Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d58dd13f3b722372f20a7e18ce06647368e0ad4.cer
File:                     4d58dd13f3b722372f20a7e18ce06647368e0ad4.cer (raw, json)
Hash identifier:          UfjHMzHolom0Tt72qi/Iei2+C8f7Nc3MSLvNS8wmcrM=
Subject key identifier:   CC:F6:23:5C:67:18:21:A4:DA:8A:E6:AF:AB:91:2A:9F:8B:7B:05:6E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F70392
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/89d2b597-5d6d-44f7-a172-d9f0269f4e84/4d58dd13f3b722372f20a7e18ce06647368e0ad4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/89d2b597-5d6d-44f7-a172-d9f0269f4e84/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 15 Jan 2018 20:04:10 +0000
Certificate not after:    Sat 28 Sep 2024 21:47:57 +0000
Subordinate resources:    IP: 45.227.224.0/22
                          IP: 2803:1120::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16188306 (0xf70392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 15 20:04:10 2018 GMT
            Not After : Sep 28 21:47:57 2024 GMT
        Subject: CN=4d58dd13f3b722372f20a7e18ce06647368e0ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:c4:47:94:26:60:b1:e4:fb:32:d4:78:83:
                    f2:30:33:f3:f1:e2:fa:2f:f4:d1:9d:15:7b:67:b9:
                    bf:dc:04:a1:1c:38:b5:f0:28:b5:23:fd:2f:fc:b3:
                    0f:e6:6e:07:4b:bd:8b:2a:cf:3b:b7:c8:42:b1:19:
                    4c:08:0e:7b:af:89:b4:14:43:bb:fc:80:bf:26:e7:
                    ea:34:59:77:2a:ec:c6:1d:6d:90:d9:9e:ca:a8:c7:
                    3c:a5:bb:a5:23:59:c4:51:be:0d:26:c0:6a:16:43:
                    36:b4:d3:13:7f:a0:7e:8b:62:73:72:60:a6:de:6d:
                    52:df:9e:f9:24:f3:61:72:55:55:7e:6d:6a:49:99:
                    94:f6:62:17:d6:c8:83:00:e9:af:d6:7e:c5:83:af:
                    69:25:af:33:92:f2:26:90:14:37:b6:b8:b7:29:17:
                    44:e0:80:1f:76:4f:76:4e:ca:ff:30:af:f8:4f:9f:
                    aa:4b:48:98:70:27:0a:ad:ac:62:cf:59:f0:9d:6f:
                    f9:09:96:7b:64:26:d7:cb:aa:0b:db:6a:cc:f1:5e:
                    af:c2:78:aa:85:06:b1:59:c6:71:0a:7a:fb:fe:38:
                    54:cd:f2:38:86:6d:1c:1b:fb:60:9f:04:a1:b8:87:
                    30:15:2b:41:f3:5f:6a:4e:2f:78:51:cd:19:22:79:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F6:23:5C:67:18:21:A4:DA:8A:E6:AF:AB:91:2A:9F:8B:7B:05:6E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/89d2b597-5d6d-44f7-a172-d9f0269f4e84/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/89d2b597-5d6d-44f7-a172-d9f0269f4e84/4d58dd13f3b722372f20a7e18ce06647368e0ad4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.224.0/22
                IPv6:
                  2803:1120::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:b7:38:98:2c:e5:b0:69:19:12:4a:83:d4:66:fa:f7:07:e8:
         8b:0d:c7:cd:07:47:e6:63:61:84:14:a9:ed:b6:fa:76:0a:74:
         25:45:57:d3:cb:44:9a:c8:ff:53:e2:f1:ce:26:14:82:e1:58:
         dd:4c:05:a4:1b:92:85:07:1b:d8:fe:de:e4:54:5b:2b:5a:71:
         95:1b:f8:99:19:04:70:c1:78:e9:f9:b7:9f:7b:a1:d5:2a:96:
         0e:f7:ea:6e:7f:ac:bc:a4:ec:b2:44:1f:ad:c8:76:5f:e5:2a:
         d8:cd:a7:34:0c:4a:df:76:7a:41:f3:ea:c7:17:f4:94:18:d2:
         4a:46:eb:16:1b:93:d6:c4:9c:2d:40:cb:27:90:c4:3d:e6:ae:
         36:06:cc:fe:78:f0:a3:74:8b:95:f1:4d:5e:32:35:8e:d0:38:
         10:da:cd:0f:61:37:9a:3f:65:38:37:b2:f9:62:3c:34:eb:50:
         2d:b2:40:9f:25:18:31:1d:ae:bf:bf:28:46:a9:35:88:7e:71:
         75:06:67:0e:e2:10:98:6c:f2:62:9e:ac:26:75:fc:a6:4b:41:
         37:90:63:5d:12:a0:2a:87:1b:0a:45:97:b7:d9:53:f0:aa:7a:
         47:05:d5:b0:6b:02:79:3b:1a:36:de:11:3b:81:82:4d:0e:c0:
         6d:54:2a:e9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAPcDkjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDExNTIwMDQxMFoXDTI0MDkyODIxNDc1
N1owMzExMC8GA1UEAxMoNGQ1OGRkMTNmM2I3MjIzNzJmMjBhN2UxOGNlMDY2NDcz
NjhlMGFkNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMXPxEeUJmCx
5Psy1HiD8jAz8/Hi+i/00Z0Ve2e5v9wEoRw4tfAotSP9L/yzD+ZuB0u9iyrPO7fI
QrEZTAgOe6+JtBRDu/yAvybn6jRZdyrsxh1tkNmeyqjHPKW7pSNZxFG+DSbAahZD
NrTTE3+gfotic3Jgpt5tUt+e+STzYXJVVX5takmZlPZiF9bIgwDpr9Z+xYOvaSWv
M5LyJpAUN7a4tykXROCAH3ZPdk7K/zCv+E+fqktImHAnCq2sYs9Z8J1v+QmWe2Qm
18uqC9tqzPFer8J4qoUGsVnGcQp6+/44VM3yOIZtHBv7YJ8EobiHMBUrQfNfak4v
eFHNGSJ5iWkCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBTM9iNcZxghpNqK5q+rkSqf
i3sFbjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84OWQyYjU5Ny01ZDZk
LTQ0ZjctYTE3Mi1kOWYwMjY5ZjRlODQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODlkMmI1OTctNWQ2ZC00
NGY3LWExNzItZDlmMDI2OWY0ZTg0LzRkNThkZDEzZjNiNzIyMzcyZjIwYTdlMThj
ZTA2NjQ3MzY4ZTBhZDQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3j4DANBAIAAjAHAwUAKAMRIDAN
BgkqhkiG9w0BAQsFAAOCAQEAVbc4mCzlsGkZEkqD1Gb69wfoiw3HzQdH5mNhhBSp
7bb6dgp0JUVX08tEmsj/U+LxziYUguFY3UwFpBuShQcb2P7e5FRbK1pxlRv4mRkE
cMF46fm3n3uh1SqWDvfqbn+svKTsskQfrch2X+Uq2M2nNAxK33Z6QfPqxxf0lBjS
SkbrFhuT1sScLUDLJ5DEPeauNgbM/njwo3SLlfFNXjI1jtA4ENrND2E3mj9lODey
+WI8NOtQLbJAnyUYMR2uv78oRqk1iH5xdQZnDuIQmGzyYp6sJnX8pktBN5BjXRKg
KocbCkWXt9lT8Kp6RwXVsGsCeTsaNt4RO4GCTQ7AbVQq6Q==
-----END CERTIFICATE-----