Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c34fa58b450d1d87e2a3f62539540eec9fe00c8.cer
File:                     6c34fa58b450d1d87e2a3f62539540eec9fe00c8.cer (raw, json)
Hash identifier:          8tkYEgqNShVd1xh1PZewrcOtEyi96dukGrk4ObcMQ/k=
Subject key identifier:   E4:D9:59:C4:60:3E:EA:76:7C:AB:3D:02:BE:36:01:EB:F2:37:02:16
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC0102
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3e2a93a5-514a-4b44-804e-67f283737461/6c34fa58b450d1d87e2a3f62539540eec9fe00c8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3e2a93a5-514a-4b44-804e-67f283737461/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:36 +0000
Certificate not after:    Wed 14 Feb 2024 18:40:09 +0000
Subordinate resources:    AS: 61442
                          IP: 161.0.120.0/21
                          IP: 2803:2680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14418178 (0xdc0102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:36 2017 GMT
            Not After : Feb 14 18:40:09 2024 GMT
        Subject: CN=6c34fa58b450d1d87e2a3f62539540eec9fe00c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:97:2a:d2:d2:ec:60:bb:c7:2a:49:a5:02:
                    0d:02:e9:07:57:18:d7:16:0a:e2:dc:30:ce:93:1e:
                    2f:ea:bf:a7:fd:75:3a:a7:14:07:23:00:b0:47:8d:
                    0d:77:f0:f2:1d:f1:91:a6:81:8e:3d:03:9a:5e:5d:
                    07:b1:77:be:fd:4d:fa:be:c7:48:f9:a1:88:10:90:
                    b9:5c:92:e8:07:3e:a1:00:90:7c:9c:62:99:50:03:
                    fb:8d:7c:3b:41:a4:ed:aa:83:ba:90:41:5d:d0:e6:
                    62:c0:6c:cd:d4:bf:3e:5f:9f:0d:4b:9d:67:15:96:
                    99:1e:28:2c:62:4f:b3:72:21:6e:a3:e8:84:82:ee:
                    b1:e6:a1:0d:1f:5d:64:8e:09:4a:2d:bc:fc:28:b7:
                    f4:1c:6c:bf:a8:f4:68:75:ed:10:40:c7:bc:50:02:
                    8c:0c:46:88:bf:58:17:a8:85:2f:52:ff:06:61:bb:
                    78:23:c0:9e:8f:68:51:94:fd:4e:81:4e:cc:4f:5d:
                    59:08:84:5c:67:ce:79:09:eb:f1:4b:85:86:95:5e:
                    64:82:47:a4:e9:fb:45:01:7e:ea:ee:17:e4:3b:29:
                    e5:ca:59:ae:03:04:2e:f9:3b:a5:f5:83:0e:f2:ed:
                    22:28:e0:ff:4e:e1:40:26:7a:c6:22:71:68:0f:84:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D9:59:C4:60:3E:EA:76:7C:AB:3D:02:BE:36:01:EB:F2:37:02:16
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3e2a93a5-514a-4b44-804e-67f283737461/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3e2a93a5-514a-4b44-804e-67f283737461/6c34fa58b450d1d87e2a3f62539540eec9fe00c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.120.0/21
                IPv6:
                  2803:2680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61442

    Signature Algorithm: sha256WithRSAEncryption
         7e:84:60:19:3d:1c:60:de:77:29:ce:ed:89:2e:bf:ed:24:6b:
         e4:e2:1d:a5:c0:a4:6c:c4:33:c3:bc:48:a8:7c:d7:0d:b4:17:
         9d:f6:b8:81:d9:ab:03:a4:cb:69:cc:de:5d:4d:a4:fb:3a:9a:
         a1:df:be:34:d6:63:dd:a8:c2:26:1a:ae:4d:8c:da:2d:ab:58:
         49:6e:d1:6e:14:b4:9a:81:97:6f:6a:ed:91:dc:54:2d:1c:35:
         5f:47:13:52:75:09:f3:68:4b:99:e7:50:1c:e4:7f:f0:4f:0a:
         28:7d:2c:29:09:4c:35:b6:08:52:00:34:ff:09:cd:15:02:57:
         a9:c2:62:90:39:bd:c8:f9:db:f3:fc:7b:2c:bb:55:58:78:85:
         c5:c6:16:a9:0f:00:96:29:01:04:66:b5:d0:20:da:0f:33:d6:
         77:77:d0:a8:30:c6:15:55:07:68:6b:60:3d:b6:ad:43:16:38:
         bb:04:9f:f2:ad:9a:4a:05:70:f6:ed:3b:87:e3:49:c9:fc:a7:
         dd:7f:67:55:dd:b4:03:7d:c5:1a:66:0b:34:67:c9:74:ef:11:
         4c:fb:83:e4:43:d8:e5:8a:62:5f:3f:54:c8:fc:19:ff:39:9b:
         d1:ee:4d:77:86:e2:25:86:1e:8a:61:a8:1b:73:78:16:c5:2c:
         09:a5:25:1c
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANwBAjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzczNloXDTI0MDIxNDE4NDAw
OVowMzExMC8GA1UEAxMoNmMzNGZhNThiNDUwZDFkODdlMmEzZjYyNTM5NTQwZWVj
OWZlMDBjODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJQAlyrS0uxg
u8cqSaUCDQLpB1cY1xYK4twwzpMeL+q/p/11OqcUByMAsEeNDXfw8h3xkaaBjj0D
ml5dB7F3vv1N+r7HSPmhiBCQuVyS6Ac+oQCQfJximVAD+418O0Gk7aqDupBBXdDm
YsBszdS/Pl+fDUudZxWWmR4oLGJPs3IhbqPohILuseahDR9dZI4JSi28/Ci39Bxs
v6j0aHXtEEDHvFACjAxGiL9YF6iFL1L/BmG7eCPAno9oUZT9ToFOzE9dWQiEXGfO
eQnr8UuFhpVeZIJHpOn7RQF+6u4X5Dsp5cpZrgMELvk7pfWDDvLtIijg/07hQCZ6
xiJxaA+E038CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTk2VnEYD7qdnyrPQK+NgHr
8jcCFjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zZTJhOTNhNS01MTRh
LTRiNDQtODA0ZS02N2YyODM3Mzc0NjEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2UyYTkzYTUtNTE0YS00
YjQ0LTgwNGUtNjdmMjgzNzM3NDYxLzZjMzRmYTU4YjQ1MGQxZDg3ZTJhM2Y2MjUz
OTU0MGVlYzlmZTAwYzgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA6EAeDANBAIAAjAHAwUAKAMmgDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8AIwDQYJKoZIhvcNAQELBQADggEBAH6E
YBk9HGDedynO7Ykuv+0ka+TiHaXApGzEM8O8SKh81w20F532uIHZqwOky2nM3l1N
pPs6mqHfvjTWY92owiYark2M2i2rWElu0W4UtJqBl29q7ZHcVC0cNV9HE1J1CfNo
S5nnUBzkf/BPCih9LCkJTDW2CFIANP8JzRUCV6nCYpA5vcj52/P8eyy7VVh4hcXG
FqkPAJYpAQRmtdAg2g8z1nd30KgwxhVVB2hrYD22rUMWOLsEn/KtmkoFcPbtO4fj
Scn8p91/Z1XdtAN9xRpmCzRnyXTvEUz7g+RD2OWKYl8/VMj8Gf85m9HuTXeG4iWG
HophqBtzeBbFLAmlJRw=
-----END CERTIFICATE-----