Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
File:                     a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer (raw, json)
Hash identifier:          nLddMi98x3sl6ZwzfQVX/Eh+CzMuI0Sz5JruVHeBnEo=
Subject key identifier:   BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A3701
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:52 +0000
Certificate not after:    Wed 25 Dec 2024 14:00:00 +0000
Subordinate resources:    IP: 190.242.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17446657 (0x10a3701)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:52 2017 GMT
            Not After : Dec 25 14:00:00 2024 GMT
        Subject: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a8:87:19:71:e0:7f:ad:2f:1d:51:df:80:0c:
                    96:7e:15:55:70:73:ca:cb:b9:e6:e4:75:dd:40:d6:
                    a4:98:88:57:95:64:37:98:c7:fe:14:7f:f3:23:4a:
                    51:84:3f:d2:62:81:8a:f1:f0:60:fd:f7:0d:ef:03:
                    92:f0:7a:a8:b9:e7:d1:83:36:7e:5c:e3:e5:39:72:
                    74:62:c4:e4:78:af:01:da:70:d3:77:fc:a3:36:5e:
                    95:0a:88:23:ef:30:0b:93:6e:a5:e5:6c:a3:a2:9f:
                    93:3a:16:86:af:fd:ce:12:c0:a3:27:8d:1b:3e:75:
                    3c:e8:0e:b9:77:fe:91:92:e3:70:6a:60:d4:1f:ab:
                    e2:d5:2e:d5:93:a4:02:77:4d:9a:63:e7:e8:93:2a:
                    b1:7e:8d:7b:b7:1a:2f:68:88:c2:75:98:c4:5f:d0:
                    5e:7c:25:15:8c:fb:f0:eb:b6:86:4a:3b:61:ba:25:
                    f0:e9:b1:59:cc:2b:ce:e9:87:8c:06:62:f5:2f:79:
                    81:98:fa:2f:7b:6f:41:6e:f3:06:82:6e:c2:9d:08:
                    10:6e:52:2b:74:74:a6:91:17:27:46:e1:40:ad:44:
                    4b:a4:f1:a3:5a:e6:bb:de:6e:04:dc:67:2a:64:41:
                    32:01:dd:e8:03:b3:a8:85:73:76:b7:38:d9:5c:16:
                    14:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:f8:f0:45:39:8d:f0:4e:50:e2:41:8f:c8:04:97:17:29:31:
         33:1c:45:0f:62:ac:e8:ac:d0:8d:3c:e8:19:2c:c9:6c:f5:29:
         d5:ee:5f:bb:38:2a:42:7b:90:2b:46:c4:c1:5f:db:25:f1:79:
         24:b1:55:dc:3b:25:ad:e1:b1:0b:59:bc:cf:82:78:e9:4d:8f:
         ff:7d:48:64:ce:cc:d9:5b:a5:31:94:6c:2e:90:2a:d6:bc:c9:
         60:d7:16:26:f6:de:ac:ea:6d:3a:1a:c5:43:04:e3:83:06:05:
         64:32:80:a2:9c:dd:c9:d7:c2:68:9b:06:0b:4d:93:c1:5b:9e:
         29:18:e1:47:7e:3e:f4:0d:e6:8f:87:60:93:c9:9f:c4:34:6b:
         68:ea:24:7b:56:6c:d3:56:96:09:43:ff:11:cb:e5:ca:05:85:
         74:64:00:90:e3:17:03:ae:31:87:63:ec:0f:94:c4:df:1f:6b:
         92:12:6e:c7:ad:48:a9:7d:c2:27:e7:e3:ba:52:20:3b:7d:f6:
         01:31:10:a9:8e:ed:59:7c:bb:7d:11:07:2e:74:bb:2b:06:38:
         3a:8f:2c:4c:d6:72:6d:f9:64:25:33:a5:f8:02:69:d4:77:12:
         28:1b:d5:b4:d2:b1:0f:67:01:8c:5d:7c:e8:a8:7b:58:b6:9e:
         28:32:a7:91
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIEAQo3ATANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1MloXDTI0MTIyNTE0MDAw
MFowMzExMC8GA1UEAxMoYTcyMzdkMzJmZDM1YmJmMGZkYmE3NzM0YTgzNjhmZDk2
MjZlY2E1YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJiohxlx4H+t
Lx1R34AMln4VVXBzysu55uR13UDWpJiIV5VkN5jH/hR/8yNKUYQ/0mKBivHwYP33
De8DkvB6qLnn0YM2flzj5TlydGLE5HivAdpw03f8ozZelQqII+8wC5NupeVso6Kf
kzoWhq/9zhLAoyeNGz51POgOuXf+kZLjcGpg1B+r4tUu1ZOkAndNmmPn6JMqsX6N
e7caL2iIwnWYxF/QXnwlFYz78Ou2hko7Ybol8OmxWcwrzumHjAZi9S95gZj6L3tv
QW7zBoJuwp0IEG5SK3R0ppEXJ0bhQK1ES6Txo1rmu95uBNxnKmRBMgHd6AOzqIVz
drc42VwWFEkCAwEAAaOCAt0wggLZMB0GA1UdDgQWBBS+AtI2+LAGuoeBKiAu9bdm
3I4wPzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82N2VkOTAwOC1hZTM0
LTQ0YmUtODgyZi01OTM4MTIwMWIxZTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjdlZDkwMDgtYWUzNC00
NGJlLTg4MmYtNTkzODEyMDFiMWUxL2E3MjM3ZDMyZmQzNWJiZjBmZGJhNzczNGE4
MzY4ZmQ5NjI2ZWNhNWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAL7yMA0GCSqGSIb3DQEBCwUAA4IB
AQAK+PBFOY3wTlDiQY/IBJcXKTEzHEUPYqzorNCNPOgZLMls9SnV7l+7OCpCe5Ar
RsTBX9sl8XkksVXcOyWt4bELWbzPgnjpTY//fUhkzszZW6UxlGwukCrWvMlg1xYm
9t6s6m06GsVDBOODBgVkMoCinN3J18JomwYLTZPBW54pGOFHfj70DeaPh2CTyZ/E
NGto6iR7VmzTVpYJQ/8Ry+XKBYV0ZACQ4xcDrjGHY+wPlMTfH2uSEm7HrUipfcIn
5+O6UiA7ffYBMRCpju1ZfLt9EQcudLsrBjg6jyxM1nJt+WQlM6X4AmnUdxIoG9W0
0rEPZwGMXXzoqHtYtp4oMqeR
-----END CERTIFICATE-----