Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer
File:                     491991f40dab281b295c3cc5d691493655fc7e8d.cer (raw, json)
Hash identifier:          /Wqg6okmfVrx0WUabYqFZknUdE4DHsX+3ujcFiTtV3Y=
Subject key identifier:   A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8B4D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/491991f40dab281b295c3cc5d691493655fc7e8d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:24 +0000
Certificate not after:    Tue 08 Oct 2024 20:33:56 +0000
Subordinate resources:    AS: 264830
                          IP: 170.80.228.0/22
                          IP: 2803:2c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16299225 (0xf8b4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:24 2017 GMT
            Not After : Oct  8 20:33:56 2024 GMT
        Subject: CN=491991f40dab281b295c3cc5d691493655fc7e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:f6:c5:1a:66:33:62:f7:13:6b:aa:1a:25:
                    d4:3e:7b:38:f4:dc:2e:aa:78:e2:77:fb:0b:4b:c5:
                    0c:43:57:b6:9f:ad:1b:c8:d4:4d:99:fd:2a:11:0a:
                    c1:fa:e9:25:11:0b:62:15:16:61:c6:84:52:94:7f:
                    a8:0e:e3:b4:f4:da:15:71:1c:19:fa:f8:d5:b5:af:
                    eb:a4:43:c7:3b:c7:8b:f8:a2:a1:1e:1c:7a:8a:a1:
                    b7:84:d5:0a:78:60:fc:ee:ee:cb:22:11:00:44:50:
                    d5:e8:d3:a4:ce:19:fb:5d:3c:11:7b:65:c5:59:b3:
                    b0:42:ad:3a:52:10:12:4d:a6:bc:40:b4:7f:c4:0c:
                    f5:f4:29:4e:9a:e6:66:81:47:e8:d1:83:4a:fc:13:
                    37:4d:e0:f5:f9:fd:87:c2:75:1f:3e:f8:81:83:f8:
                    e1:38:f7:5a:18:ec:ba:e1:1a:18:e1:45:bd:85:89:
                    62:f1:59:34:be:eb:3f:6e:66:77:b3:68:6c:cd:f3:
                    10:2f:d0:39:cf:78:76:7b:6a:5c:d1:08:eb:b0:4c:
                    17:fd:96:d2:9c:86:c0:ce:a0:b3:16:41:c5:ca:72:
                    70:6c:7e:7e:ba:c8:71:c6:b1:46:e7:ed:cd:2e:83:
                    73:42:92:77:dc:14:05:48:7b:d2:34:52:e1:68:6d:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/491991f40dab281b295c3cc5d691493655fc7e8d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.228.0/22
                IPv6:
                  2803:2c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264830

    Signature Algorithm: sha256WithRSAEncryption
         80:56:61:6e:ea:f7:c8:db:e1:32:5a:cd:58:85:2a:da:ce:9d:
         64:95:6a:e4:11:cb:40:cf:46:c6:a2:c4:c3:50:30:14:4e:fb:
         5b:8f:5f:b0:28:ed:0f:1c:24:c1:51:db:04:57:5b:25:8d:1b:
         dc:57:d8:b5:56:63:0e:78:d6:e5:fe:fc:14:bc:7b:48:7d:2d:
         4a:8a:92:48:c4:53:cc:88:f0:02:b7:90:86:58:e0:1b:dd:f3:
         05:76:50:31:21:f5:e9:73:d9:c9:b7:6d:fe:52:05:0c:7d:1d:
         23:68:c4:c4:c8:63:b8:4a:23:a4:56:22:a2:95:74:03:0f:01:
         a5:83:8e:85:00:f7:0f:df:1b:5a:5c:ee:69:30:f2:4a:4d:81:
         f4:25:55:a8:ac:64:3e:0a:19:01:91:91:39:be:3b:57:6b:f9:
         81:de:e4:85:bc:ec:b0:ad:42:b6:95:80:fd:11:ac:6c:cd:c3:
         25:89:3d:42:58:40:99:5f:19:00:25:a6:fe:54:bd:8f:3d:3f:
         6a:b4:35:30:99:07:ff:c6:3a:07:d3:1f:30:b8:bc:0f:d0:5d:
         49:de:ce:fd:8a:7e:28:5e:66:93:13:97:c8:f3:89:61:55:32:
         4a:ee:7d:9e:66:f9:76:8f:78:21:f5:f5:ac:68:45:c1:b4:42:
         42:ab:8a:eb
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPi02TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyNFoXDTI0MTAwODIwMzM1
NlowMzExMC8GA1UEAxMoNDkxOTkxZjQwZGFiMjgxYjI5NWMzY2M1ZDY5MTQ5MzY1
NWZjN2U4ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM2K9sUaZjNi
9xNrqhol1D57OPTcLqp44nf7C0vFDENXtp+tG8jUTZn9KhEKwfrpJRELYhUWYcaE
UpR/qA7jtPTaFXEcGfr41bWv66RDxzvHi/iioR4ceoqht4TVCnhg/O7uyyIRAERQ
1ejTpM4Z+108EXtlxVmzsEKtOlIQEk2mvEC0f8QM9fQpTprmZoFH6NGDSvwTN03g
9fn9h8J1Hz74gYP44Tj3WhjsuuEaGOFFvYWJYvFZNL7rP25md7NobM3zEC/QOc94
dntqXNEI67BMF/2W0pyGwM6gsxZBxcpycGx+frrIccaxRuftzS6Dc0KSd9wUBUh7
0jRS4WhtUBkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSj+TYobsbM4jIt8CWxyGd0
Y5u3kzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jYmE5NzhlYi04YmI3
LTQzMjgtYjI5ZC04MzllZWZlZTM2ODMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvY2JhOTc4ZWItOGJiNy00
MzI4LWIyOWQtODM5ZWVmZWUzNjgzLzQ5MTk5MWY0MGRhYjI4MWIyOTVjM2NjNWQ2
OTE0OTM2NTVmYzdlOGQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqpQ5DANBAIAAjAHAwUAKAMCwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECn4wDQYJKoZIhvcNAQELBQADggEBAIBW
YW7q98jb4TJazViFKtrOnWSVauQRy0DPRsaixMNQMBRO+1uPX7Ao7Q8cJMFR2wRX
WyWNG9xX2LVWYw541uX+/BS8e0h9LUqKkkjEU8yI8AK3kIZY4Bvd8wV2UDEh9elz
2cm3bf5SBQx9HSNoxMTIY7hKI6RWIqKVdAMPAaWDjoUA9w/fG1pc7mkw8kpNgfQl
VaisZD4KGQGRkTm+O1dr+YHe5IW87LCtQraVgP0RrGzNwyWJPUJYQJlfGQAlpv5U
vY89P2q0NTCZB//GOgfTHzC4vA/QXUnezv2KfiheZpMTl8jziWFVMkrufZ5m+XaP
eCH19axoRcG0QkKrius=
-----END CERTIFICATE-----