Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b91e74406d13ac527977ca1f278bb19b34c53d84.cer
File:                     b91e74406d13ac527977ca1f278bb19b34c53d84.cer (raw, json)
Hash identifier:          Dc0OeqRQ/LefAW+GsZyPb5jNg+M13Q2hqznLfNU9ZQY=
Subject key identifier:   30:62:C6:2C:63:A4:21:14:B5:7E:B4:1C:1C:3B:E8:EC:FE:E4:81:DD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6D7EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3a77bbba-5f16-44c1-9a47-4b0761704a15/b91e74406d13ac527977ca1f278bb19b34c53d84.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3a77bbba-5f16-44c1-9a47-4b0761704a15/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:34 +0000
Certificate not after:    Sat 09 Dec 2023 03:44:14 +0000
Subordinate resources:    AS: 265651
                          IP: 170.83.58.0/24
                          IP: 2801:16:d000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14079978 (0xd6d7ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:34 2017 GMT
            Not After : Dec  9 03:44:14 2023 GMT
        Subject: CN=b91e74406d13ac527977ca1f278bb19b34c53d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:f2:e7:0f:00:3e:9f:61:d8:e7:f4:27:16:
                    ce:d2:4c:b7:25:e0:ee:a1:ac:a3:23:84:8c:df:7d:
                    7d:ec:a0:c8:e6:21:c9:8b:7c:e7:a4:71:d0:38:e8:
                    79:d4:90:32:d7:06:e4:7b:b6:32:c1:97:b0:70:7c:
                    fe:03:e6:6e:89:da:63:92:7d:49:d6:b1:c7:a0:03:
                    76:6b:c1:59:4b:cb:d8:3f:d1:e6:78:8e:da:aa:b8:
                    ae:10:b8:e0:fc:1a:29:9a:ec:5f:6e:b5:01:18:4a:
                    ed:5a:14:12:d3:10:57:4d:03:42:83:ec:bd:d9:c6:
                    60:41:0d:3d:bf:9e:a1:5c:ff:8d:4f:e0:02:df:9b:
                    53:c7:fb:97:44:59:dc:f5:e2:cd:58:5c:6a:e8:f9:
                    82:8e:44:06:a7:38:2d:79:67:0e:5c:88:1d:16:74:
                    a6:fd:81:42:54:e4:c6:0c:ef:5d:52:ba:f2:7c:36:
                    d7:e1:22:28:cd:ca:1f:bf:d5:d8:4f:11:3e:3d:2c:
                    5e:a4:c6:e2:69:f2:0f:6b:8e:a9:df:2f:6f:82:f3:
                    f1:61:aa:04:68:6f:13:ee:bd:fd:6a:a6:fa:30:49:
                    bf:6e:8e:cb:f9:97:e1:ae:1b:6a:e3:d0:ba:70:3d:
                    90:43:7f:67:a2:2e:d3:d1:d6:5c:a8:16:36:00:f0:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:62:C6:2C:63:A4:21:14:B5:7E:B4:1C:1C:3B:E8:EC:FE:E4:81:DD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3a77bbba-5f16-44c1-9a47-4b0761704a15/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3a77bbba-5f16-44c1-9a47-4b0761704a15/b91e74406d13ac527977ca1f278bb19b34c53d84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.58.0/24
                IPv6:
                  2801:16:d000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265651

    Signature Algorithm: sha256WithRSAEncryption
         bb:84:7d:32:d6:07:d8:f6:58:0c:d2:89:41:4f:1b:86:bc:35:
         67:fc:cf:29:5a:32:a4:4f:54:aa:f8:2b:11:18:c6:9d:d0:c6:
         65:85:e3:06:61:f4:61:b7:ca:ac:eb:a1:7d:b1:b6:76:02:ee:
         20:8d:30:0b:29:91:d5:40:91:0b:2e:81:c1:22:43:56:b5:85:
         55:65:96:f9:db:e9:86:1b:2e:06:39:aa:83:a7:73:4c:f6:dd:
         b8:4d:5e:45:c5:64:8c:91:ab:a1:7f:52:4e:49:79:36:a7:99:
         5a:a5:d0:30:cc:d5:ff:85:f2:a3:d2:00:72:0a:82:f2:02:9d:
         0b:79:bc:a8:c6:9a:01:72:b6:70:24:49:29:0c:f1:28:9f:27:
         9d:9e:06:23:69:ca:80:07:f1:a2:28:0d:bf:60:17:b3:d7:6a:
         4f:e8:99:c3:37:76:7b:a1:77:be:8c:85:7a:7a:05:c0:c9:9f:
         15:a1:58:0a:d2:88:1a:c6:de:81:3b:70:20:41:7e:4f:cc:e7:
         77:d4:ec:e7:75:5d:70:8d:f7:ff:92:31:e2:73:da:f9:77:cf:
         aa:d1:41:35:1c:ab:bb:bb:ce:37:3c:db:ab:ab:d4:e9:c9:34:
         70:60:80:cb:7c:e0:15:ba:41:0f:86:80:d4:f3:6c:0f:6b:e8:
         1d:18:51:e1
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEANbX6jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzNFoXDTIzMTIwOTAzNDQx
NFowMzExMC8GA1UEAxMoYjkxZTc0NDA2ZDEzYWM1Mjc5NzdjYTFmMjc4YmIxOWIz
NGM1M2Q4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAInr8ucPAD6f
Ydjn9CcWztJMtyXg7qGsoyOEjN99feygyOYhyYt856Rx0DjoedSQMtcG5Hu2MsGX
sHB8/gPmbonaY5J9Sdaxx6ADdmvBWUvL2D/R5niO2qq4rhC44PwaKZrsX261ARhK
7VoUEtMQV00DQoPsvdnGYEENPb+eoVz/jU/gAt+bU8f7l0RZ3PXizVhcauj5go5E
Bqc4LXlnDlyIHRZ0pv2BQlTkxgzvXVK68nw21+EiKM3KH7/V2E8RPj0sXqTG4mny
D2uOqd8vb4Lz8WGqBGhvE+69/Wqm+jBJv26Oy/mX4a4bauPQunA9kEN/Z6Iu09HW
XKgWNgDwAw0CAwEAAaOCAwswggMHMB0GA1UdDgQWBBQwYsYsY6QhFLV+tBwcO+js
/uSB3TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zYTc3YmJiYS01ZjE2
LTQ0YzEtOWE0Ny00YjA3NjE3MDRhMTUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2E3N2JiYmEtNWYxNi00
NGMxLTlhNDctNGIwNzYxNzA0YTE1L2I5MWU3NDQwNmQxM2FjNTI3OTc3Y2ExZjI3
OGJiMTliMzRjNTNkODQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAKpTOjAPBAIAAjAJAwcAKAEAFtAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNszANBgkqhkiG9w0BAQsFAAOCAQEA
u4R9MtYH2PZYDNKJQU8bhrw1Z/zPKVoypE9UqvgrERjGndDGZYXjBmH0YbfKrOuh
fbG2dgLuII0wCymR1UCRCy6BwSJDVrWFVWWW+dvphhsuBjmqg6dzTPbduE1eRcVk
jJGroX9STkl5NqeZWqXQMMzV/4Xyo9IAcgqC8gKdC3m8qMaaAXK2cCRJKQzxKJ8n
nZ4GI2nKgAfxoigNv2AXs9dqT+iZwzd2e6F3voyFenoFwMmfFaFYCtKIGsbegTtw
IEF+T8znd9Ts53VdcI33/5Ix4nPa+XfPqtFBNRyru7vONzzbq6vU6ck0cGCAy3zg
FbpBD4aA1PNsD2voHRhR4Q==
-----END CERTIFICATE-----