Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbd36e815108aff3b7b3a80ea6302316bea35e09.cer
File:                     dbd36e815108aff3b7b3a80ea6302316bea35e09.cer (raw, json)
Hash identifier:          qERw+nACKztb81qWLZ0jhF8OEd7/FedyL2LfjDvS0E0=
Subject key identifier:   77:88:5B:39:00:EE:9E:4E:18:31:E5:B3:56:5A:B0:E7:AA:12:1C:D5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2FB1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/dbd36e815108aff3b7b3a80ea6302316bea35e09.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2017 13:43:15 +0000
Certificate not after:    Tue 30 Apr 2024 21:41:43 +0000
Subordinate resources:    AS: 271970
                          IP: 131.196.188.0/22
                          IP: 2803:dbc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14875422 (0xe2fb1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 11 13:43:15 2017 GMT
            Not After : Apr 30 21:41:43 2024 GMT
        Subject: CN=dbd36e815108aff3b7b3a80ea6302316bea35e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fa:12:df:cd:de:fe:3a:33:3e:1e:3d:51:3b:
                    6b:69:f9:4f:3d:63:a0:41:5e:18:12:c2:1e:db:3f:
                    93:d1:0c:65:4f:3e:df:9d:12:e6:c8:bb:3c:7c:6d:
                    83:25:2f:c9:c1:fd:4c:60:8c:4e:83:5a:a5:3c:b8:
                    44:fc:49:df:73:cd:67:66:8f:23:4c:7e:0f:71:0e:
                    71:7d:cb:bf:79:08:d3:67:39:a8:87:e8:80:1b:07:
                    93:81:63:da:fb:95:a8:58:06:a5:79:a8:11:33:6c:
                    43:4c:c2:ea:e5:ce:0c:8d:ad:53:81:4e:6e:31:74:
                    2a:4b:5c:d6:7a:70:6d:f1:39:1e:38:19:d0:a0:40:
                    60:e9:17:a5:5d:c8:ab:c0:fa:52:87:43:71:08:27:
                    f2:5a:70:96:a2:99:40:2a:b7:4a:23:94:9d:10:36:
                    e2:12:18:7e:f8:05:ce:0d:00:ac:fc:13:63:7d:1d:
                    77:69:8a:bd:7f:31:10:b8:89:c7:72:2c:df:0c:89:
                    12:80:f7:a8:ee:71:01:e3:9f:46:88:d4:52:d2:4f:
                    ad:f0:17:fd:df:f8:69:40:81:3e:f1:d4:62:c7:82:
                    65:5f:a8:a6:15:f2:b3:07:25:45:55:af:01:53:1f:
                    77:86:60:3d:6d:e3:50:c3:a2:40:2c:ab:37:10:e8:
                    a7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:88:5B:39:00:EE:9E:4E:18:31:E5:B3:56:5A:B0:E7:AA:12:1C:D5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/dbd36e815108aff3b7b3a80ea6302316bea35e09.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.188.0/22
                IPv6:
                  2803:dbc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271970

    Signature Algorithm: sha256WithRSAEncryption
         25:40:44:71:35:16:89:1d:f6:93:1c:47:9d:8e:65:71:b7:cb:
         c8:1f:5e:c7:3b:74:75:98:06:5a:cd:62:89:0c:43:70:dc:e1:
         8c:2c:c8:b0:b4:fc:b8:0d:66:2c:59:fc:6e:85:7a:58:b4:8a:
         57:f8:d7:0c:eb:bb:b7:40:ce:32:e4:57:e4:53:b1:71:fe:1f:
         08:da:0e:a5:cf:e0:e6:15:17:10:2a:e3:06:71:15:68:6a:c9:
         f3:c9:89:62:37:8b:f4:e3:0e:0a:a2:82:22:94:16:3c:1d:08:
         f2:07:df:ec:39:52:9f:50:3b:00:67:04:98:47:f8:bb:40:77:
         e1:3d:12:6a:76:10:d4:8e:3c:e6:18:98:06:ee:8a:ec:1b:fe:
         a9:3f:61:e6:22:4d:e9:d7:1d:d0:01:de:57:a8:97:64:20:13:
         9f:90:c9:59:25:6a:3b:d4:9b:7d:86:89:47:2e:f5:9a:d1:bf:
         e3:a0:c4:d5:12:cb:3f:3c:87:bf:5f:f3:54:bb:7c:9b:ce:74:
         c9:80:2c:b7:dd:e1:df:fe:23:c1:33:85:b8:6c:7f:77:f3:fe:
         ba:1c:48:a7:ea:95:bd:86:6e:d6:6a:4a:39:2f:1d:35:e8:b3:
         e9:2e:9c:fc:10:d4:f4:91:0a:69:cf:15:98:d2:73:07:e7:06:
         46:34:96:27
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOL7HjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTIxMTEzNDMxNVoXDTI0MDQzMDIxNDE0
M1owMzExMC8GA1UEAxMoZGJkMzZlODE1MTA4YWZmM2I3YjNhODBlYTYzMDIzMTZi
ZWEzNWUwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL76Et/N3v46
Mz4ePVE7a2n5Tz1joEFeGBLCHts/k9EMZU8+350S5si7PHxtgyUvycH9TGCMToNa
pTy4RPxJ33PNZ2aPI0x+D3EOcX3Lv3kI02c5qIfogBsHk4Fj2vuVqFgGpXmoETNs
Q0zC6uXODI2tU4FObjF0Kktc1npwbfE5HjgZ0KBAYOkXpV3Iq8D6UodDcQgn8lpw
lqKZQCq3SiOUnRA24hIYfvgFzg0ArPwTY30dd2mKvX8xELiJx3Is3wyJEoD3qO5x
AeOfRojUUtJPrfAX/d/4aUCBPvHUYseCZV+ophXyswclRVWvAVMfd4ZgPW3jUMOi
QCyrNxDop3sCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBR3iFs5AO6eThgx5bNWWrDn
qhIc1TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wOWRkZGYwOC1jYzky
LTQzNWUtYTY2MC02NTc4MWRhM2M5NGUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDlkZGRmMDgtY2M5Mi00
MzVlLWE2NjAtNjU3ODFkYTNjOTRlL2RiZDM2ZTgxNTEwOGFmZjNiN2IzYTgwZWE2
MzAyMzE2YmVhMzVlMDkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoPEvDANBAIAAjAHAwUAKAPbwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJmIwDQYJKoZIhvcNAQELBQADggEBACVA
RHE1Fokd9pMcR52OZXG3y8gfXsc7dHWYBlrNYokMQ3Dc4YwsyLC0/LgNZixZ/G6F
eli0ilf41wzru7dAzjLkV+RTsXH+HwjaDqXP4OYVFxAq4wZxFWhqyfPJiWI3i/Tj
DgqigiKUFjwdCPIH3+w5Up9QOwBnBJhH+LtAd+E9Emp2ENSOPOYYmAbuiuwb/qk/
YeYiTenXHdAB3leol2QgE5+QyVklajvUm32GiUcu9ZrRv+OgxNUSyz88h79f81S7
fJvOdMmALLfd4d/+I8Ezhbhsf3fz/rocSKfqlb2GbtZqSjkvHTXos+kunPwQ1PSR
CmnPFZjScwfnBkY0lic=
-----END CERTIFICATE-----