Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acea05e36ade234a2b21796624db8f7c07355124.cer
File:                     acea05e36ade234a2b21796624db8f7c07355124.cer (raw, json)
Hash identifier:          esxqScBPaxJd2CvIy3O1Zv23Vqdmsq4GAFGeXVF1Um4=
Subject key identifier:   7A:75:A3:F8:25:83:24:1F:B3:1B:5E:CC:7F:61:3D:5C:FF:E9:97:35
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA15ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/acea05e36ade234a2b21796624db8f7c07355124.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:46 +0000
Certificate not after:    Mon 17 Jun 2024 06:00:00 +0000
Subordinate resources:    IP: 192.141.48.0/22
                          IP: 2803:1020::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15341037 (0xea15ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:46 2017 GMT
            Not After : Jun 17 06:00:00 2024 GMT
        Subject: CN=acea05e36ade234a2b21796624db8f7c07355124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:21:2c:e5:fa:86:39:5d:9f:3c:a8:2e:98:1e:
                    04:23:e8:83:1b:99:4e:47:eb:df:bf:bc:cf:cc:4b:
                    b8:85:b2:b1:ec:58:d2:b8:05:aa:47:f7:a2:ed:6a:
                    b8:b5:5d:61:c3:71:9a:f7:35:48:3c:62:06:82:3a:
                    16:6f:36:68:6f:9b:ce:89:68:27:76:cc:ae:ed:5f:
                    14:04:5d:22:9a:96:56:ac:74:ba:2b:e2:09:64:12:
                    d9:ab:a7:95:92:99:32:6d:47:a3:e1:b4:e2:35:73:
                    72:4c:e6:b0:89:8e:73:18:a4:e4:6a:1b:d2:e1:b4:
                    f6:d6:e3:fe:2b:0c:40:6c:d4:2c:fb:b8:b2:75:0a:
                    03:e9:5a:09:1b:0b:0e:fb:04:dd:21:37:89:28:ec:
                    36:8d:36:24:9a:77:33:f8:12:28:d2:ea:1c:49:50:
                    cb:de:69:ba:08:5b:14:f6:93:33:96:7f:0b:5a:b6:
                    a3:46:3b:36:22:99:48:ad:c9:5f:42:4c:03:fc:93:
                    f4:f8:15:39:64:8e:b9:79:41:ee:d4:33:a6:5e:86:
                    39:9d:67:67:15:19:68:fa:b5:98:70:0e:17:b4:04:
                    0d:d8:9f:d1:ec:49:54:50:8b:4c:37:bd:ef:83:3e:
                    c0:68:fc:0a:67:01:71:fe:d3:80:76:ad:b6:7b:ec:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:75:A3:F8:25:83:24:1F:B3:1B:5E:CC:7F:61:3D:5C:FF:E9:97:35
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/acea05e36ade234a2b21796624db8f7c07355124.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.48.0/22
                IPv6:
                  2803:1020::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:a6:07:b5:67:dc:48:4f:61:48:e9:05:5d:ed:08:1f:31:f0:
         6f:ed:9a:20:fd:59:fa:a6:3e:1d:30:18:a6:0a:f2:f4:69:e8:
         8b:3a:93:03:30:b8:52:ff:30:67:2c:bd:9e:5e:7b:5b:05:35:
         28:f9:0a:c4:9c:26:60:10:28:e7:a4:69:f4:1b:f8:47:1e:95:
         f4:c9:39:46:76:5d:f4:9c:c9:e8:6d:e7:59:2d:77:ca:3e:0b:
         32:d3:7d:8b:a0:16:5a:9e:20:c1:be:6b:f7:c9:3e:30:92:82:
         7b:a2:0c:25:09:98:1e:08:d1:85:bf:d7:9c:a4:c5:ae:33:0b:
         7e:04:19:c7:ea:41:2a:66:f5:0f:a4:4e:84:38:eb:75:c8:06:
         f7:aa:8f:bd:b3:ae:47:f7:b8:a9:af:a8:90:24:f8:b4:69:8d:
         46:f3:18:ce:b6:ee:a7:d4:3c:7f:81:33:ca:91:88:4a:39:d3:
         c8:c3:15:d2:ed:1e:7d:3c:dd:50:5c:bd:86:14:e8:6f:b3:13:
         7e:14:2f:e6:65:a8:56:69:54:d2:34:82:c9:b2:1f:36:a0:0b:
         4d:e9:2c:3c:66:63:6b:77:81:fe:92:d1:ac:be:aa:07:91:25:
         2a:d5:7b:9c:62:82:40:f0:f1:45:99:45:b5:16:e4:5f:2e:3f:
         ab:3a:c6:14
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAOoV7TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0NloXDTI0MDYxNzA2MDAw
MFowMzExMC8GA1UEAxMoYWNlYTA1ZTM2YWRlMjM0YTJiMjE3OTY2MjRkYjhmN2Mw
NzM1NTEyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIUhLOX6hjld
nzyoLpgeBCPogxuZTkfr37+8z8xLuIWysexY0rgFqkf3ou1quLVdYcNxmvc1SDxi
BoI6Fm82aG+bzoloJ3bMru1fFARdIpqWVqx0uiviCWQS2aunlZKZMm1Ho+G04jVz
ckzmsImOcxik5Gob0uG09tbj/isMQGzULPu4snUKA+laCRsLDvsE3SE3iSjsNo02
JJp3M/gSKNLqHElQy95pughbFPaTM5Z/C1q2o0Y7NiKZSK3JX0JMA/yT9PgVOWSO
uXlB7tQzpl6GOZ1nZxUZaPq1mHAOF7QEDdif0exJVFCLTDe974M+wGj8CmcBcf7T
gHattnvs7isCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBR6daP4JYMkH7MbXsx/YT1c
/+mXNTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hYWU2OTg0MC03ZWQy
LTQyYTQtYTBkMC1kZjQ2OGMyOWRiNjUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYWFlNjk4NDAtN2VkMi00
MmE0LWEwZDAtZGY0NjhjMjlkYjY1L2FjZWEwNWUzNmFkZTIzNGEyYjIxNzk2NjI0
ZGI4ZjdjMDczNTUxMjQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsCNMDANBAIAAjAHAwUAKAMQIDAN
BgkqhkiG9w0BAQsFAAOCAQEAXKYHtWfcSE9hSOkFXe0IHzHwb+2aIP1Z+qY+HTAY
pgry9GnoizqTAzC4Uv8wZyy9nl57WwU1KPkKxJwmYBAo56Rp9Bv4Rx6V9Mk5RnZd
9JzJ6G3nWS13yj4LMtN9i6AWWp4gwb5r98k+MJKCe6IMJQmYHgjRhb/XnKTFrjML
fgQZx+pBKmb1D6ROhDjrdcgG96qPvbOuR/e4qa+okCT4tGmNRvMYzrbup9Q8f4Ez
ypGISjnTyMMV0u0efTzdUFy9hhTob7MTfhQv5mWoVmlU0jSCybIfNqALTeksPGZj
a3eB/pLRrL6qB5ElKtV7nGKCQPDxRZlFtRbkXy4/qzrGFA==
-----END CERTIFICATE-----