Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c7da47e32403057dfd314b092451260ac87e53f.cer
File:                     9c7da47e32403057dfd314b092451260ac87e53f.cer (raw, json)
Hash identifier:          xmIIH/n5LIPW04aMA/xHcbRhVEeSl6vE8IRbhG5WMlk=
Subject key identifier:   EF:B2:C0:02:F9:14:87:9E:0E:89:CE:CD:21:7F:0F:CC:47:F4:F5:42
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD142D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/9c7da47e32403057dfd314b092451260ac87e53f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:43 +0000
Certificate not after:    Sun 17 Nov 2024 15:24:06 +0000
Subordinate resources:    AS: 264858
                          IP: 170.82.244.0/23
                          IP: 2801:18:d000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16585773 (0xfd142d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:43 2017 GMT
            Not After : Nov 17 15:24:06 2024 GMT
        Subject: CN=9c7da47e32403057dfd314b092451260ac87e53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2d:6e:d6:ee:c4:3b:0d:f6:4a:a7:40:e7:cb:
                    6c:cf:48:65:d3:1f:3f:d0:7d:d7:a3:78:69:75:1d:
                    23:8d:b7:4b:0f:ee:a7:0d:2d:e6:15:5e:9c:b1:45:
                    93:b5:c3:be:c9:a7:ba:23:44:85:2b:4d:56:8c:37:
                    03:96:af:90:ba:65:87:44:d7:a9:8d:74:58:8c:28:
                    f0:c9:b9:f1:ac:04:55:22:b3:56:bf:f4:07:f5:be:
                    39:b2:18:1d:b6:59:d8:1f:6f:dc:07:74:32:2a:70:
                    db:2a:4f:19:f7:f8:52:ed:19:f9:1d:50:af:39:01:
                    0f:68:56:f4:14:d1:73:39:81:32:37:6c:4a:80:b7:
                    8e:ce:c1:13:d3:47:ae:5d:1a:a8:7c:bc:b5:e0:51:
                    f9:16:40:78:c8:1a:a8:1a:1a:38:ec:a4:23:b8:38:
                    37:c0:ff:ae:1f:c2:0a:83:6e:9e:8f:db:04:1c:e3:
                    90:73:4a:7c:01:80:53:52:7a:98:75:48:6e:06:3e:
                    9f:de:aa:cf:f2:db:d7:9d:0d:56:b6:1d:cb:02:37:
                    1c:e4:a8:0e:ad:97:0a:03:8f:0d:fb:12:70:00:52:
                    6f:2f:ea:65:df:18:2e:35:9a:97:76:35:81:d1:09:
                    b8:e6:b8:7b:0b:c7:66:2a:bd:1f:bf:72:17:10:01:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B2:C0:02:F9:14:87:9E:0E:89:CE:CD:21:7F:0F:CC:47:F4:F5:42
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/9c7da47e32403057dfd314b092451260ac87e53f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.244.0/23
                IPv6:
                  2801:18:d000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264858

    Signature Algorithm: sha256WithRSAEncryption
         c0:6b:1e:f7:64:b2:12:f7:41:03:ff:91:2f:3d:43:f0:ac:a5:
         5b:1e:3d:f7:10:04:59:2a:09:69:c6:b2:57:8f:03:dd:40:35:
         a3:fb:75:b3:68:a2:e8:13:42:c1:11:fa:84:47:07:72:02:d0:
         2e:51:34:12:ef:fe:46:5c:ef:28:9d:5b:29:aa:53:95:40:d7:
         3c:ba:e8:01:8c:e0:2e:be:37:0a:8c:49:b2:2b:a1:9a:21:4d:
         31:cf:95:de:48:92:66:8f:7a:ec:53:91:88:40:95:42:c4:b9:
         da:d7:1c:b2:fd:09:9e:c9:27:9b:ce:8f:3a:a9:e2:57:f1:a2:
         5f:2b:11:6d:a1:9a:ac:5c:d8:33:a6:92:45:88:b4:28:d6:c0:
         53:11:c1:80:53:d8:43:1b:ec:4c:01:29:70:5d:20:1c:4f:25:
         65:df:44:3b:db:d0:66:f9:01:bf:24:36:27:b0:3e:a2:5a:ce:
         6f:66:91:92:81:39:55:42:d0:01:32:a5:d7:e7:82:f0:c5:7f:
         ed:18:05:d8:80:71:ad:a0:9c:4b:92:25:14:63:a5:eb:73:34:
         53:dd:32:31:2c:f3:cd:68:8a:97:cb:69:07:77:90:e0:24:54:
         3e:2a:e6:ec:c5:dd:c9:de:9d:0a:b5:fe:83:f9:ca:83:36:24:
         d9:18:14:e1
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAP0ULTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0M1oXDTI0MTExNzE1MjQw
NlowMzExMC8GA1UEAxMoOWM3ZGE0N2UzMjQwMzA1N2RmZDMxNGIwOTI0NTEyNjBh
Yzg3ZTUzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIctbtbuxDsN
9kqnQOfLbM9IZdMfP9B916N4aXUdI423Sw/upw0t5hVenLFFk7XDvsmnuiNEhStN
Vow3A5avkLplh0TXqY10WIwo8Mm58awEVSKzVr/0B/W+ObIYHbZZ2B9v3Ad0Mipw
2ypPGff4Uu0Z+R1QrzkBD2hW9BTRczmBMjdsSoC3js7BE9NHrl0aqHy8teBR+RZA
eMgaqBoaOOykI7g4N8D/rh/CCoNuno/bBBzjkHNKfAGAU1J6mHVIbgY+n96qz/Lb
150NVrYdywI3HOSoDq2XCgOPDfsScABSby/qZd8YLjWal3Y1gdEJuOa4ewvHZiq9
H79yFxAB71ECAwEAAaOCAwswggMHMB0GA1UdDgQWBBTvssAC+RSHng6Jzs0hfw/M
R/T1QjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80NTJlYmY3My0yMjhh
LTQ2M2UtODQ0NC1jZWU5ZWFkMWRhNDAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDUyZWJmNzMtMjI4YS00
NjNlLTg0NDQtY2VlOWVhZDFkYTQwLzljN2RhNDdlMzI0MDMwNTdkZmQzMTRiMDky
NDUxMjYwYWM4N2U1M2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAapS9DAPBAIAAjAJAwcAKAEAGNAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKmjANBgkqhkiG9w0BAQsFAAOCAQEA
wGse92SyEvdBA/+RLz1D8KylWx499xAEWSoJacayV48D3UA1o/t1s2ii6BNCwRH6
hEcHcgLQLlE0Eu/+RlzvKJ1bKapTlUDXPLroAYzgLr43CoxJsiuhmiFNMc+V3kiS
Zo967FORiECVQsS52tccsv0Jnsknm86POqniV/GiXysRbaGarFzYM6aSRYi0KNbA
UxHBgFPYQxvsTAEpcF0gHE8lZd9EO9vQZvkBvyQ2J7A+olrOb2aRkoE5VULQATKl
1+eC8MV/7RgF2IBxraCcS5IlFGOl63M0U90yMSzzzWiKl8tpB3eQ4CRUPirm7MXd
yd6dCrX+g/nKgzYk2RgU4Q==
-----END CERTIFICATE-----