Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer
File:                     2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer (raw, json)
Hash identifier:          5qdGNZ/yqFs0GDrEoG7GHFDa8FsgroUja5Tfnw6vges=
Subject key identifier:   29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2F6B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 21 Jun 2018 20:34:53 +0000
Certificate not after:    Tue 30 Apr 2024 18:24:18 +0000
Subordinate resources:    IP: 138.121.240.0/22
                          IP: 2803:6c40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14874289 (0xe2f6b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 20:34:53 2018 GMT
            Not After : Apr 30 18:24:18 2024 GMT
        Subject: CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4e:e4:14:b6:8b:d1:2e:90:79:77:d1:20:bb:
                    34:43:54:49:ed:2a:1b:95:5c:c1:60:d2:cb:b4:bb:
                    14:3c:50:f5:cf:c2:c2:ba:89:87:94:4d:e5:7a:45:
                    fc:4a:35:2b:53:85:61:9d:cb:63:f8:57:17:1b:0a:
                    dd:75:d2:61:42:c4:a3:d6:1a:11:cf:b5:d3:57:4a:
                    06:05:1b:53:4f:66:0f:23:c5:2e:7d:a4:be:d2:87:
                    cc:a2:a3:3a:39:11:6b:01:1e:dd:b2:16:05:c2:ef:
                    0d:45:6d:f3:d8:7d:b4:2a:bf:db:81:a6:7a:de:9c:
                    95:29:f7:b8:73:92:9c:15:d2:27:64:6e:d1:4b:61:
                    2b:c5:8c:ad:87:03:f9:fb:07:24:ab:9c:2e:6e:40:
                    ba:5c:55:28:86:47:af:28:7a:0a:4a:95:01:92:91:
                    80:c3:e3:69:ff:62:e6:68:3a:87:ae:24:6f:a4:ed:
                    8e:40:53:2b:15:4c:35:1f:27:f2:2c:46:c1:e7:a7:
                    7c:4c:5c:e0:01:66:aa:d5:32:45:d6:76:d3:56:df:
                    e4:c8:57:25:1b:fc:e2:1f:8e:7b:a4:2d:f8:11:e4:
                    c5:db:58:c8:05:a0:18:ee:c0:62:67:7b:bb:2c:c8:
                    40:ec:03:97:c4:08:f9:ac:a0:9d:e0:00:a8:84:40:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.240.0/22
                IPv6:
                  2803:6c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:36:86:f2:f1:60:22:09:63:2c:30:45:12:07:bf:8a:0e:70:
         b5:a4:f2:1a:0c:cf:31:84:46:43:d7:48:aa:55:68:9c:71:5e:
         9f:64:3b:83:f2:9d:ac:1d:53:3a:b2:b6:20:c6:c8:c2:7a:42:
         01:4a:70:18:39:9c:3f:36:21:c8:de:e7:90:3f:a0:37:41:2b:
         7b:bd:92:d2:c1:19:01:7a:c8:0d:f2:4a:cc:af:62:e6:4f:25:
         e5:4f:38:15:9b:dd:82:c0:19:a6:61:bf:90:26:eb:0a:86:50:
         79:81:9f:e8:9e:cf:95:77:95:b3:1e:6f:49:f6:40:48:54:8c:
         6c:17:a9:98:1b:7b:aa:c8:dc:39:5f:ca:14:c0:8a:0e:24:00:
         88:20:9f:dc:9a:b5:5c:81:4e:64:32:a8:65:18:de:ae:2b:2b:
         fa:c2:88:2d:f9:21:bb:6b:4a:10:82:64:c4:90:eb:b3:0b:30:
         eb:26:24:23:9b:40:fb:83:83:c4:7d:31:f1:28:be:5c:d0:2e:
         85:00:8f:f8:b8:dc:4a:6b:9e:e2:77:56:e0:05:62:4c:50:2e:
         ad:b7:27:66:48:56:1d:88:6f:be:1a:04:f5:2d:44:17:c3:31:
         33:71:f1:b7:ba:5d:07:13:94:53:fb:1f:80:be:84:b2:fb:0b:
         25:cb:bd:6e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAOL2sTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDYyMTIwMzQ1M1oXDTI0MDQzMDE4MjQx
OFowMzExMC8GA1UEAxMoMmJmM2QxMmU4NTYxODU5Y2M3Y2RmNDMzZGUwZDEzMWE2
NmMxYTQzYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI5O5BS2i9Eu
kHl30SC7NENUSe0qG5VcwWDSy7S7FDxQ9c/CwrqJh5RN5XpF/Eo1K1OFYZ3LY/hX
FxsK3XXSYULEo9YaEc+101dKBgUbU09mDyPFLn2kvtKHzKKjOjkRawEe3bIWBcLv
DUVt89h9tCq/24Gmet6clSn3uHOSnBXSJ2Ru0UthK8WMrYcD+fsHJKucLm5AulxV
KIZHryh6CkqVAZKRgMPjaf9i5mg6h64kb6TtjkBTKxVMNR8n8ixGweenfExc4AFm
qtUyRdZ201bf5MhXJRv84h+Oe6Qt+BHkxdtYyAWgGO7AYmd7uyzIQOwDl8QI+ayg
neAAqIRAFGECAwEAAaOCAu0wggLpMB0GA1UdDgQWBBQpzg7XZ/Ebfm/Fkd5zb3BR
Cy37TzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hNTViZDE0Ny1iNDdk
LTQ2ZTctYjQxYS03MjVkNmNkNTNjMzgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTU1YmQxNDctYjQ3ZC00
NmU3LWI0MWEtNzI1ZDZjZDUzYzM4LzJiZjNkMTJlODU2MTg1OWNjN2NkZjQzM2Rl
MGQxMzFhNjZjMWE0M2IubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAop58DANBAIAAjAHAwUAKANsQDAN
BgkqhkiG9w0BAQsFAAOCAQEAdzaG8vFgIgljLDBFEge/ig5wtaTyGgzPMYRGQ9dI
qlVonHFen2Q7g/KdrB1TOrK2IMbIwnpCAUpwGDmcPzYhyN7nkD+gN0Ere72S0sEZ
AXrIDfJKzK9i5k8l5U84FZvdgsAZpmG/kCbrCoZQeYGf6J7PlXeVsx5vSfZASFSM
bBepmBt7qsjcOV/KFMCKDiQAiCCf3Jq1XIFOZDKoZRjerisr+sKILfkhu2tKEIJk
xJDrswsw6yYkI5tA+4ODxH0x8Si+XNAuhQCP+LjcSmue4ndW4AViTFAurbcnZkhW
HYhvvhoE9S1EF8MxM3Hxt7pdBxOUU/sfgL6EsvsLJcu9bg==
-----END CERTIFICATE-----