Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer
File:                     98a80d301d847e6c050c408da1b0efe36548fad8.cer (raw, json)
Hash identifier:          CTuLze04Bxe74rht+MhO2+DQfY8WaM5lv+hH0wQioTg=
Subject key identifier:   44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F28F43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/98a80d301d847e6c050c408da1b0efe36548fad8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:57 +0000
Certificate not after:    Wed 21 Aug 2024 21:12:17 +0000
Subordinate resources:    AS: 264659
                          IP: 179.43.104.0/21
                          IP: 190.211.140.0/22
                          IP: 2800:ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15896387 (0xf28f43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:57 2017 GMT
            Not After : Aug 21 21:12:17 2024 GMT
        Subject: CN=98a80d301d847e6c050c408da1b0efe36548fad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:c0:73:33:7b:85:0a:71:0b:eb:e3:6e:95:
                    b6:79:56:9f:2c:d4:0a:5d:5b:c8:ce:da:b4:06:f9:
                    8c:5d:fb:1f:c3:dd:a9:5f:9a:66:d5:96:60:c2:a3:
                    7b:f0:65:fd:f5:34:9c:64:86:c5:db:86:44:57:86:
                    67:12:c0:b2:0f:88:de:4b:4e:9d:19:40:69:fb:fc:
                    33:f6:4d:1e:18:18:cd:d9:8d:3e:20:3b:c4:ac:ed:
                    3a:73:42:9e:d3:d4:ec:6a:0b:54:39:14:14:0f:6a:
                    e6:e1:8c:07:90:8c:d5:41:ad:8d:e3:c7:48:e0:c1:
                    8b:9d:79:60:80:1a:4e:fb:24:7e:55:66:40:43:cb:
                    c9:4f:c1:f6:0a:4b:1f:58:3a:48:a3:0d:5f:98:11:
                    d1:c7:7d:7e:94:f0:73:03:94:57:5f:9e:6d:6b:64:
                    8d:a8:b8:5f:0c:a2:af:8b:98:ae:23:71:2d:3e:3f:
                    0d:0c:8a:3d:68:7e:9d:2a:d8:5c:cb:7c:17:d4:45:
                    07:d5:c0:c3:e7:d6:ff:67:d0:17:01:3a:e0:e5:50:
                    d9:17:01:14:49:fc:58:10:6b:e3:d5:54:d7:8d:9f:
                    b8:bd:71:cb:4c:a8:26:9b:c2:db:51:6f:8d:71:5d:
                    f4:13:87:fd:0b:60:ec:90:2b:d0:d9:a3:5e:0c:8d:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/98a80d301d847e6c050c408da1b0efe36548fad8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.104.0/21
                  190.211.140.0/22
                IPv6:
                  2800:ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264659

    Signature Algorithm: sha256WithRSAEncryption
         74:78:5d:1e:be:85:ba:8f:89:74:f2:ae:34:24:08:56:2c:f5:
         c8:08:98:5a:27:ff:70:58:5e:db:96:26:8d:25:de:28:fa:fa:
         03:df:c2:25:4e:2f:42:e1:a7:85:bb:d4:fa:19:e4:89:c4:10:
         74:41:66:ab:7c:0a:21:71:99:0d:ba:98:c8:0b:d0:b5:4c:9d:
         33:36:03:b7:4f:07:73:88:9d:df:6b:cd:91:4d:ff:97:42:9b:
         1a:82:fa:0d:9d:29:d3:9e:49:58:88:1a:7e:39:f3:79:ad:b0:
         65:77:0a:05:e4:a6:a4:9e:e9:35:43:28:a8:9b:92:91:ac:5d:
         14:9c:eb:a4:74:be:4b:69:db:ad:78:16:e9:dd:34:54:76:b5:
         b6:73:f2:63:07:d5:b6:20:cb:a4:8c:f7:a6:83:b6:93:95:29:
         d9:34:66:8c:77:3f:90:13:bd:0d:2e:21:05:25:11:db:b9:cb:
         6d:9f:99:6e:c5:ae:58:f9:49:d7:02:27:c4:59:a8:ae:0d:b1:
         9f:19:45:02:42:9a:65:1e:47:1f:81:41:93:52:68:fa:a4:3a:
         ca:e5:b0:bf:b3:19:4f:02:9e:6b:1e:ba:c9:07:b1:30:5c:bd:
         0f:24:0f:2e:15:ee:56:a3:13:cc:09:09:ed:0a:30:a3:05:ea:
         6d:6c:9e:87
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAPKPQzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1N1oXDTI0MDgyMTIxMTIx
N1owMzExMC8GA1UEAxMoOThhODBkMzAxZDg0N2U2YzA1MGM0MDhkYTFiMGVmZTM2
NTQ4ZmFkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIh7wHMze4UK
cQvr426VtnlWnyzUCl1byM7atAb5jF37H8PdqV+aZtWWYMKje/Bl/fU0nGSGxduG
RFeGZxLAsg+I3ktOnRlAafv8M/ZNHhgYzdmNPiA7xKztOnNCntPU7GoLVDkUFA9q
5uGMB5CM1UGtjePHSODBi515YIAaTvskflVmQEPLyU/B9gpLH1g6SKMNX5gR0cd9
fpTwcwOUV1+ebWtkjai4Xwyir4uYriNxLT4/DQyKPWh+nSrYXMt8F9RFB9XAw+fW
/2fQFwE64OVQ2RcBFEn8WBBr49VU142fuL1xy0yoJpvC21FvjXFd9BOH/Qtg7JAr
0NmjXgyNWZcCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBREYGoYkhPcGT2GDTtljOW0
72h6qDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wYzI2OGIyZC03NDVi
LTQ0NDgtOWU2Ni1jMDg2YzRmMzY5MDAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMGMyNjhiMmQtNzQ1Yi00
NDQ4LTllNjYtYzA4NmM0ZjM2OTAwLzk4YTgwZDMwMWQ4NDdlNmMwNTBjNDA4ZGEx
YjBlZmUzNjU0OGZhZDgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEA7MraAMEAr7TjDANBAIAAjAHAwUA
KAAK4DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECdMwDQYJKoZIhvcNAQELBQAD
ggEBAHR4XR6+hbqPiXTyrjQkCFYs9cgImFon/3BYXtuWJo0l3ij6+gPfwiVOL0Lh
p4W71PoZ5InEEHRBZqt8CiFxmQ26mMgL0LVMnTM2A7dPB3OInd9rzZFN/5dCmxqC
+g2dKdOeSViIGn4583mtsGV3CgXkpqSe6TVDKKibkpGsXRSc66R0vktp2614Fund
NFR2tbZz8mMH1bYgy6SM96aDtpOVKdk0Zox3P5ATvQ0uIQUlEdu5y22fmW7Frlj5
SdcCJ8RZqK4NsZ8ZRQJCmmUeRx+BQZNSaPqkOsrlsL+zGU8CnmseuskHsTBcvQ8k
Dy4V7lajE8wJCe0KMKMF6m1snoc=
-----END CERTIFICATE-----