Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f93cc4be904bedf51ae14caa9d33ee5ec03dce8.cer
File:                     9f93cc4be904bedf51ae14caa9d33ee5ec03dce8.cer (raw, json)
Hash identifier:          m3/GJj6DQizGQZfVm0JPBEgylZ9MK2o8kVUjvrMQfKc=
Subject key identifier:   DE:16:CC:0D:84:F3:21:46:7E:1C:D7:08:83:A4:50:00:E5:65:D0:E9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EAD8A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ef31cd1b-4c3c-4cea-880c-7a6ea6ebd562/9f93cc4be904bedf51ae14caa9d33ee5ec03dce8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ef31cd1b-4c3c-4cea-880c-7a6ea6ebd562/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:32 +0000
Certificate not after:    Sat 22 Jun 2024 22:16:47 +0000
Subordinate resources:    AS: 269851
                          IP: 181.191.140.0/22
                          IP: 2803:7020::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15390889 (0xead8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:32 2017 GMT
            Not After : Jun 22 22:16:47 2024 GMT
        Subject: CN=9f93cc4be904bedf51ae14caa9d33ee5ec03dce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3d:7f:4a:09:9e:79:fa:63:2b:90:5a:d4:73:
                    04:84:f7:27:57:6f:4e:dc:3a:48:da:57:50:46:39:
                    1c:73:ca:fc:51:24:22:f5:ca:0d:e3:be:b0:8f:13:
                    b1:1c:93:1a:8f:7d:1c:0e:43:2e:7b:df:1e:f3:af:
                    54:31:80:e3:43:9b:ee:40:0e:24:58:e8:3d:be:24:
                    c9:bc:54:3b:6d:e2:ed:92:82:c4:22:42:03:ab:8e:
                    c8:9a:17:3c:87:5f:47:4c:b0:1a:1f:9d:a4:bd:f2:
                    dd:87:8b:b2:3e:6f:c3:d2:42:c7:39:07:99:04:5e:
                    3a:5a:f7:6c:d3:49:e7:9b:55:65:fa:6e:12:ee:85:
                    92:d9:0b:80:ed:c7:47:36:c8:10:97:ea:b3:9e:7f:
                    77:8e:28:66:bb:7c:04:1d:e0:b0:5a:6e:5b:43:e7:
                    8d:9f:a4:61:1a:0d:02:17:96:6d:4c:28:5c:fa:72:
                    43:73:89:8d:7f:45:18:e1:0d:d6:f9:36:4f:93:a4:
                    d5:78:51:bc:24:e1:b9:25:14:4a:9c:d4:b7:6b:1d:
                    21:10:2b:39:cf:ce:c9:f8:ec:b0:bc:e6:1a:22:1a:
                    33:71:de:dc:08:b6:45:51:c5:0d:17:12:4a:df:8b:
                    f7:33:f0:c5:6b:92:5f:da:31:0b:0c:00:1e:54:cc:
                    5c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:16:CC:0D:84:F3:21:46:7E:1C:D7:08:83:A4:50:00:E5:65:D0:E9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ef31cd1b-4c3c-4cea-880c-7a6ea6ebd562/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ef31cd1b-4c3c-4cea-880c-7a6ea6ebd562/9f93cc4be904bedf51ae14caa9d33ee5ec03dce8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.140.0/22
                IPv6:
                  2803:7020::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269851

    Signature Algorithm: sha256WithRSAEncryption
         c2:73:7d:43:ab:05:65:25:dc:22:21:a7:99:e3:42:19:6f:7a:
         a5:eb:3e:2e:e3:48:77:25:93:f3:25:6a:48:6f:66:1f:ef:e6:
         af:26:d0:7f:5d:ed:00:60:0c:b6:f5:af:66:a8:48:1a:aa:b5:
         b6:db:f4:7a:49:a4:d5:e2:8e:bd:15:1d:b4:79:17:12:9b:c4:
         6b:07:b3:c9:5a:bb:7a:09:ea:f5:7c:d7:0a:44:fd:6e:cb:b7:
         70:f8:c3:00:5c:07:8c:af:70:cf:a0:92:6f:80:42:8c:95:88:
         58:8b:37:40:05:19:f1:eb:d7:5f:3c:47:e1:11:9c:aa:57:55:
         3a:af:5c:00:c4:44:c0:8c:9b:1b:61:fe:5a:e0:30:b9:5c:9f:
         c4:38:b9:2d:30:e1:82:30:f0:c5:30:b7:df:71:d8:be:68:b7:
         f5:0d:f2:7b:13:9b:47:93:31:e4:08:7e:09:24:d6:2c:e5:2a:
         f3:78:27:ba:69:58:31:4f:a5:fa:09:89:a4:a6:7d:61:f7:77:
         11:72:1c:9d:1b:1d:9d:1a:52:14:6e:56:51:e3:95:ab:af:83:
         1c:34:54:dd:ee:ca:62:e9:56:bd:55:44:b8:b1:8e:7b:d8:e7:
         56:dc:16:29:a1:29:1d:83:e5:0f:e5:11:76:e5:cb:6b:69:c7:
         25:d2:c5:70
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOrYqTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzMloXDTI0MDYyMjIyMTY0
N1owMzExMC8GA1UEAxMoOWY5M2NjNGJlOTA0YmVkZjUxYWUxNGNhYTlkMzNlZTVl
YzAzZGNlODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANU9f0oJnnn6
YyuQWtRzBIT3J1dvTtw6SNpXUEY5HHPK/FEkIvXKDeO+sI8TsRyTGo99HA5DLnvf
HvOvVDGA40Ob7kAOJFjoPb4kybxUO23i7ZKCxCJCA6uOyJoXPIdfR0ywGh+dpL3y
3YeLsj5vw9JCxzkHmQReOlr3bNNJ55tVZfpuEu6FktkLgO3HRzbIEJfqs55/d44o
Zrt8BB3gsFpuW0PnjZ+kYRoNAheWbUwoXPpyQ3OJjX9FGOEN1vk2T5Ok1XhRvCTh
uSUUSpzUt2sdIRArOc/OyfjssLzmGiIaM3He3Ai2RVHFDRcSSt+L9zPwxWuSX9ox
CwwAHlTMXBUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTeFswNhPMhRn4c1wiDpFAA
5WXQ6TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lZjMxY2QxYi00YzNj
LTRjZWEtODgwYy03YTZlYTZlYmQ1NjIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWYzMWNkMWItNGMzYy00
Y2VhLTg4MGMtN2E2ZWE2ZWJkNTYyLzlmOTNjYzRiZTkwNGJlZGY1MWFlMTRjYWE5
ZDMzZWU1ZWMwM2RjZTgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArW/jDANBAIAAjAHAwUAKANwIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHhswDQYJKoZIhvcNAQELBQADggEBAMJz
fUOrBWUl3CIhp5njQhlveqXrPi7jSHclk/MlakhvZh/v5q8m0H9d7QBgDLb1r2ao
SBqqtbbb9HpJpNXijr0VHbR5FxKbxGsHs8lau3oJ6vV81wpE/W7Lt3D4wwBcB4yv
cM+gkm+AQoyViFiLN0AFGfHr1188R+ERnKpXVTqvXADERMCMmxth/lrgMLlcn8Q4
uS0w4YIw8MUwt99x2L5ot/UN8nsTm0eTMeQIfgkk1izlKvN4J7ppWDFPpfoJiaSm
fWH3dxFyHJ0bHZ0aUhRuVlHjlauvgxw0VN3uymLpVr1VRLixjnvY51bcFimhKR2D
5Q/lEXbly2tpxyXSxXA=
-----END CERTIFICATE-----