:b1:72:90:a3:bb:46:df:53:db:a9:1a:73:
         35:ef:3c:8e:ed:e5:64:95:a5:c5:e0:5a:d7:63:96:b1:eb:34:
         9c:38:54:61:f2:73:b6:14:7b:6a:ca:39:38:5f:26:6a:eb:19:
         cd:62:9a:7f:61:b5:db:a5:26:1b:d3:17:6d:02:ea:f5:1b:f2:
         56:87:17:75:88:f2:16:f2:67:ca:9b:61:68:e2:57:6b:9a:3a:
         fa:5d:4b:f5:23:26:07:a5:9f:32:c4:1c:fd:6c:8e:84:ff:fc:
         de:3b:f2:02:79:06:c3:86:c2:b9:db:28:35:20:21:b2:91:f3:
         0b:e9:08:1d:09:15:bc:3a:a1:bc:78:b2:9d:b8:0c:d1:f2:fe:
         a2:9a:9e:2d:7e:16:29:00:92:10:5d:bd:27:9e:c5:16:bb:32:
         b9:48:37:af:9a:7a:55:c5:25:0c:8d:97:09:9b:4b:69:b4:5f:
         47:e6:0e:89:35:8f:a1:72:14:7b:1f:d2:ad:36:da:03:55:35:
         91:72:ff:c9:5e:4a:dc:97:bc:6d:26:19:3e:74:32:d0:8f:30:
         30:0c:f8:0d
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEANlPZzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYxOVoXDTI0MDExMTA1MDAw
MFowMzExMC8GA1UEAxMoMWVjMDU0OTdkMGQ1NGIyMGFlZWNlNjg3ZGJmYWU4YmJl
OTk3MjBlZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKw6MZ6cOgWP
Q+L3gHRV1D+Jv5pAAoJ9cU0DGrhnQJVVGVkR+d9b4vwW9UcvnkKWyMyEa8QQYmIP
rCLo2vEriHvnhTC0yRpK5RBEgJm8HJNOAPgEq4jpeSDdOWxeIpQ+3T4p9+hsy9GK
yptjd1BC2OCaFNwmw4yHRyRxY2YmfyxfwKcITYpEzNfBYAO/Y9ZjX0Hgokme5qk6
vYmpUYtKtqmDdpQ2PdY7GRnKuN0msA00bs07jA4of1wB3ryqyX+xlLxFjwRzHioi
PUmuI9HtEtChsUL1zeUPKOqIWjB+mX9BvWo/wb98zlKfMrMlrDP86X2pAPhGcjye
RCdGzbTxxx0CAwEAAaOCAwswggMHMB0GA1UdDgQWBBS5wml2gwxjpHiXAP/zwHL8
IQzQiDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84M2JmNGM4ZC0wNzgy
LTRjMzQtYWFmNS1mOGY0NmMxYWY3NTgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODNiZjRjOGQtMDc4Mi00
YzM0LWFhZjUtZjhmNDZjMWFmNzU4LzFlYzA1NDk3ZDBkNTRiMjBhZWVjZTY4N2Ri
ZmFlOGJiZTk5NzIwZWQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMgQWTAPBAIAAjAJAwcAKAEAFLAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMXjANBgkqhkiG9w0BAQsFAAOCAQEA
pnTOFLZkF2K/KFnbdUJRywgnKtuDm9qQhtftEk+W7Qks27I7pu0PidW6sXKQo7tG
31PbqRpzNe88ju3lZJWlxeBa12OWses0nDhUYfJzthR7aso5OF8mausZzWKaf2G1
26UmG9MXbQLq9RvyVocXdYjyFvJnypthaOJXa5o6+l1L9SMmB6WfMsQc/WyOhP/8
3jvyAnkGw4bCudsoNSAhspHzC+kIHQkVvDqhvHiynbgM0fL+opqeLX4WKQCSEF29
J57FFrsyuUg3r5p6VcUlDI2XCZtLabRfR+YOiTWPoXIUex/SrTbaA1U1kXL/yV5K
3Je8bSYZPnQy0I8wMAz4DQ==
-----END CERTIFICATE-----