Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.cer
File:                     4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.cer (raw, json)
Hash identifier:          8H0+DjAbubpOJksbVtCNXPGLP4D6BWNBS4FUXxwQCTQ=
Subject key identifier:   B5:24:EE:78:56:06:DD:F9:B4:D2:AC:F4:E7:6B:05:B0:E4:27:64:35
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB0B4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:16 +0000
Certificate not after:    Sun 23 Jun 2024 19:01:29 +0000
Subordinate resources:    AS: 266839
                          IP: 181.191.232.0/22
                          IP: 2803:8820::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15403851 (0xeb0b4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:16 2017 GMT
            Not After : Jun 23 19:01:29 2024 GMT
        Subject: CN=4ff66b8a7de8fbaabda6df89d24dc89b663c67b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3d:0a:26:ca:53:93:68:c1:e7:a9:5e:48:5b:
                    5c:63:25:94:ee:35:e7:bb:fc:e3:b6:fe:7c:d5:7d:
                    2c:5f:dc:0a:ec:71:66:eb:37:b6:4c:b1:c6:a6:7a:
                    0a:90:bc:d9:27:cb:35:e8:78:c7:ee:b9:72:96:f8:
                    11:72:d2:11:b9:d8:2a:78:17:b8:a1:02:d9:44:78:
                    ca:30:70:39:d5:9e:6d:4d:2f:48:f3:92:53:cd:09:
                    4e:06:e6:6f:f5:50:a0:5f:ba:79:03:c6:b8:a1:bd:
                    cc:ce:8b:da:99:76:77:83:bb:55:91:8c:46:df:86:
                    2c:51:2c:09:35:2e:58:b0:de:e5:f6:fa:70:e8:4d:
                    35:d4:09:28:31:c3:f2:ce:49:da:fd:4b:31:0d:14:
                    3e:bf:bd:d5:4d:1e:ce:42:18:e1:95:e3:57:c0:f2:
                    fe:1d:86:32:0e:c1:f7:21:52:96:c8:7a:23:c5:21:
                    44:0f:f8:33:3d:3f:e6:8d:6c:57:ca:76:2c:79:5c:
                    c8:a6:96:d4:e6:a5:c9:12:88:84:64:00:53:c5:f7:
                    b9:6a:fb:a2:9b:d6:59:f0:9f:89:57:be:20:69:ed:
                    fc:04:ef:0f:91:2e:a8:62:f5:68:49:d2:6d:07:d0:
                    bc:ed:14:cb:2b:b6:67:d6:fb:9f:f6:78:6f:43:e0:
                    eb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:24:EE:78:56:06:DD:F9:B4:D2:AC:F4:E7:6B:05:B0:E4:27:64:35
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.232.0/22
                IPv6:
                  2803:8820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266839

    Signature Algorithm: sha256WithRSAEncryption
         ba:09:12:5c:f9:c7:f0:14:9d:48:10:3f:03:bc:08:fa:df:ce:
         74:16:50:9f:00:52:d9:ec:12:35:ad:1e:0d:3d:45:0a:a1:c5:
         da:2c:4f:4a:0e:e3:0c:9f:01:00:18:9c:25:5e:32:79:8b:1e:
         4a:5d:47:ce:42:b3:62:7d:fd:a7:02:74:20:b6:10:99:08:c0:
         01:97:06:a8:7b:69:ea:4f:6b:5c:15:e8:45:84:6c:57:fa:e6:
         04:ec:d8:ca:5b:44:d0:b3:b5:03:47:6f:f5:19:e1:4c:96:fb:
         41:4b:15:d6:d9:9a:61:ff:5f:b8:0f:43:b2:40:62:3b:1a:bc:
         fb:80:ee:fe:22:9d:31:78:d0:70:fb:bc:cc:b9:94:9e:a3:a2:
         5f:cc:7c:d3:2a:5f:38:60:cd:3d:01:38:09:93:69:fa:aa:46:
         a7:6f:24:66:f2:f0:72:5d:ae:fa:1a:e5:2c:8a:96:c4:29:45:
         08:75:e5:a6:91:51:98:75:ce:5b:4d:d1:c1:b9:6d:24:04:f4:
         33:e5:45:a5:5b:3e:d6:a8:0d:79:5f:be:11:85:c5:51:f6:25:
         40:e9:0d:e6:5a:5c:b0:ce:5e:a5:4f:7d:d6:4a:61:2b:6c:92:
         6c:94:94:68:0e:17:b7:8e:8f:37:e0:d5:00:cc:f0:e8:4e:a1:
         bf:2c:77:92
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOsLSzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcxNloXDTI0MDYyMzE5MDEy
OVowMzExMC8GA1UEAxMoNGZmNjZiOGE3ZGU4ZmJhYWJkYTZkZjg5ZDI0ZGM4OWI2
NjNjNjdiNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI49CibKU5No
weepXkhbXGMllO4157v847b+fNV9LF/cCuxxZus3tkyxxqZ6CpC82SfLNeh4x+65
cpb4EXLSEbnYKngXuKEC2UR4yjBwOdWebU0vSPOSU80JTgbmb/VQoF+6eQPGuKG9
zM6L2pl2d4O7VZGMRt+GLFEsCTUuWLDe5fb6cOhNNdQJKDHD8s5J2v1LMQ0UPr+9
1U0ezkIY4ZXjV8Dy/h2GMg7B9yFSlsh6I8UhRA/4Mz0/5o1sV8p2LHlcyKaW1Oal
yRKIhGQAU8X3uWr7opvWWfCfiVe+IGnt/ATvD5EuqGL1aEnSbQfQvO0Uyyu2Z9b7
n/Z4b0Pg6x8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBS1JO54Vgbd+bTSrPTnawWw
5CdkNTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84ZjFhM2YzMC05ODZl
LTQxZTctYjQzZi0wYWY4NWJlMGZmNmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOGYxYTNmMzAtOTg2ZS00
MWU3LWI0M2YtMGFmODViZTBmZjZlLzRmZjY2YjhhN2RlOGZiYWFiZGE2ZGY4OWQy
NGRjODliNjYzYzY3YjYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArW/6DANBAIAAjAHAwUAKAOIIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEElcwDQYJKoZIhvcNAQELBQADggEBALoJ
Elz5x/AUnUgQPwO8CPrfznQWUJ8AUtnsEjWtHg09RQqhxdosT0oO4wyfAQAYnCVe
MnmLHkpdR85Cs2J9/acCdCC2EJkIwAGXBqh7aepPa1wV6EWEbFf65gTs2MpbRNCz
tQNHb/UZ4UyW+0FLFdbZmmH/X7gPQ7JAYjsavPuA7v4inTF40HD7vMy5lJ6jol/M
fNMqXzhgzT0BOAmTafqqRqdvJGby8HJdrvoa5SyKlsQpRQh15aaRUZh1zltN0cG5
bSQE9DPlRaVbPtaoDXlfvhGFxVH2JUDpDeZaXLDOXqVPfdZKYStskmyUlGgOF7eO
jzfg1QDM8OhOob8sd5I=
-----END CERTIFICATE-----