Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b04d3acf5ada43465249ebebd2bc06630ef9fb9.cer
File:                     8b04d3acf5ada43465249ebebd2bc06630ef9fb9.cer (raw, json)
Hash identifier:          8Hfhih9RL2SQ7QWfSNww/uJJ0B0wFJL4qO27WLFus7Y=
Subject key identifier:   29:D0:6D:B5:60:7B:0F:51:CA:9F:50:1C:C7:A2:98:E5:EE:BB:92:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB2353
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b23597be-5373-4d66-a48a-fe3ddeccfe90/8b04d3acf5ada43465249ebebd2bc06630ef9fb9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b23597be-5373-4d66-a48a-fe3ddeccfe90/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Dec 2018 15:20:50 +0000
Certificate not after:    Wed 30 Oct 2024 04:00:00 +0000
Subordinate resources:    AS: 266900
                          IP: 179.61.96.0/20
                          IP: 2803:3c80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16458579 (0xfb2353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 28 15:20:50 2018 GMT
            Not After : Oct 30 04:00:00 2024 GMT
        Subject: CN=8b04d3acf5ada43465249ebebd2bc06630ef9fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c0:cf:0e:02:9b:c6:1a:7a:e9:58:a1:1e:55:
                    2c:4c:16:9a:37:1a:08:40:58:47:0b:fe:3d:2b:d0:
                    fd:c6:f4:1a:3b:ce:a1:22:f7:07:c8:42:5c:6c:63:
                    68:e3:a5:d5:4e:76:34:8e:38:08:25:ae:26:19:c6:
                    08:9b:cf:18:ad:f8:f4:72:70:44:a2:9c:ea:33:94:
                    5b:3f:eb:21:5e:15:7b:59:03:52:81:d6:ad:9c:79:
                    2c:97:ef:d9:a0:35:b7:f8:63:9d:4d:0a:c3:2a:7a:
                    be:85:90:af:74:a6:57:9d:28:ed:50:dd:73:69:69:
                    a0:43:67:fa:bc:80:fb:9e:7a:e5:f4:11:40:67:c9:
                    d0:30:df:cc:d0:d5:cf:7b:d6:a8:f6:29:82:7d:cf:
                    e3:6f:e0:cb:f2:bd:10:9b:35:e2:45:ad:38:63:72:
                    13:da:bb:22:17:f9:b5:fa:dd:d9:be:bd:78:7a:1d:
                    a2:d9:ec:58:5b:40:3a:4d:75:99:da:bc:53:16:b8:
                    c6:12:6c:b7:81:71:2c:4e:28:85:d4:8b:e0:2e:57:
                    7b:d2:19:87:df:06:ee:c5:61:2a:a0:1f:8b:c6:0f:
                    b5:1e:3e:90:5f:ad:f3:12:58:69:96:a5:64:fd:01:
                    82:71:55:1e:db:c8:cd:fc:55:cf:6d:e8:68:39:11:
                    3e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D0:6D:B5:60:7B:0F:51:CA:9F:50:1C:C7:A2:98:E5:EE:BB:92:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b23597be-5373-4d66-a48a-fe3ddeccfe90/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b23597be-5373-4d66-a48a-fe3ddeccfe90/8b04d3acf5ada43465249ebebd2bc06630ef9fb9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.96.0/20
                IPv6:
                  2803:3c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266900

    Signature Algorithm: sha256WithRSAEncryption
         0e:45:c8:c5:9c:7d:65:8c:54:3a:97:7d:1b:54:16:ad:5c:ca:
         43:09:4c:ed:b0:37:0c:33:9c:5f:74:5f:59:5b:d0:52:c6:03:
         a7:75:cc:31:a8:cc:12:88:38:e6:d7:90:74:f1:a7:b1:5c:ca:
         31:c0:9d:72:cc:30:ee:a4:86:f1:8d:08:97:f5:42:d3:39:d8:
         4e:b1:95:58:2f:bf:f8:1d:c1:c9:36:5f:13:5d:6c:9f:84:14:
         b1:63:b5:fb:42:5f:87:1e:c0:a9:ca:04:b0:28:ce:2d:28:32:
         f4:0b:ff:fc:2d:f7:af:9d:48:47:50:6b:a2:05:99:af:75:b9:
         7d:c3:8f:1f:57:d7:d6:12:20:ac:01:4a:4a:64:d7:1b:c7:1b:
         89:cf:98:68:22:a7:7d:f7:48:91:66:b0:d3:c3:a8:c0:e4:90:
         67:fc:66:bc:c5:c8:84:42:a8:6c:87:c3:73:60:7f:ff:18:98:
         a8:11:a5:2b:ce:72:fb:fa:7d:6b:f1:fe:0c:3b:ef:09:5a:6d:
         d5:42:d7:54:6e:ef:32:51:b7:b5:62:6a:81:01:36:75:45:53:
         4f:81:a3:1a:49:c0:23:c9:56:4e:71:e7:40:b9:3b:2b:c2:13:
         aa:6e:77:24:b4:38:f5:56:27:1b:a8:ee:b7:84:c8:b1:27:23:
         e0:68:ef:03
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPsjUzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MTIyODE1MjA1MFoXDTI0MTAzMDA0MDAw
MFowMzExMC8GA1UEAxMoOGIwNGQzYWNmNWFkYTQzNDY1MjQ5ZWJlYmQyYmMwNjYz
MGVmOWZiOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI/Azw4Cm8Ya
eulYoR5VLEwWmjcaCEBYRwv+PSvQ/cb0GjvOoSL3B8hCXGxjaOOl1U52NI44CCWu
JhnGCJvPGK349HJwRKKc6jOUWz/rIV4Ve1kDUoHWrZx5LJfv2aA1t/hjnU0Kwyp6
voWQr3SmV50o7VDdc2lpoENn+ryA+5565fQRQGfJ0DDfzNDVz3vWqPYpgn3P42/g
y/K9EJs14kWtOGNyE9q7Ihf5tfrd2b69eHodotnsWFtAOk11mdq8Uxa4xhJst4Fx
LE4ohdSL4C5Xe9IZh98G7sVhKqAfi8YPtR4+kF+t8xJYaZalZP0BgnFVHtvIzfxV
z23oaDkRPskCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQp0G21YHsPUcqfUBzHopjl
7ruSDjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iMjM1OTdiZS01Mzcz
LTRkNjYtYTQ4YS1mZTNkZGVjY2ZlOTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjIzNTk3YmUtNTM3My00
ZDY2LWE0OGEtZmUzZGRlY2NmZTkwLzhiMDRkM2FjZjVhZGE0MzQ2NTI0OWViZWJk
MmJjMDY2MzBlZjlmYjkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBLM9YDANBAIAAjAHAwUAKAM8gDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEpQwDQYJKoZIhvcNAQELBQADggEBAA5F
yMWcfWWMVDqXfRtUFq1cykMJTO2wNwwznF90X1lb0FLGA6d1zDGozBKIOObXkHTx
p7FcyjHAnXLMMO6khvGNCJf1QtM52E6xlVgvv/gdwck2XxNdbJ+EFLFjtftCX4ce
wKnKBLAozi0oMvQL//wt96+dSEdQa6IFma91uX3Djx9X19YSIKwBSkpk1xvHG4nP
mGgip333SJFmsNPDqMDkkGf8ZrzFyIRCqGyHw3Ngf/8YmKgRpSvOcvv6fWvx/gw7
7wlabdVC11Ru7zJRt7ViaoEBNnVFU0+BoxpJwCPJVk5x50C5OyvCE6pudyS0OPVW
Jxuo7reEyLEnI+Bo7wM=
-----END CERTIFICATE-----