Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f38ac0e08f7d2f4471d0cbc85dcb2934977923e.cer
File:                     4f38ac0e08f7d2f4471d0cbc85dcb2934977923e.cer (raw, json)
Hash identifier:          K4sMisJKEtwMC+xr4aAH4fKQq7VmVtWGV5PS0N4pIp0=
Subject key identifier:   0A:96:FE:C0:B5:23:46:CF:C1:49:FA:56:C3:77:15:9D:E2:61:E8:C0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1D5FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7068bdd3-5430-4dcc-bcfa-89e8e9fe2b38/4f38ac0e08f7d2f4471d0cbc85dcb2934977923e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7068bdd3-5430-4dcc-bcfa-89e8e9fe2b38/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 31 Aug 2018 15:51:57 +0000
Certificate not after:    Tue 25 Jun 2024 04:05:01 +0000
Subordinate resources:    AS: 18592
                          AS: 28569
                          AS: 262924
                          IP: 187.251.32.0 -- 187.251.95.255
                          IP: 187.251.160.0/19
                          IP: 200.23.60.0/24
                          IP: 201.139.176.0/21
                          IP: 2001:1228::/32
                          IP: 2001:122c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14800382 (0xe1d5fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 31 15:51:57 2018 GMT
            Not After : Jun 25 04:05:01 2024 GMT
        Subject: CN=4f38ac0e08f7d2f4471d0cbc85dcb2934977923e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9e:03:79:60:97:3e:46:3e:22:7b:1f:c3:7b:
                    63:9a:fd:57:97:d5:cc:58:9c:b4:d6:b8:af:7b:4f:
                    b6:60:09:ec:83:7f:f8:f2:70:d2:2b:53:d6:b2:80:
                    30:97:b3:f6:c5:7d:09:b7:13:5a:09:d0:24:20:40:
                    92:3d:34:f5:19:01:66:5e:10:dd:9e:5d:9e:95:84:
                    0c:97:5f:76:d4:4a:a2:54:9b:93:55:5d:f6:89:5e:
                    f3:c0:ea:07:d0:19:ac:a7:d5:91:62:67:9e:5b:d8:
                    49:e8:70:6e:16:64:b5:8a:b3:16:91:6d:f1:f5:36:
                    ba:3d:3a:b2:42:40:c6:31:25:90:a9:a9:97:17:11:
                    fb:6c:4f:7a:28:3c:d6:9c:e0:c2:c9:91:33:98:4c:
                    ab:02:74:17:cc:5b:c6:74:3f:c3:5f:1f:9e:9b:f9:
                    51:0f:bd:ea:d0:b9:b1:0c:89:ed:74:33:67:b4:b4:
                    7b:bc:73:f1:de:cd:9b:23:71:b3:c8:84:c5:87:b6:
                    8d:98:9e:b7:19:73:9c:df:08:3b:f8:1b:00:5d:7a:
                    f3:a3:16:79:ea:7f:ec:dd:cc:71:1c:b3:ec:3a:84:
                    c3:3b:f5:3e:29:76:37:0d:d6:11:23:d4:ba:84:74:
                    41:2f:66:34:9d:d1:1d:92:64:ef:b7:d0:38:a6:02:
                    33:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:96:FE:C0:B5:23:46:CF:C1:49:FA:56:C3:77:15:9D:E2:61:E8:C0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7068bdd3-5430-4dcc-bcfa-89e8e9fe2b38/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7068bdd3-5430-4dcc-bcfa-89e8e9fe2b38/4f38ac0e08f7d2f4471d0cbc85dcb2934977923e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.32.0-187.251.95.255
                  187.251.160.0/19
                  200.23.60.0/24
                  201.139.176.0/21
                IPv6:
                  2001:1228::/32
                  2001:122c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18592
                  28569
                  262924

    Signature Algorithm: sha256WithRSAEncryption
         67:f0:7b:70:51:65:28:89:a7:af:d1:49:ee:a3:50:3c:6a:48:
         4a:b2:7f:d2:d2:3e:d8:2f:dc:19:63:bb:b6:fc:c5:77:d7:29:
         53:a3:cb:c2:62:fa:5a:62:cf:8f:d0:32:5d:e3:27:ef:dd:bc:
         02:22:a0:5f:03:4f:42:9e:ac:13:25:53:8f:b8:04:2a:86:27:
         2c:f1:96:72:2f:23:64:10:39:3c:ca:e2:c2:b0:bc:b5:36:6a:
         3e:3e:b5:82:31:24:96:4a:c7:d8:05:06:cc:43:78:1b:67:c9:
         37:38:af:7e:65:f2:f2:59:6c:09:bf:7f:87:0b:dc:9c:19:37:
         30:87:93:ca:3a:21:f6:67:2e:e6:41:7b:a0:8f:c4:97:7d:4a:
         b3:c0:71:c5:cb:87:c5:bf:96:5e:c0:09:02:88:55:1a:0e:f7:
         c7:90:20:31:30:f9:51:de:4c:5a:21:85:81:b0:25:e1:a8:8d:
         4c:fa:b6:8d:3f:7d:a2:58:26:dc:a6:bd:53:b0:51:c3:cf:07:
         20:d2:34:05:03:a3:33:5f:32:05:d1:19:fe:7a:1a:55:bf:f7:
         75:8b:2d:d7:39:1f:13:08:7e:09:39:63:7f:36:27:c0:d4:8f:
         63:12:a2:f9:35:8d:f6:b7:1b:75:ec:ef:83:e3:07:b8:47:5e:
         a0:b4:46:92
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIEAOHV/jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDgzMTE1NTE1N1oXDTI0MDYyNTA0MDUw
MVowMzExMC8GA1UEAxMoNGYzOGFjMGUwOGY3ZDJmNDQ3MWQwY2JjODVkY2IyOTM0
OTc3OTIzZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIyeA3lglz5G
PiJ7H8N7Y5r9V5fVzFictNa4r3tPtmAJ7IN/+PJw0itT1rKAMJez9sV9CbcTWgnQ
JCBAkj009RkBZl4Q3Z5dnpWEDJdfdtRKolSbk1Vd9ole88DqB9AZrKfVkWJnnlvY
SehwbhZktYqzFpFt8fU2uj06skJAxjElkKmplxcR+2xPeig81pzgwsmRM5hMqwJ0
F8xbxnQ/w18fnpv5UQ+96tC5sQyJ7XQzZ7S0e7xz8d7NmyNxs8iExYe2jZietxlz
nN8IO/gbAF1686MWeep/7N3McRyz7DqEwzv1Pil2Nw3WESPUuoR0QS9mNJ3RHZJk
77fQOKYCM+sCAwEAAaOCAzIwggMuMB0GA1UdDgQWBBQKlv7AtSNGz8FJ+lbDdxWd
4mHowDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83MDY4YmRkMy01NDMw
LTRkY2MtYmNmYS04OWU4ZTlmZTJiMzgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzA2OGJkZDMtNTQzMC00
ZGNjLWJjZmEtODllOGU5ZmUyYjM4LzRmMzhhYzBlMDhmN2QyZjQ0NzFkMGNiYzg1
ZGNiMjkzNDk3NzkyM2UubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBP
BggrBgEFBQcBBwEB/wRAMD4wJgQCAAEwIDAMAwQFu/sgAwQFu/tAAwQFu/ugAwQA
yBc8AwQDyYuwMBQEAgACMA4DBQAgARIoAwUAIAESLDAiBggrBgEFBQcBCAEB/wQT
MBGgDzANAgJIoAICb5kCAwQDDDANBgkqhkiG9w0BAQsFAAOCAQEAZ/B7cFFlKImn
r9FJ7qNQPGpISrJ/0tI+2C/cGWO7tvzFd9cpU6PLwmL6WmLPj9AyXeMn7928AiKg
XwNPQp6sEyVTj7gEKoYnLPGWci8jZBA5PMriwrC8tTZqPj61gjEklkrH2AUGzEN4
G2fJNzivfmXy8llsCb9/hwvcnBk3MIeTyjoh9mcu5kF7oI/El31Ks8BxxcuHxb+W
XsAJAohVGg73x5AgMTD5Ud5MWiGFgbAl4aiNTPq2jT99olgm3Ka9U7BRw88HINI0
BQOjM18yBdEZ/noaVb/3dYst1zkfEwh+CTljfzYnwNSPYxKi+TWN9rcbdezvg+MH
uEdeoLRGkg==
-----END CERTIFICATE-----