Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
File:                     3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer (raw, json)
Hash identifier:          dLUFrSF011611auAR/Z6WjSjGVS+iokihWsvt+w2cAA=
Subject key identifier:   FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA3D46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:37 +0000
Certificate not after:    Mon 22 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 10617
                          IP: 200.69.32.0/19
                          IP: 200.81.160.0/19
                          IP: 2803:6380::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14302534 (0xda3d46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:37 2017 GMT
            Not After : Jan 22 05:00:00 2024 GMT
        Subject: CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2e:6e:e7:24:7c:0d:2d:56:b5:c4:42:89:2a:
                    bc:ef:66:28:8c:9f:1d:58:66:52:a6:f0:b7:9f:3a:
                    c7:7d:33:bd:b5:b5:8d:d3:f9:42:8d:3b:a5:27:7e:
                    ef:6b:c6:85:2b:89:a1:7d:23:40:fa:af:e7:d6:fd:
                    6b:13:21:04:d0:85:2e:14:f4:f8:43:da:25:a1:f2:
                    15:4a:b5:b2:fe:67:b6:0a:e7:c0:85:50:ae:f4:13:
                    1b:b8:66:ac:62:38:be:b4:72:f2:70:70:cd:bc:56:
                    cc:7c:ed:2d:53:fd:bc:36:c1:a5:45:ea:27:db:15:
                    fc:1f:25:19:86:6b:2b:b8:c8:46:80:8a:9a:6b:db:
                    2b:bd:49:a2:49:71:f8:f0:b4:e4:9a:b2:d2:5b:53:
                    7b:3a:9c:0e:b0:6a:fd:db:fc:c4:b4:54:e9:85:8b:
                    2f:2c:41:37:78:a8:57:e7:ce:30:43:cc:6e:f6:83:
                    10:2a:01:68:aa:81:d5:38:06:fc:83:ad:6d:a6:ff:
                    22:d8:7f:db:f9:6b:22:c8:50:54:aa:62:03:ff:57:
                    56:d7:38:79:ce:9a:a5:a4:03:0c:ec:70:ea:56:08:
                    b8:8f:a3:86:00:cc:dc:50:09:8f:5e:ac:0b:6d:78:
                    9f:f2:8f:f1:82:33:31:07:2a:9c:e1:f4:77:2f:98:
                    f3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.32.0/19
                  200.81.160.0/19
                IPv6:
                  2803:6380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10617

    Signature Algorithm: sha256WithRSAEncryption
         8f:36:e2:f3:44:12:ae:91:4a:cd:a7:33:cf:8b:cd:57:25:5b:
         e7:70:5f:fe:58:50:4d:31:0c:14:68:39:3d:68:9d:45:05:c9:
         80:f8:16:2a:d5:66:1b:bd:7e:c3:dc:40:ef:31:ca:e7:33:a6:
         26:51:17:f6:27:29:7f:78:f3:da:68:7c:a6:cc:04:93:b7:a7:
         bb:a8:55:7b:58:34:52:1e:03:91:29:e7:12:0b:2b:d1:a1:dc:
         7c:c6:90:62:a0:0a:99:e4:b1:1f:76:a5:3a:75:ee:18:4e:ec:
         04:85:b1:3d:a6:49:d2:15:df:97:f8:95:d8:72:51:9d:ba:89:
         e0:29:10:0d:1f:af:59:42:a5:d1:c8:99:02:e8:55:76:a6:9b:
         98:43:05:d2:b5:c5:70:45:ee:d8:7e:f3:5b:97:a5:b5:25:86:
         9f:83:21:7d:e9:24:fe:4a:f8:08:43:0e:60:b2:b5:5c:12:4c:
         18:98:08:a3:9a:d1:00:2b:b1:21:b1:cc:e4:6f:12:d0:1d:92:
         f7:e8:e6:60:78:c0:3c:fd:de:bb:49:54:28:79:80:09:a0:86:
         b1:43:6b:4d:fc:22:99:5a:9e:39:ed:49:1d:aa:ac:0e:15:44:
         c6:df:10:d2:04:9e:bd:a0:d8:cb:ec:6d:c1:c2:85:27:00:36:
         e4:6f:65:30
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIEANo9RjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzN1oXDTI0MDEyMjA1MDAw
MFowMzExMC8GA1UEAxMoM2ZlZjBkMTg2ZTFhMTE0ZTc0MjY2ZjBmYTczNmZjNmNk
ODZmOGFmNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIoubuckfA0t
VrXEQokqvO9mKIyfHVhmUqbwt586x30zvbW1jdP5Qo07pSd+72vGhSuJoX0jQPqv
59b9axMhBNCFLhT0+EPaJaHyFUq1sv5ntgrnwIVQrvQTG7hmrGI4vrRy8nBwzbxW
zHztLVP9vDbBpUXqJ9sV/B8lGYZrK7jIRoCKmmvbK71Joklx+PC05Jqy0ltTezqc
DrBq/dv8xLRU6YWLLyxBN3ioV+fOMEPMbvaDECoBaKqB1TgG/IOtbab/Ith/2/lr
IshQVKpiA/9XVtc4ec6apaQDDOxw6lYIuI+jhgDM3FAJj16sC214n/KP8YIzMQcq
nOH0dy+Y82kCAwEAAaOCAw4wggMKMB0GA1UdDgQWBBT85+GWPCyUBXfr/1KmMxXw
EfmTeTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iY2FmZTkzMC0wY2Vl
LTQyODItYWY3OS03MmIyNTM3ZDdlYTkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYmNhZmU5MzAtMGNlZS00
MjgyLWFmNzktNzJiMjUzN2Q3ZWE5LzNmZWYwZDE4NmUxYTExNGU3NDI2NmYwZmE3
MzZmYzZjZDg2ZjhhZjcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBchFIAMEBchRoDANBAIAAjAHAwUA
KANjgDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIpeTANBgkqhkiG9w0BAQsFAAOC
AQEAjzbi80QSrpFKzaczz4vNVyVb53Bf/lhQTTEMFGg5PWidRQXJgPgWKtVmG71+
w9xA7zHK5zOmJlEX9icpf3jz2mh8pswEk7enu6hVe1g0Uh4DkSnnEgsr0aHcfMaQ
YqAKmeSxH3alOnXuGE7sBIWxPaZJ0hXfl/iV2HJRnbqJ4CkQDR+vWUKl0ciZAuhV
dqabmEMF0rXFcEXu2H7zW5eltSWGn4Mhfekk/kr4CEMOYLK1XBJMGJgIo5rRACux
IbHM5G8S0B2S9+jmYHjAPP3eu0lUKHmACaCGsUNrTfwimVqeOe1JHaqsDhVExt8Q
0gSevaDYy+xtwcKFJwA25G9lMA==
-----END CERTIFICATE-----