Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f4b89c3cbd4644d4e426636d2a43eca240171d3.cer
File:                     6f4b89c3cbd4644d4e426636d2a43eca240171d3.cer (raw, json)
Hash identifier:          R3bkDQh/H8DNTC65XA/AWLuN4ikRP4JXp3QzXJkpdtQ=
Subject key identifier:   D0:B6:CE:97:A0:7E:A9:CF:27:BB:24:31:87:2D:57:77:86:68:7C:F6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7272C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5f421399-0c3e-4e81-a6fc-eb8ba59d1a20/6f4b89c3cbd4644d4e426636d2a43eca240171d3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5f421399-0c3e-4e81-a6fc-eb8ba59d1a20/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:30 +0000
Certificate not after:    Thu 14 Dec 2023 14:00:00 +0000
Subordinate resources:    AS: 27809
                          IP: 200.3.241.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14100268 (0xd7272c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:30 2017 GMT
            Not After : Dec 14 14:00:00 2023 GMT
        Subject: CN=6f4b89c3cbd4644d4e426636d2a43eca240171d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9c:1a:82:f5:1c:cc:9a:28:c7:cd:c5:99:89:
                    ae:39:91:4b:67:39:a9:58:5d:c4:2e:67:dc:6d:ee:
                    e7:e9:65:a4:b4:9b:da:66:a5:86:22:bd:57:bf:3e:
                    2a:1c:a4:f0:c7:5b:21:96:da:14:a8:2e:e0:aa:3f:
                    41:7f:05:ca:35:e2:cb:ea:88:f8:34:9c:a4:c0:78:
                    ae:64:70:72:e7:44:18:02:35:ef:cd:48:3c:ff:88:
                    77:a8:54:05:a0:69:f1:73:8b:5b:6a:57:9d:1e:40:
                    de:11:a5:4a:4d:57:da:87:fd:6f:2f:83:1f:9c:51:
                    53:6d:44:64:f5:d5:7a:8e:c8:a5:4b:33:48:64:7a:
                    69:5a:12:db:91:17:ab:5f:fb:2e:01:d2:4e:ef:ba:
                    4d:0b:d9:5d:b4:7d:57:20:77:78:43:3c:3c:c9:3e:
                    c6:e3:c8:6e:09:60:1d:c5:60:80:a9:cc:39:21:77:
                    74:78:64:ea:d6:f4:a0:d3:83:35:3e:da:c3:5f:13:
                    b6:8b:77:5b:c5:df:4c:6c:fb:fb:92:98:6f:12:64:
                    df:fb:a3:a7:1a:95:02:57:5a:f1:c2:c3:a7:ce:26:
                    06:a6:c6:e4:30:75:5e:2a:5a:4f:4a:38:49:a7:56:
                    c6:24:cf:c1:04:38:26:86:29:10:a5:55:56:75:1d:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B6:CE:97:A0:7E:A9:CF:27:BB:24:31:87:2D:57:77:86:68:7C:F6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5f421399-0c3e-4e81-a6fc-eb8ba59d1a20/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5f421399-0c3e-4e81-a6fc-eb8ba59d1a20/6f4b89c3cbd4644d4e426636d2a43eca240171d3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.241.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27809

    Signature Algorithm: sha256WithRSAEncryption
         17:91:46:b8:af:b6:49:5c:10:a8:94:78:c0:84:51:4c:71:03:
         e5:c4:37:9a:a8:78:44:46:64:bd:ab:d2:69:e5:df:0a:50:bf:
         84:88:b6:77:72:03:9f:3d:dc:5a:75:3a:51:5f:29:38:da:d3:
         ea:f7:7c:ed:8e:75:f0:7a:ca:21:8d:78:41:40:23:7c:a2:20:
         72:fd:82:38:a4:25:10:3c:4a:d7:35:50:67:6b:f5:b0:76:86:
         1f:5e:e3:89:61:02:c1:a9:ba:fc:c5:f1:46:39:57:78:45:ea:
         72:13:62:41:4e:61:aa:3c:8f:2a:85:24:17:e3:1b:e2:8b:69:
         5c:4b:f2:89:99:80:ae:4b:08:da:92:24:1b:83:8b:4a:70:86:
         37:2b:3a:51:ca:ea:4c:5f:92:6b:a2:7b:3f:3a:6f:6c:ba:86:
         e5:6f:ad:5b:6f:92:e8:e0:6f:48:21:16:5d:b9:15:49:df:3b:
         7b:d6:ef:61:a1:e0:e2:c4:5e:6d:08:42:f2:51:f5:9d:6d:91:
         e1:25:89:49:54:23:b5:48:19:a5:04:ff:d8:9e:4b:ef:eb:55:
         33:ca:02:29:97:70:48:38:fe:ef:b0:6b:98:ca:63:de:06:72:
         d6:71:ef:5e:38:e9:7d:be:f7:fc:b4:67:84:76:76:e3:b8:c4:
         40:20:da:d8
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEANcnLDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzczMFoXDTIzMTIxNDE0MDAw
MFowMzExMC8GA1UEAxMoNmY0Yjg5YzNjYmQ0NjQ0ZDRlNDI2NjM2ZDJhNDNlY2Ey
NDAxNzFkMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI+cGoL1HMya
KMfNxZmJrjmRS2c5qVhdxC5n3G3u5+llpLSb2malhiK9V78+Khyk8MdbIZbaFKgu
4Ko/QX8FyjXiy+qI+DScpMB4rmRwcudEGAI1781IPP+Id6hUBaBp8XOLW2pXnR5A
3hGlSk1X2of9by+DH5xRU21EZPXVeo7IpUszSGR6aVoS25EXq1/7LgHSTu+6TQvZ
XbR9VyB3eEM8PMk+xuPIbglgHcVggKnMOSF3dHhk6tb0oNODNT7aw18Ttot3W8Xf
TGz7+5KYbxJk3/ujpxqVAlda8cLDp84mBqbG5DB1XipaT0o4SadWxiTPwQQ4JoYp
EKVVVnUdUyUCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBTQts6XoH6pzye7JDGHLVd3
hmh89jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81ZjQyMTM5OS0wYzNl
LTRlODEtYTZmYy1lYjhiYTU5ZDFhMjAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWY0MjEzOTktMGMzZS00
ZTgxLWE2ZmMtZWI4YmE1OWQxYTIwLzZmNGI4OWMzY2JkNDY0NGQ0ZTQyNjYzNmQy
YTQzZWNhMjQwMTcxZDMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgD8TAZBggrBgEFBQcBCAEB/wQK
MAigBjAEAgJsoTANBgkqhkiG9w0BAQsFAAOCAQEAF5FGuK+2SVwQqJR4wIRRTHED
5cQ3mqh4REZkvavSaeXfClC/hIi2d3IDnz3cWnU6UV8pONrT6vd87Y518HrKIY14
QUAjfKIgcv2COKQlEDxK1zVQZ2v1sHaGH17jiWECwam6/MXxRjlXeEXqchNiQU5h
qjyPKoUkF+Mb4otpXEvyiZmArksI2pIkG4OLSnCGNys6UcrqTF+Sa6J7PzpvbLqG
5W+tW2+S6OBvSCEWXbkVSd87e9bvYaHg4sRebQhC8lH1nW2R4SWJSVQjtUgZpQT/
2J5L7+tVM8oCKZdwSDj+77BrmMpj3gZy1nHvXjjpfb73/LRnhHZ247jEQCDa2A==
-----END CERTIFICATE-----