Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f67c92421f26cdc0c2acdd73ccec146d8ab511c.cer
File:                     4f67c92421f26cdc0c2acdd73ccec146d8ab511c.cer (raw, json)
Hash identifier:          X0/aGMg2zQhly4NF22oFDIy0WjxDWlKdEeImZqpw8rc=
Subject key identifier:   00:B0:67:6D:F0:2A:44:31:F3:68:0E:02:60:D9:2C:26:43:68:18:19
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF69FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ce3e918b-55e7-477c-95fd-b3920f231e2f/4f67c92421f26cdc0c2acdd73ccec146d8ab511c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ce3e918b-55e7-477c-95fd-b3920f231e2f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 23 May 2018 16:07:49 +0000
Certificate not after:    Sat 23 Mar 2024 17:57:25 +0000
Subordinate resources:    AS: 266811
                          IP: 160.20.246.0/24
                          IP: 2803:58a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14641660 (0xdf69fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 23 16:07:49 2018 GMT
            Not After : Mar 23 17:57:25 2024 GMT
        Subject: CN=4f67c92421f26cdc0c2acdd73ccec146d8ab511c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:de:8e:d6:55:7d:c1:c9:48:34:fc:08:c2:cc:
                    e3:21:0d:2d:12:8d:99:7b:0c:5d:fa:2c:82:f9:e3:
                    2f:83:34:ce:30:5c:6a:27:a1:1b:00:1c:03:98:58:
                    40:77:ad:2f:3a:d7:4d:de:5a:7d:0e:30:b8:98:a8:
                    de:a9:57:d2:a8:cc:30:89:b4:81:cf:fb:b1:26:7d:
                    e9:4b:e9:c4:60:44:51:f7:fd:7c:20:8e:aa:cb:13:
                    22:f3:7a:80:e5:d3:0c:98:d5:a9:61:c8:9a:b5:29:
                    67:08:67:d1:d4:6e:4f:3c:12:4e:96:12:c3:92:4c:
                    12:77:14:a6:e4:f5:7f:18:55:d0:c6:7e:b9:76:01:
                    2c:3b:2e:fb:ba:c8:d2:ca:64:e2:f6:90:cc:f8:00:
                    32:b6:bf:6e:ed:c3:ce:de:25:5f:5a:4b:b1:3f:d2:
                    9a:bb:0e:f9:fa:db:52:c5:2d:31:19:8f:91:68:de:
                    f9:74:27:41:0b:4a:21:28:69:5a:8f:e9:8a:f3:99:
                    e1:fa:20:df:93:85:c4:30:20:bc:a0:2c:9f:0f:6d:
                    49:0e:1d:54:01:01:06:59:ad:46:22:0d:7e:d4:75:
                    db:d8:82:43:cd:21:65:47:cd:40:a9:6f:81:2c:52:
                    3d:4b:c8:90:4c:1a:8a:f9:ce:af:c7:55:99:fe:67:
                    81:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B0:67:6D:F0:2A:44:31:F3:68:0E:02:60:D9:2C:26:43:68:18:19
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ce3e918b-55e7-477c-95fd-b3920f231e2f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ce3e918b-55e7-477c-95fd-b3920f231e2f/4f67c92421f26cdc0c2acdd73ccec146d8ab511c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.246.0/24
                IPv6:
                  2803:58a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266811

    Signature Algorithm: sha256WithRSAEncryption
         86:e5:49:2e:24:aa:04:10:f4:06:80:8e:46:44:fb:db:cb:db:
         13:56:12:79:0f:79:44:8f:14:d4:d2:ea:49:b8:04:f5:79:a2:
         21:8b:18:d5:ae:00:b9:52:55:60:0b:23:1a:8c:ef:c2:9a:f9:
         24:d4:59:4b:08:ac:62:15:da:21:b1:b6:6f:ef:e6:d8:bb:ee:
         20:82:60:cd:3a:5a:75:3c:2c:2a:2b:2e:14:dc:50:64:52:0a:
         50:9e:8b:c7:2f:be:31:e8:61:4f:27:07:53:73:58:4e:a9:fc:
         91:c9:c6:64:dd:c3:cf:a0:3e:67:68:34:e7:5c:94:f7:65:eb:
         fb:1a:63:4b:ba:bf:38:75:c2:e9:a7:16:21:63:22:93:f1:30:
         4a:ae:48:9c:a8:89:19:58:d6:b9:fb:9b:e3:03:cc:5e:76:22:
         95:08:13:55:31:af:6a:aa:ba:7d:69:2a:a2:e7:30:56:8e:54:
         3a:1b:55:d5:fd:aa:5d:95:20:2e:da:8c:ae:cd:69:fc:e7:d9:
         79:5e:79:ab:ec:a6:6b:97:aa:33:c4:28:ff:87:c6:02:c4:64:
         62:b9:fc:e3:a3:69:97:a9:db:7f:a8:95:b1:70:c4:36:62:03:
         a2:54:5c:9b:f1:20:58:3d:89:82:c3:fc:fe:69:26:ca:fc:25:
         1e:86:18:86
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAN9p/DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDUyMzE2MDc0OVoXDTI0MDMyMzE3NTcy
NVowMzExMC8GA1UEAxMoNGY2N2M5MjQyMWYyNmNkYzBjMmFjZGQ3M2NjZWMxNDZk
OGFiNTExYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJXejtZVfcHJ
SDT8CMLM4yENLRKNmXsMXfosgvnjL4M0zjBcaiehGwAcA5hYQHetLzrXTd5afQ4w
uJio3qlX0qjMMIm0gc/7sSZ96UvpxGBEUff9fCCOqssTIvN6gOXTDJjVqWHImrUp
Zwhn0dRuTzwSTpYSw5JMEncUpuT1fxhV0MZ+uXYBLDsu+7rI0spk4vaQzPgAMra/
bu3Dzt4lX1pLsT/SmrsO+frbUsUtMRmPkWje+XQnQQtKIShpWo/pivOZ4fog35OF
xDAgvKAsnw9tSQ4dVAEBBlmtRiINftR129iCQ80hZUfNQKlvgSxSPUvIkEwaivnO
r8dVmf5ngQMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQAsGdt8CpEMfNoDgJg2Swm
Q2gYGTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jZTNlOTE4Yi01NWU3
LTQ3N2MtOTVmZC1iMzkyMGYyMzFlMmYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvY2UzZTkxOGItNTVlNy00
NzdjLTk1ZmQtYjM5MjBmMjMxZTJmLzRmNjdjOTI0MjFmMjZjZGMwYzJhY2RkNzNj
Y2VjMTQ2ZDhhYjUxMWMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAKAU9jANBAIAAjAHAwUAKANYoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEjswDQYJKoZIhvcNAQELBQADggEBAIbl
SS4kqgQQ9AaAjkZE+9vL2xNWEnkPeUSPFNTS6km4BPV5oiGLGNWuALlSVWALIxqM
78Ka+STUWUsIrGIV2iGxtm/v5ti77iCCYM06WnU8LCorLhTcUGRSClCei8cvvjHo
YU8nB1NzWE6p/JHJxmTdw8+gPmdoNOdclPdl6/saY0u6vzh1wumnFiFjIpPxMEqu
SJyoiRlY1rn7m+MDzF52IpUIE1Uxr2qqun1pKqLnMFaOVDobVdX9ql2VIC7ajK7N
afzn2XleeavspmuXqjPEKP+HxgLEZGK5/OOjaZep23+olbFwxDZiA6JUXJvxIFg9
iYLD/P5pJsr8JR6GGIY=
-----END CERTIFICATE-----