Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d44f0918975636ffb95bc864d2ead8021849e5.cer
File:                     88d44f0918975636ffb95bc864d2ead8021849e5.cer (raw, json)
Hash identifier:          vai2SzM8pRNHc2gw629cV8jj3qzvxQaN21Vj8i4tjbE=
Subject key identifier:   60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D9AB12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/88d44f0918975636ffb95bc864d2ead8021849e5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:04 +0000
Certificate not after:    Tue 16 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 262202
                          IP: 170.246.148.0/22
                          IP: 186.96.80.0/20
                          IP: 190.57.48.0/21
                          IP: 200.119.184.0/21
                          IP: 2803:b800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14265106 (0xd9ab12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:04 2017 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=88d44f0918975636ffb95bc864d2ead8021849e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:95:f6:bf:c8:67:45:ca:3e:6e:47:6e:7d:
                    1e:8b:da:bb:52:73:e2:ba:5a:4a:a8:08:0e:42:63:
                    ab:69:7d:f4:a9:96:11:29:48:2a:59:ea:13:ff:6f:
                    ef:ac:13:b7:a1:a2:d6:c1:ec:4d:df:d7:5e:ba:f8:
                    1c:95:6a:48:16:08:6b:80:22:24:3c:9e:16:6e:5a:
                    96:4f:bb:74:e7:17:e3:c0:f1:17:5b:ca:b7:5e:37:
                    3c:36:a5:d2:12:ab:99:27:9d:bb:af:3b:02:f7:dd:
                    91:5c:3d:a4:c0:8b:d9:0f:ea:01:04:da:5e:a2:68:
                    c1:81:b5:1b:b5:1e:6d:f6:e4:49:17:bf:bf:4f:23:
                    e1:1a:90:b4:a5:57:51:14:dd:31:15:08:59:53:77:
                    f2:99:e3:a7:ea:fe:36:39:79:4d:f1:2d:d1:03:be:
                    0e:13:29:f0:e1:ee:b8:da:af:b9:f0:1d:97:67:c2:
                    6b:62:03:f0:2c:2e:38:a6:4b:91:82:b0:3e:72:12:
                    82:a5:36:e3:2f:de:76:59:4e:67:60:18:8c:2e:33:
                    34:25:ba:09:86:4c:84:45:bf:0d:ef:32:a8:8a:9b:
                    6f:d2:f6:a4:72:87:93:12:63:e7:86:b2:94:78:60:
                    6f:a8:92:7b:1c:3e:95:06:ef:6c:ef:56:bf:39:66:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/88d44f0918975636ffb95bc864d2ead8021849e5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.148.0/22
                  186.96.80.0/20
                  190.57.48.0/21
                  200.119.184.0/21
                IPv6:
                  2803:b800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262202

    Signature Algorithm: sha256WithRSAEncryption
         1c:dd:0e:2d:4c:1a:fc:82:65:21:d3:57:7b:59:9a:76:8f:75:
         54:f1:15:f5:2b:a1:0d:a0:ce:40:89:75:f1:2a:41:b5:73:41:
         ac:e6:d6:90:2e:89:7f:19:fa:68:19:d9:e0:07:55:b3:31:1d:
         d2:49:f8:73:54:98:1c:62:9e:a8:55:03:76:13:81:03:9b:91:
         f0:9e:de:22:14:3b:7d:3c:65:a5:ad:88:49:b7:2e:ed:70:48:
         1d:ec:2a:4a:f5:2c:d7:64:0a:e4:97:e5:bd:4a:8e:44:d4:23:
         3c:ba:f1:78:95:7d:4c:90:09:e9:3f:d6:95:f9:2a:f8:72:e0:
         f1:94:6b:bc:14:fd:c3:dc:74:d1:90:71:fe:53:ed:7d:28:e9:
         0b:db:03:f8:bb:fb:65:60:4d:60:18:9d:8e:8f:32:85:ab:43:
         aa:76:4e:3c:c6:d0:ae:01:39:9c:b9:85:1a:9a:11:d2:6b:5f:
         72:df:fc:1f:0b:62:16:78:ff:7f:9f:c5:c3:f9:51:66:d8:20:
         a9:05:44:6f:67:56:37:9a:97:88:64:85:65:e1:72:80:c7:6f:
         81:68:a2:f0:0e:66:f0:88:82:73:e8:2b:20:bd:0e:ad:0f:1c:
         03:c6:06:6f:e2:e3:c7:9a:96:52:fd:9a:95:22:d8:49:54:7b:
         0b:d7:09:65
-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgIEANmrEjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcwNFoXDTI0MDExNjA1MDAw
MFowMzExMC8GA1UEAxMoODhkNDRmMDkxODk3NTYzNmZmYjk1YmM4NjRkMmVhZDgw
MjE4NDllNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJLXlfa/yGdF
yj5uR259Hovau1Jz4rpaSqgIDkJjq2l99KmWESlIKlnqE/9v76wTt6Gi1sHsTd/X
Xrr4HJVqSBYIa4AiJDyeFm5alk+7dOcX48DxF1vKt143PDal0hKrmSedu687Avfd
kVw9pMCL2Q/qAQTaXqJowYG1G7UebfbkSRe/v08j4RqQtKVXURTdMRUIWVN38pnj
p+r+Njl5TfEt0QO+DhMp8OHuuNqvufAdl2fCa2ID8CwuOKZLkYKwPnISgqU24y/e
dllOZ2AYjC4zNCW6CYZMhEW/De8yqIqbb9L2pHKHkxJj54aylHhgb6iSexw+lQbv
bO9WvzlmcYcCAwEAAaOCAxswggMXMB0GA1UdDgQWBBRgXZH8BrA+TGDVOQ1eCOAq
ZMKoqjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mYmQyZTEwYi01ZjM0
LTQ4ZGEtOTM1Ni04MGM4ODA1OGUwMmMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZmJkMmUxMGItNWYzNC00
OGRhLTkzNTYtODBjODgwNThlMDJjLzg4ZDQ0ZjA5MTg5NzU2MzZmZmI5NWJjODY0
ZDJlYWQ4MDIxODQ5ZTUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAqr2lAMEBLpgUAMEA745MAMEA8h3
uDANBAIAAjAHAwUAKAO4ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEADowDQYJ
KoZIhvcNAQELBQADggEBABzdDi1MGvyCZSHTV3tZmnaPdVTxFfUroQ2gzkCJdfEq
QbVzQazm1pAuiX8Z+mgZ2eAHVbMxHdJJ+HNUmBxinqhVA3YTgQObkfCe3iIUO308
ZaWtiEm3Lu1wSB3sKkr1LNdkCuSX5b1KjkTUIzy68XiVfUyQCek/1pX5Kvhy4PGU
a7wU/cPcdNGQcf5T7X0o6QvbA/i7+2VgTWAYnY6PMoWrQ6p2TjzG0K4BOZy5hRqa
EdJrX3Lf/B8LYhZ4/3+fxcP5UWbYIKkFRG9nVjeal4hkhWXhcoDHb4FoovAOZvCI
gnPoKyC9Dq0PHAPGBm/i48eallL9mpUi2ElUewvXCWU=
-----END CERTIFICATE-----