Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/915f68a6528ca709ff174bd5596ac8710fb56d18.cer
File:                     915f68a6528ca709ff174bd5596ac8710fb56d18.cer (raw, json)
Hash identifier:          x1tRIYadNxhhaup0SqvXvCLVn650Z7VIWYie71oT+OA=
Subject key identifier:   D3:3B:AA:08:ED:C7:29:48:1D:C7:F5:BF:E6:28:5D:A3:85:70:FA:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8D492
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/915f68a6528ca709ff174bd5596ac8710fb56d18.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:33 +0000
Certificate not after:    Fri 07 Jun 2024 18:25:47 +0000
Subordinate resources:    AS: 263813
                          IP: 138.219.8.0/22
                          IP: 2803:b240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15258770 (0xe8d492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:33 2017 GMT
            Not After : Jun  7 18:25:47 2024 GMT
        Subject: CN=915f68a6528ca709ff174bd5596ac8710fb56d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cb:cd:d2:63:0b:94:42:f3:9a:db:67:06:0a:
                    d3:b2:3e:3e:bd:c8:7a:59:c6:f3:4b:3e:c7:cf:73:
                    2b:a3:6d:86:49:f7:dc:59:ba:da:57:c4:15:3b:80:
                    32:b5:7c:61:dd:69:a2:db:5a:ca:a1:3b:88:b7:45:
                    52:a4:1d:a0:80:73:b3:8a:fe:79:89:c3:dd:fc:2b:
                    69:3d:f8:7f:b6:1c:50:d8:5d:df:e1:3b:70:ff:00:
                    e9:34:ae:63:0b:71:13:e4:c3:59:25:53:df:c6:60:
                    c3:ad:be:d0:e8:11:a3:10:91:09:af:1b:8a:fa:42:
                    17:58:98:03:c0:7e:21:be:bb:5e:82:e9:90:ae:b2:
                    ce:30:5e:d3:9f:fa:2c:c6:d0:3b:76:36:71:63:cd:
                    a4:e2:26:0d:48:50:4c:55:9b:a0:e8:80:ee:62:29:
                    f5:02:e0:e3:63:f4:53:37:12:06:d5:c3:c9:ec:16:
                    a0:98:c7:1b:7e:c7:73:8d:2e:5c:00:d4:88:95:28:
                    23:c1:2b:13:d6:fe:23:d1:6b:54:56:79:2b:52:11:
                    f7:6e:42:b7:18:cd:4d:d4:2c:e8:35:ff:92:a3:82:
                    88:07:37:5f:bb:72:11:64:23:d8:e7:fd:32:f3:15:
                    7e:14:98:b7:83:a8:ba:e4:ef:8a:5a:d3:f7:3d:60:
                    82:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3B:AA:08:ED:C7:29:48:1D:C7:F5:BF:E6:28:5D:A3:85:70:FA:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/915f68a6528ca709ff174bd5596ac8710fb56d18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.8.0/22
                IPv6:
                  2803:b240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263813

    Signature Algorithm: sha256WithRSAEncryption
         4d:46:b7:be:45:2e:04:b5:fa:76:d3:70:98:33:f7:2d:39:7b:
         ea:2d:04:8e:3e:99:01:38:9f:50:cb:38:4b:14:e3:76:79:30:
         d6:cb:5d:92:e5:91:fa:0e:f9:4c:dd:72:d2:b9:5e:00:ce:13:
         dd:16:7a:b2:e7:cb:29:95:17:87:30:06:b1:1d:ee:4d:c7:70:
         29:32:8b:d0:73:30:53:db:1c:31:2b:82:76:9a:e0:4d:ab:5e:
         3d:8d:61:83:59:39:52:c6:db:19:46:4f:9e:0b:c6:1b:bf:69:
         6f:69:75:9b:52:be:46:87:16:f1:53:e8:df:22:64:76:49:17:
         df:5e:c0:1c:9c:a1:e0:da:4c:92:27:27:ea:dd:9a:e1:9b:15:
         7a:2b:88:04:09:54:e8:bc:1d:6e:6a:07:2d:55:6b:ed:76:7f:
         2e:d8:e3:4c:7a:a9:64:d3:2a:5b:a8:05:e4:82:e9:f7:34:e6:
         3e:c4:7d:53:07:1f:c8:ec:61:c9:85:b5:f1:88:e0:ae:46:2a:
         79:ec:0f:6b:8e:ef:10:e4:5f:42:c0:cf:60:02:48:44:94:e6:
         20:ca:f0:38:ce:8b:50:8d:64:e4:86:10:6e:ec:e9:9f:fe:f8:
         c5:35:38:59:dd:8c:05:a1:37:ac:9c:d2:c5:d5:b3:fc:db:74:
         38:45:08:49
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOjUkjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzczM1oXDTI0MDYwNzE4MjU0
N1owMzExMC8GA1UEAxMoOTE1ZjY4YTY1MjhjYTcwOWZmMTc0YmQ1NTk2YWM4NzEw
ZmI1NmQxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI7LzdJjC5RC
85rbZwYK07I+Pr3IelnG80s+x89zK6Nthkn33Fm62lfEFTuAMrV8Yd1pottayqE7
iLdFUqQdoIBzs4r+eYnD3fwraT34f7YcUNhd3+E7cP8A6TSuYwtxE+TDWSVT38Zg
w62+0OgRoxCRCa8bivpCF1iYA8B+Ib67XoLpkK6yzjBe05/6LMbQO3Y2cWPNpOIm
DUhQTFWboOiA7mIp9QLg42P0UzcSBtXDyewWoJjHG37Hc40uXADUiJUoI8ErE9b+
I9FrVFZ5K1IR925CtxjNTdQs6DX/kqOCiAc3X7tyEWQj2Of9MvMVfhSYt4OouuTv
ilrT9z1ggmUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTTO6oI7ccpSB3H9b/mKF2j
hXD6kjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mY2ZlNDRiMy05ZTBk
LTRmMDItYjM5OS0wNDk0YWU5YjRmMzkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZmNmZTQ0YjMtOWUwZC00
ZjAyLWIzOTktMDQ5NGFlOWI0ZjM5LzkxNWY2OGE2NTI4Y2E3MDlmZjE3NGJkNTU5
NmFjODcxMGZiNTZkMTgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAorbCDANBAIAAjAHAwUAKAOyQDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBoUwDQYJKoZIhvcNAQELBQADggEBAE1G
t75FLgS1+nbTcJgz9y05e+otBI4+mQE4n1DLOEsU43Z5MNbLXZLlkfoO+UzdctK5
XgDOE90WerLnyymVF4cwBrEd7k3HcCkyi9BzMFPbHDErgnaa4E2rXj2NYYNZOVLG
2xlGT54Lxhu/aW9pdZtSvkaHFvFT6N8iZHZJF99ewBycoeDaTJInJ+rdmuGbFXor
iAQJVOi8HW5qBy1Va+12fy7Y40x6qWTTKluoBeSC6fc05j7EfVMHH8jsYcmFtfGI
4K5GKnnsD2uO7xDkX0LAz2ACSESU5iDK8DjOi1CNZOSGEG7s6Z/++MU1OFndjAWh
N6yc0sXVs/zbdDhFCEk=
-----END CERTIFICATE-----