Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer
File:                     22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer (raw, json)
Hash identifier:          X47bSx+Sgk+gylCWk+f22BK1IQ8/t4fbJ+90QCt/UKI=
Subject key identifier:   DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D52F69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:38:00 +0000
Certificate not after:    Mon 20 Nov 2023 04:00:00 +0000
Subordinate resources:    AS: 264844
                          IP: 170.244.88.0/22
                          IP: 191.97.16.0/22
                          IP: 2803:8280::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13971305 (0xd52f69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:38:00 2017 GMT
            Not After : Nov 20 04:00:00 2023 GMT
        Subject: CN=22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:de:54:7d:df:5a:77:1e:9a:1b:53:9e:9d:
                    74:1e:d9:94:64:02:1e:76:5b:db:a5:5a:c6:4d:c2:
                    4f:b4:11:92:81:93:f9:80:d3:96:21:0a:0c:dc:da:
                    56:2d:b9:b2:c9:53:c1:2f:76:13:a8:c5:5b:e1:53:
                    52:1c:6d:11:08:1b:eb:94:fa:1d:00:ff:27:93:95:
                    a3:9e:81:ba:37:5e:06:9c:29:19:65:15:2c:15:40:
                    b5:39:23:b0:1b:d0:b6:de:79:01:01:9b:11:2e:28:
                    64:d3:af:c0:75:21:b9:dd:45:97:30:88:be:85:04:
                    92:0d:5c:eb:86:77:62:62:9d:a0:17:7b:99:94:b5:
                    7e:ab:da:5e:71:01:a4:d8:b6:e2:a1:c4:bd:3c:ca:
                    f1:b3:84:4d:a0:b5:52:9a:83:17:d9:3e:82:d7:1c:
                    c3:8d:9c:59:f6:e7:15:04:71:58:29:ab:19:2e:63:
                    96:7b:3f:43:53:62:d4:1e:2f:cb:f0:78:e9:8c:d0:
                    99:30:78:6a:3d:82:51:99:e3:92:87:a7:b2:a7:3e:
                    8f:91:46:ab:f7:6b:25:16:c9:63:90:ef:59:ec:51:
                    85:bf:9a:c2:92:70:ec:2e:d6:bd:ca:d7:ea:40:4b:
                    b2:c6:00:40:11:06:48:40:62:3b:d8:25:18:bc:d2:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.88.0/22
                  191.97.16.0/22
                IPv6:
                  2803:8280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264844

    Signature Algorithm: sha256WithRSAEncryption
         96:96:0e:8a:b6:e6:e6:57:d6:50:17:70:97:93:54:d9:69:fa:
         13:fe:45:5e:8b:75:f6:b8:94:7b:f8:9a:18:92:be:fe:2d:92:
         2d:d6:ff:f2:e6:54:75:0a:d2:bf:64:04:93:b2:e7:95:a6:4d:
         c8:97:73:60:3a:ad:12:08:9d:ab:d0:90:c4:43:f7:97:9a:aa:
         5e:e0:c4:31:9e:d9:b7:23:f6:f5:d6:45:99:75:77:71:2c:99:
         e0:20:3d:95:05:3e:49:6e:d5:5b:a5:be:8b:9b:ac:63:ae:83:
         e2:66:bd:ba:30:84:b2:ca:22:0a:a7:f0:e5:b6:d4:ff:76:7c:
         6b:e1:f8:53:8c:15:10:4b:a4:75:12:2b:ca:19:55:41:fb:2a:
         e7:fc:e9:2d:cd:e6:d3:0e:14:7a:62:14:78:8d:92:c8:06:84:
         44:0d:db:2b:8e:c6:f6:33:00:c0:e6:9f:9e:9d:3f:c6:da:e3:
         61:81:2e:19:51:4f:a0:36:f6:fe:45:43:a3:b1:4d:e0:a2:33:
         7c:4a:e5:ad:4b:4d:35:40:63:50:8f:89:86:90:3d:cf:b8:1d:
         9e:b2:26:66:4b:61:28:06:01:4f:d6:01:3d:3b:41:df:f8:ae:
         7c:72:2b:51:04:cb:fe:2f:4e:84:17:1b:d8:0b:73:9e:f8:a4:
         30:a5:83:4f
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEANUvaTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzgwMFoXDTIzMTEyMDA0MDAw
MFowMzExMC8GA1UEAxMoMjIxNjdhZmEzZDFjNWMwYWU2MDZjYzk2NGJhNWU4YzM4
NmEyZjRjYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKVp3lR931p3
HpobU56ddB7ZlGQCHnZb26Vaxk3CT7QRkoGT+YDTliEKDNzaVi25sslTwS92E6jF
W+FTUhxtEQgb65T6HQD/J5OVo56BujdeBpwpGWUVLBVAtTkjsBvQtt55AQGbES4o
ZNOvwHUhud1FlzCIvoUEkg1c64Z3YmKdoBd7mZS1fqvaXnEBpNi24qHEvTzK8bOE
TaC1UpqDF9k+gtccw42cWfbnFQRxWCmrGS5jlns/Q1Ni1B4vy/B46YzQmTB4aj2C
UZnjkoensqc+j5FGq/drJRbJY5DvWexRhb+awpJw7C7WvcrX6kBLssYAQBEGSEBi
O9glGLzSA2kCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBTeVjvXsOng9XWjfSEW7ZVQ
CK9GMjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wNzJlODg0Ny01MDI3
LTRkYTctYjlhYS1lYzFiZjYwNGY0MTUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDcyZTg4NDctNTAyNy00
ZGE3LWI5YWEtZWMxYmY2MDRmNDE1LzIyMTY3YWZhM2QxYzVjMGFlNjA2Y2M5NjRi
YTVlOGMzODZhMmY0Y2EubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqr0WAMEAr9hEDANBAIAAjAHAwUA
KAOCgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECowwDQYJKoZIhvcNAQELBQAD
ggEBAJaWDoq25uZX1lAXcJeTVNlp+hP+RV6Ldfa4lHv4mhiSvv4tki3W//LmVHUK
0r9kBJOy55WmTciXc2A6rRIInavQkMRD95eaql7gxDGe2bcj9vXWRZl1d3EsmeAg
PZUFPklu1VulvoubrGOug+JmvbowhLLKIgqn8OW21P92fGvh+FOMFRBLpHUSK8oZ
VUH7Kuf86S3N5tMOFHpiFHiNksgGhEQN2yuOxvYzAMDmn56dP8ba42GBLhlRT6A2
9v5FQ6OxTeCiM3xK5a1LTTVAY1CPiYaQPc+4HZ6yJmZLYSgGAU/WAT07Qd/4rnxy
K1EEy/4vToQXG9gLc574pDClg08=
-----END CERTIFICATE-----