Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer
File:                     44185224cf7ca78dbccca01419f06c7cc212b495.cer (raw, json)
Hash identifier:          okUwjLQQihlGrS8vA0Zw7ALg7yjpEfMMutrHps4uGKs=
Subject key identifier:   DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E81BB2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/44185224cf7ca78dbccca01419f06c7cc212b495.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:33 +0000
Certificate not after:    Sun 02 Jun 2024 18:06:25 +0000
Subordinate resources:    AS: 272143
                          IP: 138.36.16.0/22
                          IP: 181.225.136.0/22
                          IP: 2803:8080::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15211442 (0xe81bb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:33 2017 GMT
            Not After : Jun  2 18:06:25 2024 GMT
        Subject: CN=44185224cf7ca78dbccca01419f06c7cc212b495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a1:eb:b6:07:fc:94:d1:d5:71:7b:62:f9:1b:
                    26:dd:b1:a7:3b:d7:44:89:5e:cb:67:92:09:cc:43:
                    2b:12:4a:ef:35:cc:e8:6a:d5:31:36:2f:91:7b:35:
                    f6:39:a9:e6:e6:28:42:c0:60:24:c8:d5:03:66:c7:
                    68:bb:26:9d:f5:e9:d8:81:db:59:3d:64:bc:e2:2c:
                    ac:80:00:50:ef:48:92:4d:92:a9:a3:97:df:07:c0:
                    a4:3c:6f:40:b3:67:fb:31:c1:aa:fd:d9:58:2c:66:
                    53:66:72:46:8a:16:a3:9a:84:21:e6:53:1a:94:61:
                    54:18:b7:03:bb:9f:1b:25:50:e5:b0:ba:32:3c:fa:
                    7d:60:26:d9:55:3b:73:34:35:6b:44:21:bd:c6:4a:
                    b1:d6:29:d8:92:8b:15:37:f3:cd:9c:14:d8:1a:77:
                    88:8c:1d:8e:85:08:72:cd:c9:9b:59:26:0f:05:aa:
                    d6:47:3e:f5:32:d6:27:22:aa:0c:d3:88:fe:b0:1b:
                    7e:1a:1f:f2:6c:6b:71:3f:12:0e:68:2f:ab:60:9d:
                    ae:1b:85:6a:ef:88:ee:ed:a8:e8:0c:b0:00:e0:be:
                    7b:4f:68:f5:50:62:a2:28:96:23:44:d4:7d:16:d9:
                    c9:f7:29:99:2a:81:ae:ae:3c:d6:59:2a:f9:ce:3d:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/44185224cf7ca78dbccca01419f06c7cc212b495.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.16.0/22
                  181.225.136.0/22
                IPv6:
                  2803:8080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272143

    Signature Algorithm: sha256WithRSAEncryption
         5b:fd:42:47:33:27:b3:5a:21:fd:6a:25:79:1c:cb:43:90:38:
         ba:ac:55:b6:e3:21:53:f9:24:01:be:e7:7f:8e:8f:de:74:17:
         31:b4:ac:05:68:15:58:ad:60:32:e7:34:25:d1:c9:dd:46:1f:
         44:65:99:0c:ae:16:1f:31:b7:67:03:36:d5:49:04:b3:28:66:
         2b:e7:37:08:bd:df:30:82:7c:b9:5c:03:3c:ec:5f:2f:5a:79:
         07:5d:23:2b:2f:96:74:d7:fd:e7:df:25:a6:bc:ef:44:aa:30:
         89:58:e6:d3:3f:bb:c3:ac:e7:a6:62:70:a6:a3:5d:b2:4a:02:
         fb:f4:f4:58:cf:5c:67:e6:8a:6d:72:ba:77:17:f0:b9:e2:f1:
         b3:c4:0a:80:9c:40:5e:95:de:53:fc:8b:c6:e6:b2:58:14:c3:
         b2:d9:3d:fb:27:0d:6b:6b:74:46:3a:c2:16:24:82:d9:28:93:
         ba:16:65:4e:41:4a:e1:8d:6e:e3:37:45:b4:ce:d4:c1:a8:54:
         21:20:27:fc:c1:a0:d4:d4:3c:a7:8a:d3:c9:f1:8a:36:f2:c5:
         06:a9:16:38:f7:59:78:55:18:9b:3c:17:8e:84:4a:18:cc:29:
         71:9c:21:8c:f8:21:9c:a9:9f:68:27:de:2b:5a:25:84:ef:ee:
         b4:26:75:c8
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAOgbsjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzM1oXDTI0MDYwMjE4MDYy
NVowMzExMC8GA1UEAxMoNDQxODUyMjRjZjdjYTc4ZGJjY2NhMDE0MTlmMDZjN2Nj
MjEyYjQ5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN6h67YH/JTR
1XF7YvkbJt2xpzvXRIley2eSCcxDKxJK7zXM6GrVMTYvkXs19jmp5uYoQsBgJMjV
A2bHaLsmnfXp2IHbWT1kvOIsrIAAUO9Ikk2SqaOX3wfApDxvQLNn+zHBqv3ZWCxm
U2ZyRooWo5qEIeZTGpRhVBi3A7ufGyVQ5bC6Mjz6fWAm2VU7czQ1a0QhvcZKsdYp
2JKLFTfzzZwU2Bp3iIwdjoUIcs3Jm1kmDwWq1kc+9TLWJyKqDNOI/rAbfhof8mxr
cT8SDmgvq2CdrhuFau+I7u2o6AywAOC+e09o9VBioiiWI0TUfRbZyfcpmSqBrq48
1lkq+c49CZUCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBTfUomS5TX07XASIY42mF88
kB4yIDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80YTFhMTY1Mi01NDk5
LTQ4N2YtOGI5Ny0xYTEyZWYyN2Q5ZDYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGExYTE2NTItNTQ5OS00
ODdmLThiOTctMWExMmVmMjdkOWQ2LzQ0MTg1MjI0Y2Y3Y2E3OGRiY2NjYTAxNDE5
ZjA2YzdjYzIxMmI0OTUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAookEAMEArXhiDANBAIAAjAHAwUA
KAOAgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJw8wDQYJKoZIhvcNAQELBQAD
ggEBAFv9QkczJ7NaIf1qJXkcy0OQOLqsVbbjIVP5JAG+53+Oj950FzG0rAVoFVit
YDLnNCXRyd1GH0RlmQyuFh8xt2cDNtVJBLMoZivnNwi93zCCfLlcAzzsXy9aeQdd
IysvlnTX/effJaa870SqMIlY5tM/u8Os56ZicKajXbJKAvv09FjPXGfmim1yuncX
8Lni8bPECoCcQF6V3lP8i8bmslgUw7LZPfsnDWtrdEY6whYkgtkok7oWZU5BSuGN
buM3RbTO1MGoVCEgJ/zBoNTUPKeK08nxijbyxQapFjj3WXhVGJs8F46EShjMKXGc
IYz4IZypn2gn3itaJYTv7rQmdcg=
-----END CERTIFICATE-----