Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9ff432522dffd64924cbcac442118f937ddfadbc.cer
File:                     9ff432522dffd64924cbcac442118f937ddfadbc.cer (raw, json)
Hash identifier:          6D7DBdlD4rUWZIOAVaYlCrk/sJIn7jCnprV7MbWjOpA=
Subject key identifier:   20:7C:58:18:14:11:86:FB:BD:51:3C:5B:6B:6E:72:67:DE:80:AB:9E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1C1C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bc852b68-310e-416e-8aef-e77c33973f65/9ff432522dffd64924cbcac442118f937ddfadbc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bc852b68-310e-416e-8aef-e77c33973f65/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:26 +0000
Certificate not after:    Wed 14 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 52364
                          IP: 138.185.80.0/22
                          IP: 186.148.112.0/21
                          IP: 190.94.160.0/20
                          IP: 191.102.40.0/21
                          IP: 2803:6b00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15843781 (0xf1c1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:26 2017 GMT
            Not After : Aug 14 06:00:00 2024 GMT
        Subject: CN=9ff432522dffd64924cbcac442118f937ddfadbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:36:47:a3:e3:ae:da:bd:c0:49:a1:dc:5a:e2:
                    46:92:1b:09:ac:48:12:50:2d:f7:e2:bb:c0:9f:69:
                    c0:47:6c:8c:48:f1:3e:14:8f:b4:0e:32:25:6e:70:
                    d0:09:f3:06:15:5a:5d:8d:2b:7e:f2:85:2e:74:46:
                    9b:da:2a:e2:b5:cd:8a:2e:ea:e1:84:ef:72:26:b8:
                    20:69:c9:55:a4:6a:60:c5:75:25:e3:61:39:d7:88:
                    89:19:cf:b7:3b:36:c6:5b:e2:87:5b:6b:16:f6:ab:
                    38:2f:21:bb:f0:17:7b:e4:6e:e1:60:4f:3f:87:66:
                    8a:d4:c5:a3:64:b1:35:a5:07:dd:c7:d4:63:2e:ff:
                    1c:ff:6d:95:4d:d8:12:4f:2f:1f:5e:ab:6f:b8:9c:
                    14:73:bb:f5:71:a8:ae:bd:72:e3:21:3b:66:5c:e6:
                    12:78:29:81:d7:6f:2a:a2:4c:25:67:ac:f2:06:ba:
                    e8:12:38:60:83:f8:67:51:68:8a:3f:71:ef:46:e3:
                    6f:cd:c8:16:a3:83:7a:f6:5e:5a:32:52:08:43:34:
                    c9:b5:44:6c:a9:99:82:52:02:82:6c:63:d5:30:a0:
                    85:25:c8:7a:d4:40:a7:fa:44:b2:f0:5b:c3:ae:3f:
                    1f:36:5c:b7:16:27:5f:6c:6d:45:fd:fd:0e:c1:6b:
                    18:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7C:58:18:14:11:86:FB:BD:51:3C:5B:6B:6E:72:67:DE:80:AB:9E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bc852b68-310e-416e-8aef-e77c33973f65/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bc852b68-310e-416e-8aef-e77c33973f65/9ff432522dffd64924cbcac442118f937ddfadbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.80.0/22
                  186.148.112.0/21
                  190.94.160.0/20
                  191.102.40.0/21
                IPv6:
                  2803:6b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52364

    Signature Algorithm: sha256WithRSAEncryption
         1b:85:a1:a6:ec:8a:5a:eb:84:89:c8:29:df:8f:c5:d7:ce:3d:
         ba:3c:ee:2e:84:bc:4b:c0:18:cb:42:2f:e9:32:7d:cf:c7:d7:
         e1:5c:93:05:fe:7a:15:44:a1:13:9c:26:4d:6c:16:d1:b0:7f:
         b9:43:f3:c6:6f:f4:65:8b:78:df:82:f6:5c:f4:15:73:ee:4b:
         98:af:b5:66:1c:a0:8d:b8:80:d5:71:7f:c6:3e:0c:da:ba:df:
         14:2c:74:3e:0c:26:78:8b:6b:51:24:50:b9:32:58:83:61:3a:
         f0:c6:f6:32:01:f4:49:95:6f:79:6e:80:ba:a5:c9:81:80:dd:
         80:18:76:c0:85:d6:50:28:03:9c:89:9b:e0:f9:99:bf:24:b6:
         27:eb:4e:85:14:00:95:eb:23:45:d8:2e:e7:3f:59:ff:30:11:
         04:20:b7:4d:67:38:3b:ab:94:05:25:43:38:14:3f:b9:15:0c:
         2c:b2:32:aa:5f:30:44:e8:68:4b:ca:70:0c:09:8b:43:38:26:
         72:9c:97:08:8d:e3:b3:8d:53:a6:95:28:7b:5e:da:d8:7b:e0:
         6f:c7:5e:32:a8:e2:c1:bd:cc:12:ac:f7:1c:5b:f0:e2:2f:ba:
         ef:11:d9:0e:e9:66:41:12:49:cc:77:da:87:c4:e6:0c:d8:8e:
         1a:e7:fc:f3
-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgIEAPHBxTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyNloXDTI0MDgxNDA2MDAw
MFowMzExMC8GA1UEAxMoOWZmNDMyNTIyZGZmZDY0OTI0Y2JjYWM0NDIxMThmOTM3
ZGRmYWRiYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIs2R6Pjrtq9
wEmh3FriRpIbCaxIElAt9+K7wJ9pwEdsjEjxPhSPtA4yJW5w0AnzBhVaXY0rfvKF
LnRGm9oq4rXNii7q4YTvcia4IGnJVaRqYMV1JeNhOdeIiRnPtzs2xlvih1trFvar
OC8hu/AXe+Ru4WBPP4dmitTFo2SxNaUH3cfUYy7/HP9tlU3YEk8vH16rb7icFHO7
9XGorr1y4yE7ZlzmEngpgddvKqJMJWes8ga66BI4YIP4Z1Foij9x70bjb83IFqOD
evZeWjJSCEM0ybVEbKmZglICgmxj1TCghSXIetRAp/pEsvBbw64/HzZctxYnX2xt
Rf39DsFrGPMCAwEAAaOCAxswggMXMB0GA1UdDgQWBBQgfFgYFBGG+71RPFtrbnJn
3oCrnjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iYzg1MmI2OC0zMTBl
LTQxNmUtOGFlZi1lNzdjMzM5NzNmNjUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYmM4NTJiNjgtMzEwZS00
MTZlLThhZWYtZTc3YzMzOTczZjY1LzlmZjQzMjUyMmRmZmQ2NDkyNGNiY2FjNDQy
MTE4ZjkzN2RkZmFkYmMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAoq5UAMEA7qUcAMEBL5eoAMEA79m
KDANBAIAAjAHAwUAKANrADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzIwwDQYJ
KoZIhvcNAQELBQADggEBABuFoabsilrrhInIKd+PxdfOPbo87i6EvEvAGMtCL+ky
fc/H1+FckwX+ehVEoROcJk1sFtGwf7lD88Zv9GWLeN+C9lz0FXPuS5ivtWYcoI24
gNVxf8Y+DNq63xQsdD4MJniLa1EkULkyWINhOvDG9jIB9EmVb3lugLqlyYGA3YAY
dsCF1lAoA5yJm+D5mb8ktifrToUUAJXrI0XYLuc/Wf8wEQQgt01nODurlAUlQzgU
P7kVDCyyMqpfMEToaEvKcAwJi0M4JnKclwiN47ONU6aVKHte2th74G/HXjKo4sG9
zBKs9xxb8OIvuu8R2Q7pZkESScx32ofE5gzYjhrn/PM=
-----END CERTIFICATE-----