Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/928723b4ebd5246c0aa94baeaa44572b7b3662b3.cer
File:                     928723b4ebd5246c0aa94baeaa44572b7b3662b3.cer (raw, json)
Hash identifier:          /M7TwI7jApCpx8HVuRUMVAlAW74J7ph0s5XE1uWIuIw=
Subject key identifier:   42:E0:8F:E1:1A:DA:5B:56:FE:46:4E:5E:12:A9:21:A0:6E:BD:86:A4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3039B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/928723b4ebd5246c0aa94baeaa44572b7b3662b3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:40 +0000
Certificate not after:    Wed 01 May 2024 15:00:00 +0000
Subordinate resources:    AS: 5692
                          IP: 163.10.0.0/16
                          IP: 2800:340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14877595 (0xe3039b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:40 2017 GMT
            Not After : May  1 15:00:00 2024 GMT
        Subject: CN=928723b4ebd5246c0aa94baeaa44572b7b3662b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:5c:b9:10:37:30:ba:c4:9f:dc:ae:85:11:
                    4c:ba:82:26:4f:26:d3:f3:09:3d:00:02:29:7d:01:
                    ff:b0:b2:7a:7c:e6:10:7f:d4:e6:60:42:1f:69:28:
                    d1:30:62:d8:50:90:58:ba:ec:f1:a8:17:72:79:81:
                    9b:b3:ea:44:7c:cd:2f:ec:b4:15:f3:3e:da:f4:a2:
                    13:ec:aa:23:5f:b2:42:dc:2b:bd:48:e9:44:47:d8:
                    64:71:06:fa:eb:7e:68:04:a9:1c:c8:10:18:cf:cd:
                    6b:55:4a:17:44:ed:aa:1e:82:62:df:38:4e:1f:02:
                    f0:26:5a:3d:cd:5e:ea:dc:c1:ed:90:fa:76:f6:0a:
                    3b:26:9a:ce:c1:74:1e:ca:45:6b:be:67:56:36:74:
                    32:22:9d:ef:8e:b9:8d:7c:82:a9:96:1d:f0:17:f3:
                    8d:38:93:89:54:02:f3:03:1a:82:3d:ef:ac:86:86:
                    2d:8e:34:ee:91:e6:68:a7:3d:24:3e:1e:c3:3f:a9:
                    61:dc:81:fb:62:4e:55:e4:17:fc:53:a1:3b:b8:f2:
                    c1:98:a9:aa:bb:95:9d:36:6c:57:1a:db:e7:ff:1f:
                    bb:e4:58:30:a1:f2:65:14:3c:e7:d6:b3:14:b1:eb:
                    1c:1e:6f:1c:75:0a:53:b6:03:5b:a0:d4:3b:4e:c1:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E0:8F:E1:1A:DA:5B:56:FE:46:4E:5E:12:A9:21:A0:6E:BD:86:A4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/928723b4ebd5246c0aa94baeaa44572b7b3662b3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.10.0.0/16
                IPv6:
                  2800:340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5692

    Signature Algorithm: sha256WithRSAEncryption
         7f:45:49:f0:3f:4f:53:1b:9e:97:68:60:11:3d:ce:c9:a7:65:
         10:09:46:f6:a8:cf:8f:d9:7a:74:20:94:f3:9c:69:b2:e4:eb:
         13:c9:f3:7f:fe:ff:da:1d:7f:f4:2e:3f:f0:2b:c3:f4:53:b5:
         56:d7:e7:c1:a3:c2:70:e2:a7:d0:85:fb:36:66:e1:da:74:e5:
         ed:73:1c:c7:25:12:5d:6f:14:98:e9:1a:c6:e9:2f:46:61:eb:
         56:7f:b3:a5:2d:2f:2f:aa:4c:1d:97:94:e6:dd:f8:b9:16:56:
         b7:d2:03:17:c1:a3:7e:bb:80:b4:70:2e:44:8e:07:5d:eb:db:
         a3:c8:0b:6f:df:96:62:35:7e:2f:d0:36:27:23:09:14:6a:cf:
         8e:3a:8c:0f:e0:7a:ef:29:f6:68:b7:7c:ad:d7:69:dc:69:d0:
         53:fa:da:b6:33:fe:41:bf:d3:9c:e2:3a:f2:58:95:ed:53:af:
         fa:4c:8d:8b:7c:43:27:6e:99:e9:ed:e2:ba:d4:80:71:ec:40:
         01:dd:a8:31:12:23:f8:bb:64:9a:10:56:4d:fb:8f:5e:a6:b9:
         c0:62:94:e4:35:57:9d:24:e4:33:0a:48:ad:d4:f3:ae:1a:29:
         86:c7:39:df:91:d6:2c:ff:f5:08:47:90:fa:b4:d1:0f:53:4f:
         ae:93:2a:41
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIEAOMDmzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0MFoXDTI0MDUwMTE1MDAw
MFowMzExMC8GA1UEAxMoOTI4NzIzYjRlYmQ1MjQ2YzBhYTk0YmFlYWE0NDU3MmI3
YjM2NjJiMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKLuXLkQNzC6
xJ/croURTLqCJk8m0/MJPQACKX0B/7CyenzmEH/U5mBCH2ko0TBi2FCQWLrs8agX
cnmBm7PqRHzNL+y0FfM+2vSiE+yqI1+yQtwrvUjpREfYZHEG+ut+aASpHMgQGM/N
a1VKF0Ttqh6CYt84Th8C8CZaPc1e6tzB7ZD6dvYKOyaazsF0HspFa75nVjZ0MiKd
7465jXyCqZYd8BfzjTiTiVQC8wMagj3vrIaGLY407pHmaKc9JD4ewz+pYdyB+2JO
VeQX/FOhO7jywZipqruVnTZsVxrb5/8fu+RYMKHyZRQ859azFLHrHB5vHHUKU7YD
W6DUO07BsGcCAwEAAaOCAwcwggMDMB0GA1UdDgQWBBRC4I/hGtpbVv5GTl4SqSGg
br2GpDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lOTc3YWZjMS0xNGMz
LTRjZTktYTY5Yi01Yjg4ZmMzNTgzOGEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTk3N2FmYzEtMTRjMy00
Y2U5LWE2OWItNWI4OGZjMzU4MzhhLzkyODcyM2I0ZWJkNTI0NmMwYWE5NGJhZWFh
NDQ1NzJiN2IzNjYyYjMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwCwQCAAEwBQMDAKMKMA0EAgACMAcDBQAoAANAMBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAhY8MA0GCSqGSIb3DQEBCwUAA4IBAQB/RUnw
P09TG56XaGARPc7Jp2UQCUb2qM+P2Xp0IJTznGmy5OsTyfN//v/aHX/0Lj/wK8P0
U7VW1+fBo8Jw4qfQhfs2ZuHadOXtcxzHJRJdbxSY6RrG6S9GYetWf7OlLS8vqkwd
l5Tm3fi5Fla30gMXwaN+u4C0cC5Ejgdd69ujyAtv35ZiNX4v0DYnIwkUas+OOowP
4HrvKfZot3yt12ncadBT+tq2M/5Bv9Oc4jryWJXtU6/6TI2LfEMnbpnp7eK61IBx
7EAB3agxEiP4u2SaEFZN+49eprnAYpTkNVedJOQzCkit1POuGimGxznfkdYs//UI
R5D6tNEPU0+ukypB
-----END CERTIFICATE-----