Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7301727ac2c04bf0b74625766b1a1dc6f6fa9b2f.cer
File:                     7301727ac2c04bf0b74625766b1a1dc6f6fa9b2f.cer (raw, json)
Hash identifier:          3TcXiCPPDoAnWXWhHn1X8xUwqT160SWv0qbzeRGLsKs=
Subject key identifier:   B8:33:7A:CF:B6:CD:40:63:B4:39:7B:9E:08:33:D9:04:00:5D:58:2A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CA1226
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/21900da0-a9eb-4d98-bf72-d415b2bfa7e0/7301727ac2c04bf0b74625766b1a1dc6f6fa9b2f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/21900da0-a9eb-4d98-bf72-d415b2bfa7e0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:47 +0000
Certificate not after:    Sun 25 Feb 2024 06:00:00 +0000
Subordinate resources:    AS: 264780
                          IP: 160.238.252.0/22
                          IP: 168.228.248.0/22
                          IP: 170.247.136.0/22
                          IP: 200.12.28.0/22
                          IP: 200.126.32.0/20
                          IP: 2803:1340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13242918 (0xca1226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:47 2017 GMT
            Not After : Feb 25 06:00:00 2024 GMT
        Subject: CN=7301727ac2c04bf0b74625766b1a1dc6f6fa9b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:9a:3f:ff:b5:24:79:be:77:ae:cf:0b:ea:
                    56:8a:b5:da:21:3c:34:3f:75:91:b9:e1:7a:3c:3f:
                    ad:9b:87:e3:1e:22:3f:08:c5:cc:40:1a:bc:2d:df:
                    e7:0b:92:3f:21:1c:ae:03:a0:6a:f1:af:12:7d:52:
                    3a:1e:d5:1a:bf:31:93:73:65:a5:0b:24:ac:23:99:
                    9d:17:30:1e:91:b3:6f:67:42:fd:54:20:75:35:ea:
                    c2:e1:2a:eb:33:3b:b1:7d:8b:f1:36:b4:a5:4d:32:
                    7c:1f:25:5e:76:a6:c1:22:bc:92:95:93:19:d4:f2:
                    28:4c:6b:89:a4:af:ac:4b:a0:11:8d:86:1e:3e:c8:
                    ff:a6:6d:77:9c:04:d1:5c:a4:90:6d:58:ac:68:e1:
                    72:41:1c:1a:3a:e6:45:e9:cd:3e:58:70:32:d6:eb:
                    ba:b0:ff:9e:5f:0d:df:7d:05:46:fe:e5:3c:f3:ba:
                    65:da:85:a0:8a:d1:7e:77:f4:e2:d0:0b:7c:a9:54:
                    91:79:88:51:70:d4:58:b3:c7:21:4d:61:87:e3:83:
                    58:3e:37:a4:53:02:5f:73:a6:b8:33:1e:f9:8f:61:
                    3b:a9:97:65:93:d1:f8:61:60:48:37:bc:c3:3c:76:
                    1f:00:d7:2f:de:83:c0:9e:5d:fe:d5:d3:78:55:c4:
                    2e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:33:7A:CF:B6:CD:40:63:B4:39:7B:9E:08:33:D9:04:00:5D:58:2A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/21900da0-a9eb-4d98-bf72-d415b2bfa7e0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/21900da0-a9eb-4d98-bf72-d415b2bfa7e0/7301727ac2c04bf0b74625766b1a1dc6f6fa9b2f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.252.0/22
                  168.228.248.0/22
                  170.247.136.0/22
                  200.12.28.0/22
                  200.126.32.0/20
                IPv6:
                  2803:1340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264780

    Signature Algorithm: sha256WithRSAEncryption
         67:89:bd:dc:ad:7f:90:39:a6:32:78:35:e4:ae:61:8f:38:f7:
         29:89:87:03:31:e1:b5:9e:f7:45:fe:3d:06:dd:0f:ff:09:d6:
         8f:4a:9b:2b:37:fd:da:fe:3d:8a:8d:0b:90:b4:86:7d:0f:41:
         21:e9:3c:77:f5:83:99:5d:c3:94:09:8d:aa:04:e9:b4:33:af:
         e6:c9:3f:80:ea:a8:dd:b2:8d:ea:70:07:13:51:3c:5f:87:a7:
         89:e4:ab:9e:d5:5b:c0:82:20:89:79:40:8e:2b:61:2c:36:ec:
         2a:04:03:65:96:c1:cc:2d:11:81:4c:c4:fc:b6:3f:38:11:56:
         07:c6:7c:ee:57:b5:8d:61:dc:03:b3:a2:ae:ce:aa:f8:c7:09:
         8d:3d:18:d5:56:c8:c2:13:ff:0f:d6:89:a8:07:a6:93:59:13:
         98:41:75:79:a0:38:74:09:ce:52:95:de:fb:05:f2:ba:55:e9:
         3b:36:f3:80:5b:29:8e:b8:1a:d7:87:7c:87:55:82:24:b4:a0:
         dd:e2:e1:47:6b:07:e2:9a:13:c7:9c:e5:3d:75:4f:02:c2:ca:
         39:64:31:1e:03:11:e1:33:87:b1:da:12:e8:dd:08:aa:39:21:
         1e:3f:c9:b9:8a:86:a3:f3:d7:c1:7b:28:a4:d5:f7:70:60:3d:
         51:9a:1f:2f
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgIEAMoSJjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0N1oXDTI0MDIyNTA2MDAw
MFowMzExMC8GA1UEAxMoNzMwMTcyN2FjMmMwNGJmMGI3NDYyNTc2NmIxYTFkYzZm
NmZhOWIyZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALnhmj//tSR5
vneuzwvqVoq12iE8ND91kbnhejw/rZuH4x4iPwjFzEAavC3f5wuSPyEcrgOgavGv
En1SOh7VGr8xk3NlpQskrCOZnRcwHpGzb2dC/VQgdTXqwuEq6zM7sX2L8Ta0pU0y
fB8lXnamwSK8kpWTGdTyKExriaSvrEugEY2GHj7I/6Ztd5wE0VykkG1YrGjhckEc
GjrmRenNPlhwMtbrurD/nl8N330FRv7lPPO6ZdqFoIrRfnf04tALfKlUkXmIUXDU
WLPHIU1hh+ODWD43pFMCX3OmuDMe+Y9hO6mXZZPR+GFgSDe8wzx2HwDXL96DwJ5d
/tXTeFXELrECAwEAAaOCAyEwggMdMB0GA1UdDgQWBBS4M3rPts1AY7Q5e54IM9kE
AF1YKjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yMTkwMGRhMC1hOWVi
LTRkOTgtYmY3Mi1kNDE1YjJiZmE3ZTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjE5MDBkYTAtYTllYi00
ZDk4LWJmNzItZDQxNWIyYmZhN2UwLzczMDE3MjdhYzJjMDRiZjBiNzQ2MjU3NjZi
MWExZGM2ZjZmYTliMmYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAqDu/AMEAqjk+AMEAqr3iAMEAsgM
HAMEBMh+IDANBAIAAjAHAwUAKAMTQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
CkwwDQYJKoZIhvcNAQELBQADggEBAGeJvdytf5A5pjJ4NeSuYY849ymJhwMx4bWe
90X+PQbdD/8J1o9Kmys3/dr+PYqNC5C0hn0PQSHpPHf1g5ldw5QJjaoE6bQzr+bJ
P4DqqN2yjepwBxNRPF+Hp4nkq57VW8CCIIl5QI4rYSw27CoEA2WWwcwtEYFMxPy2
PzgRVgfGfO5XtY1h3AOzoq7OqvjHCY09GNVWyMIT/w/WiagHppNZE5hBdXmgOHQJ
zlKV3vsF8rpV6Ts284BbKY64GteHfIdVgiS0oN3i4UdrB+KaE8ec5T11TwLCyjlk
MR4DEeEzh7HaEujdCKo5IR4/ybmKhqPz18F7KKTV93BgPVGaHy8=
-----END CERTIFICATE-----