Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.cer
File:                     4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.cer (raw, json)
Hash identifier:          RtvhVS1LM7h+q8b+0dhM0j1bl3ulqjUcqe8iEH2N7Qg=
Subject key identifier:   16:32:85:BE:91:49:B4:FA:01:47:42:4E:C1:3D:94:27:89:1E:13:A1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D65F66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:12 +0000
Certificate not after:    Sun 03 Dec 2023 04:00:00 +0000
Subordinate resources:    AS: 27668
                          AS: 27844
                          IP: 186.43.128.0/17
                          IP: 190.94.128.0/19
                          IP: 191.100.0.0/16
                          IP: 200.55.224.0/20
                          IP: 201.238.128.0/18
                          IP: 2800:2f0::/32
                          IP: 2800:400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14049126 (0xd65f66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:12 2017 GMT
            Not After : Dec  3 04:00:00 2023 GMT
        Subject: CN=4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9f:1b:b4:c7:b6:85:08:17:d4:e5:c3:0f:19:
                    a0:68:4d:00:99:b2:f8:4a:62:9d:e0:02:95:ce:6b:
                    e3:29:96:64:17:79:31:15:00:97:ca:6d:93:27:dd:
                    b9:64:f0:df:c3:f3:b9:0d:d2:11:f4:e7:94:7d:eb:
                    6b:bc:b9:ca:8e:94:be:f8:69:61:f6:96:0e:99:49:
                    3d:ea:9e:11:b3:ff:8a:1b:e3:7c:e2:c5:39:6f:d7:
                    c0:86:ae:ae:16:87:9b:ac:81:f2:4e:d0:ad:e5:eb:
                    71:56:c2:4f:3f:78:61:d4:62:29:6e:73:1a:60:0a:
                    cf:c6:f3:e1:88:0c:bc:28:09:cd:fb:32:cb:47:ed:
                    7b:51:82:90:06:e3:26:a9:72:b6:03:2f:cb:dd:45:
                    d0:d7:c7:e6:bd:83:ef:e7:22:f1:7a:92:a3:40:3d:
                    dc:5c:60:6a:a0:88:53:bc:89:7f:49:a7:69:88:bf:
                    7c:d0:74:a2:e4:49:c7:bb:90:44:65:b0:1a:7b:2b:
                    ed:a3:2e:e5:49:5f:78:c9:04:09:76:7c:22:96:09:
                    c2:a0:e9:60:e1:64:60:b7:a9:84:e3:01:0d:b8:b7:
                    0b:a1:ce:41:90:da:ba:0a:ba:5c:64:09:e4:df:1d:
                    9c:5c:8c:97:23:0e:15:14:5f:5b:f9:13:2c:15:1b:
                    e7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:32:85:BE:91:49:B4:FA:01:47:42:4E:C1:3D:94:27:89:1E:13:A1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.43.128.0/17
                  190.94.128.0/19
                  191.100.0.0/16
                  200.55.224.0/20
                  201.238.128.0/18
                IPv6:
                  2800:2f0::/32
                  2800:400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27668
                  27844

    Signature Algorithm: sha256WithRSAEncryption
         a0:16:ff:6d:6e:be:52:2e:68:eb:d7:f7:d0:c8:94:aa:24:0d:
         2c:42:9f:ac:d7:39:63:8e:05:77:b7:b0:f0:f3:1c:6d:cc:50:
         69:aa:6b:bf:03:78:7e:9f:fa:a1:45:4c:f2:b2:13:f2:33:8c:
         47:e0:1c:95:fb:c1:8a:98:3d:b5:a5:27:02:13:67:b7:b6:02:
         25:f6:cf:8f:92:ba:7a:68:f6:21:e4:39:ad:0c:c0:10:3b:5e:
         26:67:9f:c0:25:87:5c:4d:cd:49:02:bf:5d:f0:7c:ee:3d:ef:
         c4:18:68:75:0c:b2:77:cc:64:43:14:f9:44:39:8c:ab:17:cf:
         7d:04:0b:7c:bd:07:fe:f6:a4:2e:08:56:9a:8b:98:7d:28:83:
         a9:1c:5a:fc:96:c6:d8:a0:78:72:ad:f2:0d:ef:df:8c:80:fe:
         70:f3:ef:bd:22:d6:c2:1a:3b:31:d2:13:e5:a4:5d:f1:4e:16:
         32:06:f7:55:98:0a:51:63:0e:0b:64:3d:c0:50:24:09:66:b9:
         86:57:95:96:40:eb:4e:64:6e:09:48:f1:e0:2c:43:17:93:31:
         9f:a5:5d:9d:22:50:a2:09:81:6e:a6:33:78:b4:35:0e:17:0b:
         95:84:7e:3c:d4:52:55:6b:bf:e5:7a:4d:c1:aa:76:2a:a2:da:
         7c:f7:cb:b5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIEANZfZjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcxMloXDTIzMTIwMzA0MDAw
MFowMzExMC8GA1UEAxMoNGEyOGQyMTQ1YzYzZmUyYTRlYzY5YTdiMmVlOTUyMTAy
ZjEwYTRmYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIifG7THtoUI
F9Tlww8ZoGhNAJmy+EpineAClc5r4ymWZBd5MRUAl8ptkyfduWTw38PzuQ3SEfTn
lH3ra7y5yo6UvvhpYfaWDplJPeqeEbP/ihvjfOLFOW/XwIaurhaHm6yB8k7QreXr
cVbCTz94YdRiKW5zGmAKz8bz4YgMvCgJzfsyy0fte1GCkAbjJqlytgMvy91F0NfH
5r2D7+ci8XqSo0A93FxgaqCIU7yJf0mnaYi/fNB0ouRJx7uQRGWwGnsr7aMu5Ulf
eMkECXZ8IpYJwqDpYOFkYLephOMBDbi3C6HOQZDaugq6XGQJ5N8dnFyMlyMOFRRf
W/kTLBUb5+UCAwEAAaOCAyowggMmMB0GA1UdDgQWBBQWMoW+kUm0+gFHQk7BPZQn
iR4ToTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kODNmNGE3Zi0wNzEw
LTRmNWItODM0My00MTYyODBkODRhMGEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDgzZjRhN2YtMDcxMC00
ZjViLTgzNDMtNDE2MjgwZDg0YTBhLzRhMjhkMjE0NWM2M2ZlMmE0ZWM2OWE3YjJl
ZTk1MjEwMmYxMGE0ZmEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBM
BggrBgEFBQcBBwEB/wQ9MDswIwQCAAEwHQMEB7orgAMEBb5egAMDAL9kAwQEyDfg
AwQGye6AMBQEAgACMA4DBQAoAALwAwUAKAAEADAdBggrBgEFBQcBCAEB/wQOMAyg
CjAIAgJsFAICbMQwDQYJKoZIhvcNAQELBQADggEBAKAW/21uvlIuaOvX99DIlKok
DSxCn6zXOWOOBXe3sPDzHG3MUGmqa78DeH6f+qFFTPKyE/IzjEfgHJX7wYqYPbWl
JwITZ7e2AiX2z4+Sunpo9iHkOa0MwBA7XiZnn8Alh1xNzUkCv13wfO4978QYaHUM
snfMZEMU+UQ5jKsXz30EC3y9B/72pC4IVpqLmH0og6kcWvyWxtigeHKt8g3v34yA
/nDz770i1sIaOzHSE+WkXfFOFjIG91WYClFjDgtkPcBQJAlmuYZXlZZA605kbglI
8eAsQxeTMZ+lXZ0iUKIJgW6mM3i0NQ4XC5WEfjzUUlVrv+V6TcGqdiqi2nz3y7U=
-----END CERTIFICATE-----