Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer
File:                     e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer (raw, json)
Hash identifier:          EuukOyb7zyYKHrmWJRbE4hfa47irvAKyQ85fdhLMOHQ=
Subject key identifier:   AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA4201
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:29 +0000
Certificate not after:    Mon 22 Jan 2024 14:00:00 +0000
Subordinate resources:    AS: 20207
                          IP: 138.0.152.0/22
                          IP: 143.202.16.0/22
                          IP: 170.78.192.0/22
                          IP: 190.7.0.0/18
                          IP: 190.57.224.0/19
                          IP: 190.183.0.0/16
                          IP: 200.229.148.0/22
                          IP: 2800:6f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14303745 (0xda4201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:29 2017 GMT
            Not After : Jan 22 14:00:00 2024 GMT
        Subject: CN=e2edf50309c3c920eebef8b0ecf1643bb8c31a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:12:a4:ee:f8:70:6c:8d:b2:ef:88:c8:ae:
                    25:5f:29:cd:83:a1:c0:0d:12:79:b7:51:72:3d:7e:
                    20:8d:99:91:36:e2:87:eb:62:ef:46:1b:28:22:a0:
                    53:f2:ee:98:4d:15:6c:5d:fe:41:6e:2f:b6:a7:6c:
                    1d:dc:8e:62:52:56:7b:36:1c:d9:da:ef:26:85:dd:
                    57:2d:4e:53:92:47:29:9a:05:9a:92:38:f7:8f:19:
                    e5:ee:b8:64:fa:e5:a4:20:43:e6:c8:80:38:0a:73:
                    c1:b8:a9:2d:e1:23:c2:3b:92:f4:39:f2:70:c0:4d:
                    1d:d0:6f:3f:ab:2e:9d:00:ae:bc:96:cf:42:13:e6:
                    22:d6:90:64:b9:66:cd:c8:c4:b9:ba:ac:73:69:40:
                    bd:4b:9a:93:a5:a9:73:6a:43:e3:a3:c7:23:db:ae:
                    24:99:89:c1:f6:13:4f:a9:e2:f9:ae:bd:7e:c2:91:
                    ee:40:d4:02:de:3e:c5:0e:0b:9a:ee:26:a0:6b:1c:
                    2b:12:5f:bd:8c:34:e0:2c:bd:6d:70:9b:d7:7c:21:
                    1d:7e:17:2e:5e:ba:be:49:82:39:c1:26:18:8d:9a:
                    67:00:85:93:e8:06:7a:95:85:29:a5:38:70:4e:d0:
                    5a:1b:15:eb:99:00:1c:34:b7:38:1d:e9:aa:3b:24:
                    01:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.152.0/22
                  143.202.16.0/22
                  170.78.192.0/22
                  190.7.0.0/18
                  190.57.224.0/19
                  190.183.0.0/16
                  200.229.148.0/22
                IPv6:
                  2800:6f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20207

    Signature Algorithm: sha256WithRSAEncryption
         1d:bb:67:cd:88:25:a8:c9:4c:21:45:3e:a3:08:35:2d:37:24:
         a2:3f:91:19:05:7d:af:ff:3d:d5:a9:11:bf:09:d6:08:1c:0f:
         fd:de:f9:8f:94:5f:39:78:40:87:b9:0b:cb:ec:af:23:9e:03:
         15:e1:0d:b9:91:4e:5a:7c:8d:19:f1:91:b0:9a:e8:f6:76:2a:
         8e:bb:d2:3c:cb:a7:18:0b:b0:b5:bd:0d:31:2e:bd:5a:86:d0:
         a7:4e:61:e8:da:0d:a1:64:3f:da:65:62:b4:a2:e7:27:f7:24:
         c0:68:94:6f:b2:46:ab:f9:bb:df:43:ba:e6:5c:0a:7a:d9:07:
         d4:14:a1:cd:21:d0:6c:01:fd:f2:2a:b1:a9:e4:4d:ed:bd:27:
         77:16:24:7a:c5:63:df:65:b8:f6:d1:d7:d8:39:b1:4e:df:34:
         c4:8a:45:10:36:b5:67:39:2e:98:64:ae:dd:8e:22:b4:3b:82:
         8b:c0:b3:2c:70:22:47:1b:e1:b4:2a:66:73:3a:6b:d1:fc:0a:
         93:14:be:4f:58:25:f1:6e:cd:2f:fb:d0:5d:ea:9b:d2:f2:ce:
         91:43:df:0d:51:36:08:0a:7b:4a:bc:62:80:9a:df:ab:ce:46:
         ba:92:2b:62:48:64:59:d9:cb:fa:7d:c7:af:55:37:9f:4c:bd:
         00:29:60:47
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgIEANpCATANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyOVoXDTI0MDEyMjE0MDAw
MFowMzExMC8GA1UEAxMoZTJlZGY1MDMwOWMzYzkyMGVlYmVmOGIwZWNmMTY0M2Ji
OGMzMWExMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMRtEqTu+HBs
jbLviMiuJV8pzYOhwA0SebdRcj1+II2ZkTbih+ti70YbKCKgU/LumE0VbF3+QW4v
tqdsHdyOYlJWezYc2drvJoXdVy1OU5JHKZoFmpI4948Z5e64ZPrlpCBD5siAOApz
wbipLeEjwjuS9DnycMBNHdBvP6sunQCuvJbPQhPmItaQZLlmzcjEubqsc2lAvUua
k6Wpc2pD46PHI9uuJJmJwfYTT6ni+a69fsKR7kDUAt4+xQ4Lmu4moGscKxJfvYw0
4Cy9bXCb13whHX4XLl66vkmCOcEmGI2aZwCFk+gGepWFKaU4cE7QWhsV65kAHDS3
OB3pqjskAWsCAwEAAaOCAyswggMnMB0GA1UdDgQWBBSsauvbhmOEA2guBzNlYn+X
NcxK5jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83ZGNkMjNmYy0wMGI4
LTRmOTUtYmY0OS05ZWNjZDE0ZWE2NDgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN2RjZDIzZmMtMDBiOC00
Zjk1LWJmNDktOWVjY2QxNGVhNjQ4L2UyZWRmNTAzMDljM2M5MjBlZWJlZjhiMGVj
ZjE2NDNiYjhjMzFhMTAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBR
BggrBgEFBQcBBwEB/wRCMEAwLwQCAAEwKQMEAooAmAMEAo/KEAMEAqpOwAMEBr4H
AAMEBb454AMDAL63AwQCyOWUMA0EAgACMAcDBQAoAAbwMBkGCCsGAQUFBwEIAQH/
BAowCKAGMAQCAk7vMA0GCSqGSIb3DQEBCwUAA4IBAQAdu2fNiCWoyUwhRT6jCDUt
NySiP5EZBX2v/z3VqRG/CdYIHA/93vmPlF85eECHuQvL7K8jngMV4Q25kU5afI0Z
8ZGwmuj2diqOu9I8y6cYC7C1vQ0xLr1ahtCnTmHo2g2hZD/aZWK0oucn9yTAaJRv
skar+bvfQ7rmXAp62QfUFKHNIdBsAf3yKrGp5E3tvSd3FiR6xWPfZbj20dfYObFO
3zTEikUQNrVnOS6YZK7djiK0O4KLwLMscCJHG+G0KmZzOmvR/AqTFL5PWCXxbs0v
+9Bd6pvS8s6RQ98NUTYICntKvGKAmt+rzka6kitiSGRZ2cv6fcevVTefTL0AKWBH
-----END CERTIFICATE-----