Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82225174b3988d5920cd5a642f74ca96004f3b86.cer
File:                     82225174b3988d5920cd5a642f74ca96004f3b86.cer (raw, json)
Hash identifier:          RVcTSqVmDUbM13gSjoBNbhSSeSsgFacQmux6LM+N/FU=
Subject key identifier:   A6:B6:0E:25:B5:F3:51:46:12:87:2E:65:A8:35:52:98:B3:67:42:FF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D9E9B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/82225174b3988d5920cd5a642f74ca96004f3b86.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:17 +0000
Certificate not after:    Fri 19 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 26505
                          IP: 186.190.240.0/20
                          IP: 200.124.128.0/19
                          IP: 2800:9e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14281143 (0xd9e9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:17 2017 GMT
            Not After : Jan 19 05:00:00 2024 GMT
        Subject: CN=82225174b3988d5920cd5a642f74ca96004f3b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:fc:50:86:16:9b:6f:de:49:72:47:52:b0:
                    d5:e7:5d:3c:c6:47:d2:fd:85:84:76:7b:3a:a7:1a:
                    fc:01:58:9f:98:f2:9e:fa:1d:23:83:6e:57:14:bf:
                    3e:5f:4b:a6:18:dc:a6:a5:25:af:a4:de:8a:a6:27:
                    40:9e:33:4b:2b:fa:ba:b1:2b:c2:b4:bf:a0:9e:94:
                    76:b2:96:1a:60:af:81:73:2b:08:9d:60:f6:6a:21:
                    a9:54:ef:16:b9:de:76:b2:66:16:fa:d8:11:eb:20:
                    25:2c:bb:d9:38:bf:f7:92:6c:f1:bd:e3:21:07:2a:
                    14:35:55:5e:70:09:cc:78:5a:30:a8:4e:3c:4a:b3:
                    35:23:85:c8:ec:17:3b:db:c6:3d:12:4e:93:c3:f8:
                    f4:db:68:ea:0b:9a:03:b7:e8:77:41:18:87:de:31:
                    87:06:2c:e9:68:6e:9a:26:79:2a:3a:88:41:b2:62:
                    e6:30:7d:51:dd:ae:30:c9:51:93:26:bf:4b:d6:c3:
                    73:a5:d1:b6:94:7e:02:eb:57:2e:a9:c2:e5:6b:33:
                    07:7f:c4:a1:76:38:62:9e:0b:c8:f2:7e:33:14:38:
                    61:7f:9f:78:79:a7:6a:fa:a0:53:e3:77:e9:ed:65:
                    88:1e:ed:46:7b:f8:65:bb:25:83:dc:32:a5:d8:53:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B6:0E:25:B5:F3:51:46:12:87:2E:65:A8:35:52:98:B3:67:42:FF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/82225174b3988d5920cd5a642f74ca96004f3b86.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.240.0/20
                  200.124.128.0/19
                IPv6:
                  2800:9e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26505

    Signature Algorithm: sha256WithRSAEncryption
         ad:94:33:20:b7:03:f1:8f:1c:e0:c1:91:34:72:3e:bd:24:97:
         93:78:b8:61:93:e6:aa:5d:8f:9e:54:44:9c:eb:28:32:e3:4e:
         f6:6a:ac:7b:cf:20:39:5f:26:13:63:96:b3:e4:75:e0:4a:7d:
         63:ce:49:f8:13:b7:1c:3b:54:d0:e2:a6:8e:ac:98:af:2f:e2:
         26:04:b5:c3:89:b8:27:61:67:15:7e:8c:27:50:01:ff:8c:14:
         f6:64:7a:4d:ce:6c:ce:d5:f7:f5:55:ef:bc:0f:54:34:88:d0:
         80:aa:ce:af:dc:0c:c0:e0:64:db:23:31:80:fe:18:51:38:1c:
         6b:db:70:ce:aa:d9:73:fd:1c:36:f6:10:93:56:f5:17:08:d5:
         9e:a5:d1:2a:49:cb:9b:58:cb:7c:99:c3:d3:07:63:ca:69:1d:
         91:1f:55:2f:b8:1b:18:96:c4:2e:60:fd:dc:b1:f7:54:df:02:
         73:ef:3b:94:e1:da:bc:69:26:48:2e:c7:88:fa:b9:db:f5:52:
         0a:9d:d7:76:ed:ea:1a:1a:c3:66:2c:32:49:f5:7c:ff:42:1d:
         73:5d:f4:0a:73:15:51:0e:4e:03:98:df:c0:2e:88:5f:97:a8:
         d4:e4:25:f6:a3:11:01:e3:1a:93:83:69:32:bf:a0:a3:39:15:
         87:f3:93:ca
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIEANnptzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYxN1oXDTI0MDExOTA1MDAw
MFowMzExMC8GA1UEAxMoODIyMjUxNzRiMzk4OGQ1OTIwY2Q1YTY0MmY3NGNhOTYw
MDRmM2I4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJkp/FCGFptv
3klyR1Kw1eddPMZH0v2FhHZ7Oqca/AFYn5jynvodI4NuVxS/Pl9LphjcpqUlr6Te
iqYnQJ4zSyv6urErwrS/oJ6UdrKWGmCvgXMrCJ1g9mohqVTvFrnedrJmFvrYEesg
JSy72Ti/95Js8b3jIQcqFDVVXnAJzHhaMKhOPEqzNSOFyOwXO9vGPRJOk8P49Nto
6guaA7fod0EYh94xhwYs6WhumiZ5KjqIQbJi5jB9Ud2uMMlRkya/S9bDc6XRtpR+
AutXLqnC5WszB3/EoXY4Yp4LyPJ+MxQ4YX+feHmnavqgU+N36e1liB7tRnv4Zbsl
g9wypdhTkBUCAwEAAaOCAw4wggMKMB0GA1UdDgQWBBSmtg4ltfNRRhKHLmWoNVKY
s2dC/zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82MjVmMDdjYy0yNzVk
LTRkMjktYWZkOC0xMjEyZWZjZmEyMTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjI1ZjA3Y2MtMjc1ZC00
ZDI5LWFmZDgtMTIxMmVmY2ZhMjE2LzgyMjI1MTc0YjM5ODhkNTkyMGNkNWE2NDJm
NzRjYTk2MDA0ZjNiODYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBLq+8AMEBch8gDANBAIAAjAHAwUA
KAAJ4DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJniTANBgkqhkiG9w0BAQsFAAOC
AQEArZQzILcD8Y8c4MGRNHI+vSSXk3i4YZPmql2PnlREnOsoMuNO9mqse88gOV8m
E2OWs+R14Ep9Y85J+BO3HDtU0OKmjqyYry/iJgS1w4m4J2FnFX6MJ1AB/4wU9mR6
Tc5sztX39VXvvA9UNIjQgKrOr9wMwOBk2yMxgP4YUTgca9twzqrZc/0cNvYQk1b1
FwjVnqXRKknLm1jLfJnD0wdjymkdkR9VL7gbGJbELmD93LH3VN8Cc+87lOHavGkm
SC7HiPq52/VSCp3Xdu3qGhrDZiwySfV8/0Idc130CnMVUQ5OA5jfwC6IX5eo1OQl
9qMRAeMak4NpMr+gozkVh/OTyg==
-----END CERTIFICATE-----