Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bada1b221e9d59bee5cea814e744cb7da002bd3f.cer
File:                     bada1b221e9d59bee5cea814e744cb7da002bd3f.cer (raw, json)
Hash identifier:          s2L5iT0O31fL0kDKmayy8D4vb6xBugC7m0Xtay9840I=
Subject key identifier:   04:96:21:6F:36:98:65:44:94:7A:C1:9D:44:06:90:4D:57:78:79:B6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E67096
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/da38814e-d13e-4782-9cc8-02bd6a5484ae/bada1b221e9d59bee5cea814e744cb7da002bd3f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/da38814e-d13e-4782-9cc8-02bd6a5484ae/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 20 Jul 2018 13:38:08 +0000
Certificate not after:    Sun 30 Jun 2024 14:29:31 +0000
Subordinate resources:    AS: 265806
                          IP: 181.191.186.0/23
                          IP: 2801:1f:3000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15102102 (0xe67096)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 20 13:38:08 2018 GMT
            Not After : Jun 30 14:29:31 2024 GMT
        Subject: CN=bada1b221e9d59bee5cea814e744cb7da002bd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:32:80:a1:9a:5d:5c:6a:5b:36:44:db:fc:
                    db:2e:10:ac:84:1f:44:f2:e5:3f:58:cb:87:96:c4:
                    5e:e8:b5:e9:c3:46:a5:9c:e1:8a:fd:76:90:a8:16:
                    fe:c2:59:34:3d:4a:eb:ec:0e:27:6b:fe:42:a3:86:
                    cc:09:42:44:2a:3a:08:4e:89:c1:55:40:e5:2a:e3:
                    35:d5:59:eb:17:a4:0d:9b:be:fa:15:87:9f:f6:74:
                    97:84:9f:76:ad:02:87:0a:5d:da:a6:c1:f4:eb:cf:
                    30:8c:13:74:24:88:e3:01:84:52:f3:2f:3e:74:a4:
                    2f:2a:73:92:d8:84:35:eb:fb:9a:68:89:fa:7f:34:
                    ca:b1:3c:4b:81:be:aa:af:ea:20:55:f5:e8:d1:7e:
                    b0:4c:6d:33:df:f8:be:15:3d:60:4e:99:8e:d6:dc:
                    73:a5:c9:d9:0c:57:71:ed:4a:f8:b9:60:34:23:f8:
                    08:8a:27:b7:b7:81:bd:97:c8:e8:ea:df:09:91:88:
                    57:5c:5f:62:82:dc:b3:d9:d9:c3:96:65:f9:84:fc:
                    41:95:2b:7b:fe:c1:85:c6:3f:f9:b8:68:56:08:5a:
                    65:7a:b7:d6:3f:15:17:f0:96:c5:fa:82:fc:30:7d:
                    10:12:cb:e4:fb:9b:49:2e:54:67:d0:f0:b6:78:33:
                    52:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:96:21:6F:36:98:65:44:94:7A:C1:9D:44:06:90:4D:57:78:79:B6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/da38814e-d13e-4782-9cc8-02bd6a5484ae/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/da38814e-d13e-4782-9cc8-02bd6a5484ae/bada1b221e9d59bee5cea814e744cb7da002bd3f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.186.0/23
                IPv6:
                  2801:1f:3000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265806

    Signature Algorithm: sha256WithRSAEncryption
         89:5c:8b:27:b0:24:59:a8:dc:3d:af:04:04:ca:6d:82:34:e7:
         ff:7a:59:4e:b7:f8:fa:e4:85:93:57:1e:f7:82:5d:4b:ad:8f:
         21:d4:ba:38:83:ec:4b:ed:22:45:85:0d:06:8c:bf:b0:a5:a0:
         c5:3d:ae:55:30:c9:49:a6:c9:4a:76:72:98:08:87:1a:f0:1f:
         38:32:62:ee:eb:f8:51:cb:bb:96:a3:7a:53:8b:9b:b5:5d:73:
         a6:d0:35:cb:9e:41:af:fb:64:69:6c:d4:60:46:bd:eb:fe:ba:
         c4:16:40:65:f2:87:78:6c:0b:41:35:a8:37:e8:bf:5f:21:7d:
         d7:e3:db:c1:fb:4c:c6:e7:8e:ca:d8:19:4b:22:b5:9a:80:1b:
         0f:20:d0:83:5a:31:73:36:af:12:8b:13:eb:09:6d:44:f4:8f:
         c4:fc:0c:ab:1c:c4:c3:06:ba:de:a5:d6:b1:d8:74:af:49:b1:
         c0:ac:ba:f7:7e:3b:55:4a:ed:95:98:47:dc:3a:54:db:25:0d:
         1a:07:b8:79:fa:3e:f6:5e:01:56:41:a4:0b:cf:4f:2d:76:7b:
         0e:10:a4:35:21:35:fb:5e:02:45:a0:a6:38:f0:2f:61:54:c1:
         84:9a:a7:c2:3d:8b:03:e2:40:66:9a:2a:82:15:1e:d9:02:91:
         1c:25:06:24
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAOZwljANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDcyMDEzMzgwOFoXDTI0MDYzMDE0Mjkz
MVowMzExMC8GA1UEAxMoYmFkYTFiMjIxZTlkNTliZWU1Y2VhODE0ZTc0NGNiN2Rh
MDAyYmQzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJtMoChml1c
als2RNv82y4QrIQfRPLlP1jLh5bEXui16cNGpZzhiv12kKgW/sJZND1K6+wOJ2v+
QqOGzAlCRCo6CE6JwVVA5SrjNdVZ6xekDZu++hWHn/Z0l4Sfdq0Chwpd2qbB9OvP
MIwTdCSI4wGEUvMvPnSkLypzktiENev7mmiJ+n80yrE8S4G+qq/qIFX16NF+sExt
M9/4vhU9YE6Zjtbcc6XJ2QxXce1K+LlgNCP4CIont7eBvZfI6OrfCZGIV1xfYoLc
s9nZw5Zl+YT8QZUre/7BhcY/+bhoVghaZXq31j8VF/CWxfqC/DB9EBLL5PubSS5U
Z9DwtngzUl8CAwEAAaOCAwswggMHMB0GA1UdDgQWBBQEliFvNphlRJR6wZ1EBpBN
V3h5tjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kYTM4ODE0ZS1kMTNl
LTQ3ODItOWNjOC0wMmJkNmE1NDg0YWUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZGEzODgxNGUtZDEzZS00
NzgyLTljYzgtMDJiZDZhNTQ4NGFlL2JhZGExYjIyMWU5ZDU5YmVlNWNlYTgxNGU3
NDRjYjdkYTAwMmJkM2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAbW/ujAPBAIAAjAJAwcAKAEAHzAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOTjANBgkqhkiG9w0BAQsFAAOCAQEA
iVyLJ7AkWajcPa8EBMptgjTn/3pZTrf4+uSFk1ce94JdS62PIdS6OIPsS+0iRYUN
Boy/sKWgxT2uVTDJSabJSnZymAiHGvAfODJi7uv4Ucu7lqN6U4ubtV1zptA1y55B
r/tkaWzUYEa96/66xBZAZfKHeGwLQTWoN+i/XyF91+PbwftMxueOytgZSyK1moAb
DyDQg1oxczavEosT6wltRPSPxPwMqxzEwwa63qXWsdh0r0mxwKy69347VUrtlZhH
3DpU2yUNGge4efo+9l4BVkGkC89PLXZ7DhCkNSE1+14CRaCmOPAvYVTBhJqnwj2L
A+JAZpoqghUe2QKRHCUGJA==
-----END CERTIFICATE-----