Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/537d4a46b1ec21734046c8936937d68dabe4e0bb.cer
File:                     537d4a46b1ec21734046c8936937d68dabe4e0bb.cer (raw, json)
Hash identifier:          DfU1Iia3TM/BhEsCt2bRpMFiWckZuZi2eOE/ePf0QY4=
Subject key identifier:   69:E8:B9:DD:3F:EA:71:2C:C9:51:AA:AC:6C:9F:B5:E6:DD:69:68:84
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCD003
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/37027e80-1204-498a-a7fc-b31f3a3efc65/537d4a46b1ec21734046c8936937d68dabe4e0bb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/37027e80-1204-498a-a7fc-b31f3a3efc65/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:34 +0000
Certificate not after:    Thu 22 Feb 2024 22:29:20 +0000
Subordinate resources:    AS: 264695
                          IP: 200.23.84.0/24
                          IP: 2801:19:9000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14471171 (0xdcd003)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:34 2017 GMT
            Not After : Feb 22 22:29:20 2024 GMT
        Subject: CN=537d4a46b1ec21734046c8936937d68dabe4e0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e7:3c:1c:0b:ff:15:16:35:52:8a:50:f1:22:
                    c4:44:28:eb:00:a8:8f:0a:97:41:6d:e0:86:b0:5a:
                    c7:c9:43:41:30:6c:63:ac:7b:0e:91:3a:41:f7:9c:
                    75:92:42:d2:ff:2e:79:a7:37:5c:56:6a:87:28:24:
                    0d:45:6d:d3:5a:9b:0e:8b:10:55:69:7a:a1:af:8d:
                    21:43:8b:cf:89:6b:ea:e2:8f:7c:f2:26:5d:bc:40:
                    26:01:c9:68:17:0b:08:56:8e:03:e1:63:4a:d4:23:
                    75:a1:3c:ae:19:9c:be:16:db:e6:e7:bd:91:03:b5:
                    e1:69:77:fe:50:60:88:91:b1:c5:20:6c:7c:6f:46:
                    cd:fb:8b:24:54:f4:e5:11:0c:d2:32:84:47:5b:b5:
                    59:e5:aa:39:4e:7f:9f:26:29:ce:6a:d5:4c:ab:b0:
                    8f:78:cf:9a:d8:0c:20:46:fc:b3:7b:0e:19:b3:31:
                    f6:66:49:74:5a:c3:c3:33:aa:4c:b7:e2:0a:52:3f:
                    90:7d:9d:5f:fb:4b:c2:c3:32:bf:0a:ed:43:62:bc:
                    07:88:3c:f9:7b:aa:82:59:25:20:89:5c:60:24:c5:
                    56:cd:31:f0:1e:bf:74:ce:ec:d9:4e:a8:f8:a7:b7:
                    d3:e9:8b:17:d8:e7:91:db:04:52:60:55:c5:70:18:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E8:B9:DD:3F:EA:71:2C:C9:51:AA:AC:6C:9F:B5:E6:DD:69:68:84
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/37027e80-1204-498a-a7fc-b31f3a3efc65/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/37027e80-1204-498a-a7fc-b31f3a3efc65/537d4a46b1ec21734046c8936937d68dabe4e0bb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.84.0/24
                IPv6:
                  2801:19:9000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264695

    Signature Algorithm: sha256WithRSAEncryption
         a6:0f:6f:7f:9b:bc:be:c3:4f:b8:63:f1:c0:82:1f:60:75:ee:
         4d:e1:d6:39:8a:ee:2a:df:5d:c5:f7:b0:b1:dd:22:46:19:bb:
         30:d2:ed:90:8c:8c:7c:e0:1c:5c:60:cb:37:89:0d:96:90:30:
         ae:a6:7a:08:7a:66:13:d7:3f:b2:12:d9:b2:79:a7:2c:27:a8:
         d1:95:1f:0f:6b:63:d9:df:59:9c:ea:5e:7a:09:87:72:ea:3c:
         c9:93:99:72:ee:54:d6:93:8c:90:00:9f:a0:1f:ab:d4:5f:4d:
         c0:7b:69:96:27:2a:9b:01:4d:a7:2b:c9:45:be:5e:69:f6:fa:
         4d:b9:64:63:be:50:90:42:54:0e:a2:4b:d5:13:33:b4:f2:29:
         f3:44:a2:e3:c7:fa:34:7b:29:43:c9:6c:37:65:ab:78:7d:6a:
         57:a8:1e:07:8e:cf:fd:97:11:4d:84:98:93:17:ea:4b:4d:d3:
         90:23:98:83:32:ab:6c:a2:f7:26:07:dc:a9:53:f0:fe:51:5c:
         c9:a0:3f:01:0c:a1:62:32:d0:07:4d:b8:10:2f:ae:68:c8:68:
         a9:56:8c:f3:3f:4e:8a:fa:7d:2c:5d:08:23:d4:c3:50:29:d0:
         fd:0e:5f:e0:0b:7a:d1:c2:b9:9c:8b:e7:9d:3a:79:b6:5f:6b:
         55:44:35:80
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEANzQAzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzNFoXDTI0MDIyMjIyMjky
MFowMzExMC8GA1UEAxMoNTM3ZDRhNDZiMWVjMjE3MzQwNDZjODkzNjkzN2Q2OGRh
YmU0ZTBiYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI7nPBwL/xUW
NVKKUPEixEQo6wCojwqXQW3ghrBax8lDQTBsY6x7DpE6QfecdZJC0v8ueac3XFZq
hygkDUVt01qbDosQVWl6oa+NIUOLz4lr6uKPfPImXbxAJgHJaBcLCFaOA+FjStQj
daE8rhmcvhbb5ue9kQO14Wl3/lBgiJGxxSBsfG9GzfuLJFT05REM0jKER1u1WeWq
OU5/nyYpzmrVTKuwj3jPmtgMIEb8s3sOGbMx9mZJdFrDwzOqTLfiClI/kH2dX/tL
wsMyvwrtQ2K8B4g8+XuqglklIIlcYCTFVs0x8B6/dM7s2U6o+Ke30+mLF9jnkdsE
UmBVxXAY2zUCAwEAAaOCAwswggMHMB0GA1UdDgQWBBRp6LndP+pxLMlRqqxsn7Xm
3WlohDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zNzAyN2U4MC0xMjA0
LTQ5OGEtYTdmYy1iMzFmM2EzZWZjNjUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzcwMjdlODAtMTIwNC00
OThhLWE3ZmMtYjMxZjNhM2VmYzY1LzUzN2Q0YTQ2YjFlYzIxNzM0MDQ2Yzg5MzY5
MzdkNjhkYWJlNGUwYmIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMgXVDAPBAIAAjAJAwcAKAEAGZAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJ9zANBgkqhkiG9w0BAQsFAAOCAQEA
pg9vf5u8vsNPuGPxwIIfYHXuTeHWOYruKt9dxfewsd0iRhm7MNLtkIyMfOAcXGDL
N4kNlpAwrqZ6CHpmE9c/shLZsnmnLCeo0ZUfD2tj2d9ZnOpeegmHcuo8yZOZcu5U
1pOMkACfoB+r1F9NwHtplicqmwFNpyvJRb5eafb6TblkY75QkEJUDqJL1RMztPIp
80Si48f6NHspQ8lsN2WreH1qV6geB47P/ZcRTYSYkxfqS03TkCOYgzKrbKL3Jgfc
qVPw/lFcyaA/AQyhYjLQB024EC+uaMhoqVaM8z9Oivp9LF0II9TDUCnQ/Q5f4At6
0cK5nIvnnTp5tl9rVUQ1gA==
-----END CERTIFICATE-----