Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c315cc80c6d19f7d0fc657b3a45f89be01ace4b.cer
File:                     2c315cc80c6d19f7d0fc657b3a45f89be01ace4b.cer (raw, json)
Hash identifier:          3AlmkyG5XOMBxK5BWNArjNf1S0qAnQKTwU+pfqssAjU=
Subject key identifier:   6C:57:5D:BC:F1:64:7C:B3:D5:A1:5A:93:E6:0D:EB:D3:6D:0E:68:F3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5F0DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3debaaa4-4b39-43ce-a882-ddd4a463fd46/2c315cc80c6d19f7d0fc657b3a45f89be01ace4b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3debaaa4-4b39-43ce-a882-ddd4a463fd46/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:45 +0000
Certificate not after:    Sat 30 Mar 2024 16:53:04 +0000
Subordinate resources:    AS: 272981
                          IP: 170.247.216.0/22
                          IP: 200.35.156.0/22
                          IP: 2803:e180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15069406 (0xe5f0de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:45 2017 GMT
            Not After : Mar 30 16:53:04 2024 GMT
        Subject: CN=2c315cc80c6d19f7d0fc657b3a45f89be01ace4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f7:4a:49:92:34:7f:e9:04:04:00:42:37:41:
                    25:59:0f:fa:df:63:a9:cb:83:d6:cb:7a:5d:10:97:
                    4d:4e:32:f3:5d:38:9a:de:76:18:27:10:55:c6:ac:
                    d7:7c:49:88:56:8b:89:3f:d7:88:73:4a:88:30:d5:
                    5a:6e:13:2b:f3:92:42:5b:66:41:56:03:c1:86:7f:
                    ab:c2:e7:eb:99:5f:7a:c4:d6:1c:d0:02:99:ca:6a:
                    de:9b:10:dd:fe:83:6f:70:a2:8b:58:f7:51:1a:58:
                    e6:e6:64:ad:c4:63:02:9b:bb:4d:a9:6b:c0:8f:c3:
                    74:47:a5:ab:56:1c:7a:05:84:ab:30:6d:1e:64:46:
                    3b:01:31:91:4c:d2:a9:9d:7b:38:74:cb:d4:19:d2:
                    fe:49:9c:91:7a:ed:d5:c7:90:1c:83:ef:49:37:bf:
                    70:6a:f5:1c:a6:95:79:10:cc:0b:11:11:b7:c7:62:
                    e0:35:ea:81:cb:30:25:3b:50:79:20:ad:4c:51:69:
                    84:02:82:9d:95:0a:16:a9:b8:51:d0:35:f9:2d:2c:
                    6a:c7:80:3f:92:50:ef:f8:7b:76:f2:ff:1a:56:08:
                    59:51:40:ef:87:54:83:4f:aa:7f:3d:3e:d7:a3:07:
                    d3:e6:e8:8a:2a:e1:68:a7:31:8a:6b:ad:47:21:7c:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:57:5D:BC:F1:64:7C:B3:D5:A1:5A:93:E6:0D:EB:D3:6D:0E:68:F3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3debaaa4-4b39-43ce-a882-ddd4a463fd46/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3debaaa4-4b39-43ce-a882-ddd4a463fd46/2c315cc80c6d19f7d0fc657b3a45f89be01ace4b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.216.0/22
                  200.35.156.0/22
                IPv6:
                  2803:e180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272981

    Signature Algorithm: sha256WithRSAEncryption
         8e:30:05:04:b1:aa:a0:4d:a1:bf:bd:73:b6:38:d1:35:d4:c8:
         20:2f:60:b3:f4:dc:c2:e9:67:f4:1f:2c:5c:40:da:70:16:99:
         47:ab:bd:37:65:f7:19:1a:20:2b:0b:54:17:1d:10:26:a8:6a:
         3c:89:6e:41:6a:18:74:16:12:b4:37:bd:71:6b:31:8d:2a:f3:
         dc:10:88:6c:f4:85:b2:ac:4d:50:24:81:a5:8a:bc:1c:05:99:
         49:38:ca:49:7d:60:c4:6e:98:e5:09:77:58:13:9d:d3:7c:f9:
         7c:4c:0c:6d:6f:1e:89:c6:70:cc:f6:e8:ad:62:86:d8:be:13:
         04:48:a4:78:07:3f:f0:d8:1f:f7:52:4c:bf:0f:b1:29:f4:bd:
         3a:4e:02:a8:29:4d:0a:cd:1b:3d:7b:ab:5d:50:30:c1:95:69:
         3c:23:9b:36:60:0b:49:cf:a6:16:a1:d1:25:db:0f:d9:29:2f:
         8a:62:9f:a0:73:50:a6:0c:4e:16:f2:ad:42:06:c5:18:e0:ae:
         ab:68:44:56:56:5d:62:e3:04:26:c7:dc:f1:36:32:2c:81:a3:
         5a:4a:30:d2:df:d3:51:04:d8:64:a4:f2:37:b1:01:27:3f:dd:
         26:b7:b8:59:60:cf:a4:c3:f7:a9:ca:84:0c:40:6f:db:28:9a:
         23:14:db:32
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAOXw3jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0NVoXDTI0MDMzMDE2NTMw
NFowMzExMC8GA1UEAxMoMmMzMTVjYzgwYzZkMTlmN2QwZmM2NTdiM2E0NWY4OWJl
MDFhY2U0YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOX3SkmSNH/p
BAQAQjdBJVkP+t9jqcuD1st6XRCXTU4y8104mt52GCcQVcas13xJiFaLiT/XiHNK
iDDVWm4TK/OSQltmQVYDwYZ/q8Ln65lfesTWHNACmcpq3psQ3f6Db3Cii1j3URpY
5uZkrcRjApu7TalrwI/DdEelq1YcegWEqzBtHmRGOwExkUzSqZ17OHTL1BnS/kmc
kXrt1ceQHIPvSTe/cGr1HKaVeRDMCxERt8di4DXqgcswJTtQeSCtTFFphAKCnZUK
Fqm4UdA1+S0saseAP5JQ7/h7dvL/GlYIWVFA74dUg0+qfz0+16MH0+boiirhaKcx
imutRyF8x/MCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBRsV1288WR8s9WhWpPmDevT
bQ5o8zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zZGViYWFhNC00YjM5
LTQzY2UtYTg4Mi1kZGQ0YTQ2M2ZkNDYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2RlYmFhYTQtNGIzOS00
M2NlLWE4ODItZGRkNGE0NjNmZDQ2LzJjMzE1Y2M4MGM2ZDE5ZjdkMGZjNjU3YjNh
NDVmODliZTAxYWNlNGIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqr32AMEAsgjnDANBAIAAjAHAwUA
KAPhgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKlUwDQYJKoZIhvcNAQELBQAD
ggEBAI4wBQSxqqBNob+9c7Y40TXUyCAvYLP03MLpZ/QfLFxA2nAWmUervTdl9xka
ICsLVBcdECaoajyJbkFqGHQWErQ3vXFrMY0q89wQiGz0hbKsTVAkgaWKvBwFmUk4
ykl9YMRumOUJd1gTndN8+XxMDG1vHonGcMz26K1ihti+EwRIpHgHP/DYH/dSTL8P
sSn0vTpOAqgpTQrNGz17q11QMMGVaTwjmzZgC0nPphah0SXbD9kpL4pin6BzUKYM
ThbyrUIGxRjgrqtoRFZWXWLjBCbH3PE2MiyBo1pKMNLf01EE2GSk8jexASc/3Sa3
uFlgz6TD96nKhAxAb9somiMU2zI=
-----END CERTIFICATE-----