Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3cf2f8cfb3657f866677511306c8536579ab5a.cer
File:                     5d3cf2f8cfb3657f866677511306c8536579ab5a.cer (raw, json)
Hash identifier:          IPWudqfbAHVZFHbmJlD80PNfX9lkM4eGKiextFlKfU4=
Subject key identifier:   7E:77:46:78:0A:D0:AC:23:5A:5F:79:ED:E4:F4:C9:AB:40:96:FB:FA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8E58B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/50290e9b-49dc-4760-9d13-189cdcb58e66/5d3cf2f8cfb3657f866677511306c8536579ab5a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/50290e9b-49dc-4760-9d13-189cdcb58e66/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:35 +0000
Certificate not after:    Sat 08 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 262174
                          IP: 179.0.0.0/23
                          IP: 200.61.254.0/23
                          IP: 207.248.76.0/23
                          IP: 2801:0:160::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15263115 (0xe8e58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:35 2017 GMT
            Not After : Jun  8 06:00:00 2024 GMT
        Subject: CN=5d3cf2f8cfb3657f866677511306c8536579ab5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e1:54:63:d7:4e:09:2d:ca:6f:6d:19:ed:82:
                    e5:e3:bb:b4:3e:1e:70:df:4f:da:1e:7c:b0:91:3d:
                    d4:0c:04:95:79:61:ee:7b:9e:4f:31:91:93:c8:89:
                    12:06:c3:58:90:87:de:eb:0a:78:ab:d6:34:9d:a6:
                    b8:6b:33:b9:df:c1:f9:f6:61:89:ef:38:c3:7f:88:
                    6c:de:12:c4:b3:45:ce:8c:f9:bb:f3:9f:2f:1e:d7:
                    b7:ef:7f:10:b0:b7:a4:e2:5b:77:fc:8f:70:c0:68:
                    27:c3:82:8f:fe:53:ef:2d:b4:b8:d2:c6:1d:b4:59:
                    d2:13:57:43:fd:69:0e:4b:e7:2b:13:11:a0:50:7d:
                    ad:5e:ec:e7:ec:78:2a:60:de:be:cf:bc:32:d7:be:
                    b9:cf:b5:67:e6:7b:a9:b1:6d:d7:e4:7c:f3:c7:c4:
                    b0:60:a7:de:b8:9b:d9:f9:17:9c:13:eb:53:cd:5d:
                    55:10:f8:bd:6d:f9:f6:27:12:e4:f3:fc:7b:48:f7:
                    89:74:84:0e:b7:aa:08:db:8b:f3:fc:28:d3:84:38:
                    b4:f0:73:a6:e3:b2:de:30:da:7d:75:ac:f4:08:4c:
                    d0:22:4d:30:70:67:34:5b:50:89:d3:9b:0e:32:46:
                    93:eb:4a:3c:1a:42:cb:73:c9:51:7e:48:5d:e4:37:
                    c9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:77:46:78:0A:D0:AC:23:5A:5F:79:ED:E4:F4:C9:AB:40:96:FB:FA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/50290e9b-49dc-4760-9d13-189cdcb58e66/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/50290e9b-49dc-4760-9d13-189cdcb58e66/5d3cf2f8cfb3657f866677511306c8536579ab5a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.0.0/23
                  200.61.254.0/23
                  207.248.76.0/23
                IPv6:
                  2801:0:160::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262174

    Signature Algorithm: sha256WithRSAEncryption
         a7:d6:a9:3e:37:70:1b:4e:b0:5b:52:15:74:f9:0f:8d:67:df:
         d5:70:27:39:a9:c4:3c:43:3b:a2:22:13:d8:44:84:8e:25:72:
         c3:60:e4:bd:00:e3:50:63:e7:9d:6d:ae:16:ea:f4:29:ce:47:
         aa:5d:28:fe:5b:17:cc:a3:04:0b:00:d5:c3:e9:a4:53:da:71:
         e8:3c:aa:e8:db:35:a8:20:64:43:c0:85:87:ca:a0:ed:69:07:
         b7:af:6f:ed:f7:a6:2f:c0:44:16:33:a6:5c:94:62:77:fe:7a:
         df:62:c8:af:8f:80:6a:05:0f:77:bf:a0:fe:b6:d5:46:18:22:
         70:06:83:b3:e0:59:34:da:c9:f4:49:33:83:12:89:50:9d:72:
         20:55:54:0a:ea:c5:64:0a:1a:6b:25:9b:a5:21:b5:eb:92:1d:
         d7:5b:1e:96:3f:4f:8d:dd:fb:e3:90:4e:25:64:d9:7a:d0:80:
         b8:42:4f:0f:fd:d0:6e:0d:85:9f:a7:a1:44:81:46:96:a8:66:
         64:8c:37:9f:4f:84:d9:48:d2:7d:4c:ae:1e:02:09:e7:f2:ae:
         7d:2d:52:d5:f0:23:0a:7f:13:74:17:b8:0a:4a:96:c5:17:e6:
         52:35:5b:9c:a3:88:69:87:73:b2:ea:a2:81:7b:dc:e7:7a:5c:
         80:32:20:39
-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgIEAOjlizANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzNVoXDTI0MDYwODA2MDAw
MFowMzExMC8GA1UEAxMoNWQzY2YyZjhjZmIzNjU3Zjg2NjY3NzUxMTMwNmM4NTM2
NTc5YWI1YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIjhVGPXTgkt
ym9tGe2C5eO7tD4ecN9P2h58sJE91AwElXlh7nueTzGRk8iJEgbDWJCH3usKeKvW
NJ2muGszud/B+fZhie84w3+IbN4SxLNFzoz5u/OfLx7Xt+9/ELC3pOJbd/yPcMBo
J8OCj/5T7y20uNLGHbRZ0hNXQ/1pDkvnKxMRoFB9rV7s5+x4KmDevs+8Mte+uc+1
Z+Z7qbFt1+R888fEsGCn3rib2fkXnBPrU81dVRD4vW359icS5PP8e0j3iXSEDreq
CNuL8/wo04Q4tPBzpuOy3jDafXWs9AhM0CJNMHBnNFtQidObDjJGk+tKPBpCy3PJ
UX5IXeQ3yZkCAwEAAaOCAxcwggMTMB0GA1UdDgQWBBR+d0Z4CtCsI1pfee3k9Mmr
QJb7+jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81MDI5MGU5Yi00OWRj
LTQ3NjAtOWQxMy0xODljZGNiNThlNjYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTAyOTBlOWItNDlkYy00
NzYwLTlkMTMtMTg5Y2RjYjU4ZTY2LzVkM2NmMmY4Y2ZiMzY1N2Y4NjY2Nzc1MTEz
MDZjODUzNjU3OWFiNWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGAQCAAEwEgMEAbMAAAMEAcg9/gMEAc/4TDAPBAIA
AjAJAwcAKAEAAAFgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQAHjANBgkqhkiG
9w0BAQsFAAOCAQEAp9apPjdwG06wW1IVdPkPjWff1XAnOanEPEM7oiIT2ESEjiVy
w2DkvQDjUGPnnW2uFur0Kc5Hql0o/lsXzKMECwDVw+mkU9px6Dyq6Ns1qCBkQ8CF
h8qg7WkHt69v7femL8BEFjOmXJRid/5632LIr4+AagUPd7+g/rbVRhgicAaDs+BZ
NNrJ9EkzgxKJUJ1yIFVUCurFZAoaayWbpSG165Id11selj9Pjd3745BOJWTZetCA
uEJPD/3Qbg2Fn6ehRIFGlqhmZIw3n0+E2UjSfUyuHgIJ5/KufS1S1fAjCn8TdBe4
CkqWxRfmUjVbnKOIaYdzsuqigXvc53pcgDIgOQ==
-----END CERTIFICATE-----