Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b14932b827e5b166c58065cb1f4068a039d95258.cer
File:                     b14932b827e5b166c58065cb1f4068a039d95258.cer (raw, json)
Hash identifier:          Gvl9iA9fcrWA6It8X0GsLD9Ggu1bnwesRp+1bhMzcxg=
Subject key identifier:   D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5FB35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/b14932b827e5b166c58065cb1f4068a039d95258.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:45 +0000
Certificate not after:    Sat 21 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 28094
                          IP: 131.161.148.0/22
                          IP: 200.123.208.0/21
                          IP: 2803:7900::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16120629 (0xf5fb35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:45 2017 GMT
            Not After : Sep 21 05:00:00 2024 GMT
        Subject: CN=b14932b827e5b166c58065cb1f4068a039d95258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:7b:aa:d4:2a:82:50:72:19:e0:21:ca:ce:
                    e3:90:4a:d7:83:73:5a:36:65:25:43:0e:54:05:76:
                    55:59:ab:a2:9c:36:18:67:23:33:7f:c0:4d:de:69:
                    60:bb:62:cc:91:3a:24:2c:f0:8c:97:1f:73:f5:41:
                    b2:74:c4:3e:43:62:34:62:0f:7d:84:8c:ce:5b:fc:
                    56:ad:fb:18:b8:8b:b0:19:62:84:c7:db:a9:3a:84:
                    ef:20:59:c9:3c:d3:12:05:4a:da:57:94:49:70:3b:
                    67:4e:49:f9:8e:c6:84:d0:47:82:a4:9e:4e:50:5d:
                    e4:0a:82:34:ce:85:a4:5d:a5:b9:cd:e0:4c:8d:d0:
                    7d:af:26:e7:e2:01:cf:2a:af:ab:32:cb:66:c1:dc:
                    e8:93:98:2b:47:75:35:c3:cf:7e:23:88:74:72:63:
                    fa:55:1a:df:d9:8e:ef:f6:ab:07:07:68:87:b8:7f:
                    40:d4:1f:70:c0:80:89:bb:3f:fd:87:c5:b6:92:4f:
                    b6:a9:b1:d4:04:1d:42:c5:7a:05:ba:48:bd:5b:eb:
                    be:aa:46:cb:ed:75:0f:73:de:bf:0c:ce:e1:08:95:
                    41:7b:6c:d4:8e:d8:c5:96:c4:91:9b:80:24:70:b1:
                    06:41:53:3a:80:4b:85:b8:47:c1:b9:00:86:87:90:
                    03:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/b14932b827e5b166c58065cb1f4068a039d95258.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.148.0/22
                  200.123.208.0/21
                IPv6:
                  2803:7900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28094

    Signature Algorithm: sha256WithRSAEncryption
         ad:41:61:0e:36:d8:72:43:38:81:e5:5d:9b:2b:17:c8:d7:8b:
         b6:88:a2:60:59:b9:b0:03:49:c7:a9:48:fc:92:8b:7d:e7:74:
         44:4a:fa:bc:f4:6e:71:42:4b:a3:75:c2:c8:66:df:3e:4a:89:
         2a:28:8e:59:e8:bd:fc:40:af:f8:29:5e:41:06:21:a4:77:c5:
         00:31:d8:fc:9b:99:d8:50:bb:da:57:42:cd:a2:cf:ca:b8:21:
         96:5b:a6:7f:94:90:0c:13:06:9f:5a:90:36:57:2b:d1:aa:d8:
         11:d5:20:34:70:10:41:14:b0:e0:f8:14:9a:d8:d8:01:02:99:
         13:4a:a3:aa:17:07:88:a1:fe:ba:7c:74:ad:0d:6a:a0:80:40:
         1a:d1:31:15:3c:49:ed:17:cc:79:ce:8c:cd:da:08:10:8f:6c:
         35:9c:8d:cf:a2:ea:82:33:b1:9b:e0:4a:a2:45:f9:ab:75:06:
         29:a8:cb:6b:56:8b:26:dc:97:ee:51:80:96:d6:4c:e7:c7:2d:
         3e:7e:65:c3:41:6c:c7:30:63:f1:d4:a9:05:3f:06:cd:0c:f5:
         1a:a2:bc:cb:5c:99:1a:a4:3f:3d:a9:48:e9:d0:d2:b2:d2:af:
         9b:70:8c:a7:36:42:fd:32:43:d8:f3:a6:0b:0d:55:97:e3:f9:
         dc:49:41:c8
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIEAPX7NTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0NVoXDTI0MDkyMTA1MDAw
MFowMzExMC8GA1UEAxMoYjE0OTMyYjgyN2U1YjE2NmM1ODA2NWNiMWY0MDY4YTAz
OWQ5NTI1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ3le6rUKoJQ
chngIcrO45BK14NzWjZlJUMOVAV2VVmropw2GGcjM3/ATd5pYLtizJE6JCzwjJcf
c/VBsnTEPkNiNGIPfYSMzlv8Vq37GLiLsBlihMfbqTqE7yBZyTzTEgVK2leUSXA7
Z05J+Y7GhNBHgqSeTlBd5AqCNM6FpF2luc3gTI3Qfa8m5+IBzyqvqzLLZsHc6JOY
K0d1NcPPfiOIdHJj+lUa39mO7/arBwdoh7h/QNQfcMCAibs//YfFtpJPtqmx1AQd
QsV6BbpIvVvrvqpGy+11D3PevwzO4QiVQXts1I7YxZbEkZuAJHCxBkFTOoBLhbhH
wbkAhoeQA9sCAwEAAaOCAw4wggMKMB0GA1UdDgQWBBTS4ItI+YDhRWwINGVVybRT
yQuc3DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jNmVkMGQzZS0xNThh
LTRiNWUtYWM5MC05YjM3MDU5OTlkMzcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzZlZDBkM2UtMTU4YS00
YjVlLWFjOTAtOWIzNzA1OTk5ZDM3L2IxNDkzMmI4MjdlNWIxNjZjNTgwNjVjYjFm
NDA2OGEwMzlkOTUyNTgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAoOhlAMEA8h70DANBAIAAjAHAwUA
KAN5ADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJtvjANBgkqhkiG9w0BAQsFAAOC
AQEArUFhDjbYckM4geVdmysXyNeLtoiiYFm5sANJx6lI/JKLfed0REr6vPRucUJL
o3XCyGbfPkqJKiiOWei9/ECv+CleQQYhpHfFADHY/JuZ2FC72ldCzaLPyrghllum
f5SQDBMGn1qQNlcr0arYEdUgNHAQQRSw4PgUmtjYAQKZE0qjqhcHiKH+unx0rQ1q
oIBAGtExFTxJ7RfMec6MzdoIEI9sNZyNz6LqgjOxm+BKokX5q3UGKajLa1aLJtyX
7lGAltZM58ctPn5lw0FsxzBj8dSpBT8GzQz1GqK8y1yZGqQ/PalI6dDSstKvm3CM
pzZC/TJD2POmCw1Vl+P53ElByA==
-----END CERTIFICATE-----