Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2bd70707004d0ed541501541c2c5f8b2c430764.cer
File:                     d2bd70707004d0ed541501541c2c5f8b2c430764.cer (raw, json)
Hash identifier:          uqu5zH0/owH8oqpnf1j58jQ8xtqxmch5tFrwkXtA50M=
Subject key identifier:   4B:E3:91:A7:FF:32:27:85:74:D2:9D:87:7E:44:E9:23:7F:2A:C8:F3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF6196
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ef1fa093-85a4-48ab-ae65-933d18675a28/d2bd70707004d0ed541501541c2c5f8b2c430764.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ef1fa093-85a4-48ab-ae65-933d18675a28/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:26 +0000
Certificate not after:    Fri 26 Jul 2024 15:00:00 +0000
Subordinate resources:    AS: 27999
                          IP: 200.10.205.0/24
                          IP: 201.131.115.0/24
                          IP: 2801:1b:e000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15688086 (0xef6196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:26 2017 GMT
            Not After : Jul 26 15:00:00 2024 GMT
        Subject: CN=d2bd70707004d0ed541501541c2c5f8b2c430764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:18:a1:49:fb:7c:ab:ae:df:7b:f5:d0:97:05:
                    8d:2d:58:31:0d:42:25:33:d5:04:8e:98:cc:3f:55:
                    19:ed:e0:61:8e:81:86:dc:13:5c:9d:1f:73:17:f6:
                    7d:f4:c8:7a:a1:43:db:d2:52:b6:67:d9:f3:e3:23:
                    51:c6:74:e1:04:73:18:c4:ba:ec:05:26:9f:35:17:
                    22:b0:7a:38:a1:09:16:78:e6:d9:79:c8:86:40:4c:
                    bf:c4:42:e8:f1:3a:bc:03:7b:5e:b1:4b:99:83:81:
                    7d:78:a4:12:b5:19:71:77:11:80:cb:7a:50:b7:e3:
                    cd:fd:80:0b:5d:cf:9e:40:7a:8b:7b:49:f6:17:d8:
                    de:52:6a:c6:ea:0c:21:2d:52:c8:62:31:6b:49:56:
                    63:36:d9:70:d3:85:b3:71:c3:06:9f:14:d3:e2:5f:
                    3f:53:f8:08:1a:18:99:64:73:fe:7a:0a:ce:52:75:
                    97:25:52:ad:0d:4a:c8:70:0f:1e:1c:cf:d8:14:b6:
                    bb:e4:90:34:c1:55:9e:43:65:a8:40:d2:86:0f:67:
                    33:11:a5:f9:27:84:fd:cf:ed:67:7c:8c:3c:a4:69:
                    60:dc:07:55:51:7a:34:a0:be:dd:e6:19:72:d2:6b:
                    6b:90:23:d3:0a:3d:f1:bf:e6:1f:7a:c3:1b:b8:d3:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E3:91:A7:FF:32:27:85:74:D2:9D:87:7E:44:E9:23:7F:2A:C8:F3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ef1fa093-85a4-48ab-ae65-933d18675a28/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ef1fa093-85a4-48ab-ae65-933d18675a28/d2bd70707004d0ed541501541c2c5f8b2c430764.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.205.0/24
                  201.131.115.0/24
                IPv6:
                  2801:1b:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27999

    Signature Algorithm: sha256WithRSAEncryption
         88:be:17:99:16:fc:2d:3e:29:5d:42:ef:2c:31:94:5f:e6:26:
         e5:4b:06:53:9f:8e:c0:a3:b7:dd:29:70:3a:e3:ad:db:23:43:
         c6:ec:9d:29:c0:40:c6:08:c0:2a:a0:4b:90:c9:7f:32:7f:a8:
         83:a5:e6:e7:0e:e3:04:e0:ad:15:b2:10:e1:35:d8:fd:12:f8:
         41:c7:a6:8d:83:04:e6:03:63:8d:11:41:ea:a0:ca:ba:63:ee:
         5c:22:4b:e6:31:03:4a:7b:f7:22:ac:13:b0:30:3a:9c:dc:93:
         34:4e:c9:4e:1b:c0:cc:21:73:95:2e:c5:2a:e8:2b:05:9c:20:
         6d:7c:13:00:29:2f:5f:84:43:6c:f3:af:8a:32:f2:a6:a9:97:
         e3:d7:6a:e8:63:10:81:67:e4:6b:29:22:f9:55:a4:2a:0e:78:
         39:e4:52:da:aa:01:00:f1:18:fe:7a:f0:24:72:64:bf:b1:97:
         87:67:e2:3e:f4:e8:81:71:ab:cd:9c:40:f7:2b:55:25:c6:2d:
         3f:83:d2:ef:ce:ab:4a:2e:88:5b:8e:7c:90:23:4e:10:a5:e6:
         41:fa:17:af:25:49:16:37:4a:5f:1c:3b:19:44:e4:ff:22:9c:
         9f:d8:79:4c:7a:ca:3e:7f:53:5f:6f:1e:c4:05:c6:fb:9e:08:
         f4:d1:01:35
-----BEGIN CERTIFICATE-----
MIIF4TCCBMmgAwIBAgIEAO9hljANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcyNloXDTI0MDcyNjE1MDAw
MFowMzExMC8GA1UEAxMoZDJiZDcwNzA3MDA0ZDBlZDU0MTUwMTU0MWMyYzVmOGIy
YzQzMDc2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIMYoUn7fKuu
33v10JcFjS1YMQ1CJTPVBI6YzD9VGe3gYY6BhtwTXJ0fcxf2ffTIeqFD29JStmfZ
8+MjUcZ04QRzGMS67AUmnzUXIrB6OKEJFnjm2XnIhkBMv8RC6PE6vAN7XrFLmYOB
fXikErUZcXcRgMt6ULfjzf2AC13PnkB6i3tJ9hfY3lJqxuoMIS1SyGIxa0lWYzbZ
cNOFs3HDBp8U0+JfP1P4CBoYmWRz/noKzlJ1lyVSrQ1KyHAPHhzP2BS2u+SQNMFV
nkNlqEDShg9nMxGl+SeE/c/tZ3yMPKRpYNwHVVF6NKC+3eYZctJra5Aj0wo98b/m
H3rDG7jTJ3sCAwEAAaOCAxAwggMMMB0GA1UdDgQWBBRL45Gn/zInhXTSnYd+ROkj
fyrI8zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lZjFmYTA5My04NWE0
LTQ4YWItYWU2NS05MzNkMTg2NzVhMjgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWYxZmEwOTMtODVhNC00
OGFiLWFlNjUtOTMzZDE4Njc1YTI4L2QyYmQ3MDcwNzAwNGQwZWQ1NDE1MDE1NDFj
MmM1ZjhiMmM0MzA3NjQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAMgKzQMEAMmDczAPBAIAAjAJAwcA
KAEAG+AAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm1fMA0GCSqGSIb3DQEBCwUA
A4IBAQCIvheZFvwtPildQu8sMZRf5iblSwZTn47Ao7fdKXA6463bI0PG7J0pwEDG
CMAqoEuQyX8yf6iDpebnDuME4K0VshDhNdj9EvhBx6aNgwTmA2ONEUHqoMq6Y+5c
IkvmMQNKe/cirBOwMDqc3JM0TslOG8DMIXOVLsUq6CsFnCBtfBMAKS9fhENs86+K
MvKmqZfj12roYxCBZ+RrKSL5VaQqDng55FLaqgEA8Rj+evAkcmS/sZeHZ+I+9OiB
cavNnED3K1Ulxi0/g9LvzqtKLohbjnyQI04QpeZB+hevJUkWN0pfHDsZROT/Ipyf
2HlMeso+f1Nfbx7EBcb7ngj00QE1
-----END CERTIFICATE-----