Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer
File:                     b0aa757766600ae92f780498bacfcff9762981a2.cer (raw, json)
Hash identifier:          zUCPIeJWq0fgIA+JZtb3ae8PdNe1cQtQi8wScs2g2m0=
Subject key identifier:   11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E643AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/b0aa757766600ae92f780498bacfcff9762981a2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:45 +0000
Certificate not after:    Mon 20 May 2024 18:27:43 +0000
Subordinate resources:    AS: 262239
                          IP: 186.65.88.0/22
                          IP: 190.211.145.0 -- 190.211.148.255
                          IP: 2803:9a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15090602 (0xe643aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:45 2017 GMT
            Not After : May 20 18:27:43 2024 GMT
        Subject: CN=b0aa757766600ae92f780498bacfcff9762981a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2d:a5:d8:ad:0d:87:02:01:da:71:96:c9:0e:
                    b6:92:b2:d2:fb:fe:6b:de:8e:a8:dc:aa:32:3e:cf:
                    c9:24:e7:f2:3f:da:f7:22:11:a5:7a:3d:f7:62:ce:
                    b8:4c:20:d9:ed:0b:40:48:22:38:c3:f3:f2:27:6f:
                    66:e3:97:41:40:fe:04:69:2c:5c:4d:5f:f4:7a:ba:
                    d4:f9:12:5b:28:cb:df:fb:f8:ef:0b:5b:6d:75:04:
                    26:e0:00:f1:79:54:bf:62:91:1c:85:a9:99:29:87:
                    f6:9a:b3:dd:17:fe:f1:08:92:16:cd:d4:b4:e8:06:
                    12:4f:e8:22:32:2d:a2:56:75:e9:e2:78:48:73:b2:
                    f5:cb:fa:09:75:b7:55:38:95:a2:34:bc:ff:66:52:
                    e7:83:b8:37:08:d8:e3:28:67:ce:19:7e:d1:98:57:
                    9c:bb:96:e3:df:b6:57:08:dc:b7:1f:66:e9:10:de:
                    19:26:40:3f:4b:5d:b3:b3:9f:77:ad:fd:38:69:4f:
                    a3:9c:05:7b:f1:d5:a2:05:37:df:8c:e1:e8:db:8e:
                    8c:93:52:20:f0:07:db:f4:98:5e:23:be:10:64:fa:
                    39:c0:ab:f3:2d:d0:6b:b6:9a:a3:44:44:89:c6:00:
                    3a:d5:aa:6f:95:96:56:ee:14:1e:7f:46:62:30:76:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/b0aa757766600ae92f780498bacfcff9762981a2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.88.0/22
                  190.211.145.0-190.211.148.255
                IPv6:
                  2803:9a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262239

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:03:e5:3b:8e:aa:17:00:20:1e:78:46:ee:5b:2d:c8:4e:
         06:36:c3:28:a8:3e:e6:d9:fd:6c:5a:00:0f:76:7c:0e:10:a4:
         76:bc:be:a7:c3:1f:b0:69:77:de:16:a4:02:8c:dd:c2:ce:dd:
         c7:8d:0a:c8:62:b2:69:a0:e5:0b:f4:e9:c5:79:cb:87:ac:4a:
         a8:09:28:37:58:77:bf:67:92:a2:9f:32:06:18:3b:72:f3:6c:
         cb:85:7e:e6:e7:7d:32:01:7f:ec:c2:0e:62:bd:cd:d0:5d:42:
         0d:66:54:54:6e:53:53:36:55:3d:f5:82:2f:17:f8:31:e2:06:
         54:5a:09:aa:f6:4c:94:71:30:b0:22:c1:fe:2a:43:53:e0:f5:
         eb:8b:c0:f4:c3:3b:8b:64:29:18:ad:2f:68:03:34:95:40:c9:
         e0:95:dc:6d:8b:1d:43:4d:33:95:1b:e8:77:46:17:6d:65:f0:
         8d:9e:7b:0d:42:07:b3:df:8b:f0:4d:b2:8c:75:2a:06:c6:5a:
         4a:50:57:19:5f:4e:22:77:43:91:c0:01:0c:16:21:72:57:c4:
         c5:47:62:cd:c8:97:aa:68:bf:66:12:f0:82:1d:27:53:67:35:
         f3:1b:7e:b0:f5:1d:61:ee:15:ab:3e:b8:3f:4c:68:00:d0:30:
         58:db:af:6c
-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgIEAOZDqjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0NVoXDTI0MDUyMDE4Mjc0
M1owMzExMC8GA1UEAxMoYjBhYTc1Nzc2NjYwMGFlOTJmNzgwNDk4YmFjZmNmZjk3
NjI5ODFhMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIMtpditDYcC
AdpxlskOtpKy0vv+a96OqNyqMj7PySTn8j/a9yIRpXo992LOuEwg2e0LQEgiOMPz
8idvZuOXQUD+BGksXE1f9Hq61PkSWyjL3/v47wtbbXUEJuAA8XlUv2KRHIWpmSmH
9pqz3Rf+8QiSFs3UtOgGEk/oIjItolZ16eJ4SHOy9cv6CXW3VTiVojS8/2ZS54O4
NwjY4yhnzhl+0ZhXnLuW49+2Vwjctx9m6RDeGSZAP0tds7Ofd639OGlPo5wFe/HV
ogU334zh6NuOjJNSIPAH2/SYXiO+EGT6OcCr8y3Qa7aao0REicYAOtWqb5WWVu4U
Hn9GYjB2JQECAwEAAaOCAxcwggMTMB0GA1UdDgQWBBQRssbsscLgyu7yJwWhNTuF
/7DpIzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81NjdkZjhjMi1mY2Q2
LTQxNTgtYTA2Yy1hZDIwOTYwZWEyMDcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTY3ZGY4YzItZmNkNi00
MTU4LWEwNmMtYWQyMDk2MGVhMjA3L2IwYWE3NTc3NjY2MDBhZTkyZjc4MDQ5OGJh
Y2ZjZmY5NzYyOTgxYTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGgQCAAEwFAMEArpBWDAMAwQAvtORAwQAvtOUMA0E
AgACMAcDBQAoA5oAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQAXzANBgkqhkiG
9w0BAQsFAAOCAQEASvoD5TuOqhcAIB54Ru5bLchOBjbDKKg+5tn9bFoAD3Z8DhCk
dry+p8MfsGl33hakAozdws7dx40KyGKyaaDlC/TpxXnLh6xKqAkoN1h3v2eSop8y
Bhg7cvNsy4V+5ud9MgF/7MIOYr3N0F1CDWZUVG5TUzZVPfWCLxf4MeIGVFoJqvZM
lHEwsCLB/ipDU+D164vA9MM7i2QpGK0vaAM0lUDJ4JXcbYsdQ00zlRvod0YXbWXw
jZ57DUIHs9+L8E2yjHUqBsZaSlBXGV9OIndDkcABDBYhclfExUdizciXqmi/ZhLw
gh0nU2c18xt+sPUdYe4Vqz64P0xoANAwWNuvbA==
-----END CERTIFICATE-----