Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66659dfcc8e8859189fa3e445dd43ab55e4c243.cer
File:                     e66659dfcc8e8859189fa3e445dd43ab55e4c243.cer (raw, json)
Hash identifier:          INMPmm0fsrwmMlzMEDRCfzf7D9p35bzKhPHkuyiqn5U=
Subject key identifier:   F2:7A:2E:7D:D6:7B:5D:58:CB:EF:C3:3E:3F:58:57:22:E6:79:A5:26
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F71503
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c50b5fa6-b5f0-4a9d-a7f0-1ec1713a96f7/e66659dfcc8e8859189fa3e445dd43ab55e4c243.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c50b5fa6-b5f0-4a9d-a7f0-1ec1713a96f7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:26 +0000
Certificate not after:    Sun 29 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 27877
                          IP: 190.123.96.0 -- 190.123.119.255
                          IP: 200.110.160.0/21
                          IP: 2803:5000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16192771 (0xf71503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:26 2017 GMT
            Not After : Sep 29 05:00:00 2024 GMT
        Subject: CN=e66659dfcc8e8859189fa3e445dd43ab55e4c243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b3:24:ed:83:04:d4:83:87:74:c6:71:ae:70:
                    93:0f:79:32:8d:9f:50:31:ff:e8:d7:f0:d6:1a:b0:
                    f6:50:f8:0b:7b:bd:3e:dc:4c:06:d8:83:d7:cf:86:
                    6a:82:de:c1:48:6c:fa:a5:4a:28:97:f6:36:3d:cc:
                    9c:f2:41:ff:fd:67:8c:69:90:ae:dc:09:b7:ca:be:
                    ba:e8:56:5b:7a:0e:d6:b4:a9:3f:f3:32:4e:47:5e:
                    d7:bb:bc:0b:d1:2c:13:35:4f:87:77:59:91:60:ac:
                    3a:e0:15:af:1c:75:82:af:90:b8:34:77:79:ed:dd:
                    85:01:fa:27:b5:ad:71:45:8e:df:e6:ac:5e:8e:c1:
                    53:67:45:74:4f:55:22:b0:43:68:6c:87:e6:fd:1b:
                    cb:48:21:20:10:1a:ee:12:d6:64:44:19:b2:2d:43:
                    fe:8c:0a:78:19:2e:10:33:da:e7:cd:fe:e3:eb:b4:
                    89:00:76:6e:ae:4f:c7:bf:b4:ee:2c:47:9a:e6:e7:
                    c8:42:38:ad:18:3f:af:27:25:98:4f:9c:ea:91:e5:
                    f4:1c:f8:7a:78:18:28:d9:aa:3a:d5:81:aa:d4:cb:
                    41:56:48:8f:56:4c:db:32:2a:76:bc:b0:ce:ae:86:
                    bd:80:5f:13:6a:3b:b3:55:37:62:4b:b4:8c:cc:5a:
                    ea:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7A:2E:7D:D6:7B:5D:58:CB:EF:C3:3E:3F:58:57:22:E6:79:A5:26
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c50b5fa6-b5f0-4a9d-a7f0-1ec1713a96f7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c50b5fa6-b5f0-4a9d-a7f0-1ec1713a96f7/e66659dfcc8e8859189fa3e445dd43ab55e4c243.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.96.0-190.123.119.255
                  200.110.160.0/21
                IPv6:
                  2803:5000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27877

    Signature Algorithm: sha256WithRSAEncryption
         a6:21:d3:33:a7:2f:20:91:3c:f7:5d:10:0d:cb:c4:19:7e:9e:
         33:29:e7:b2:ff:f5:45:6a:83:72:d4:b1:35:19:e7:10:52:c5:
         c8:a0:8b:b1:c6:1d:0b:17:74:5b:b0:e9:b0:40:69:bb:94:04:
         cb:3e:82:0f:77:48:8d:cd:19:d8:01:c2:53:9a:43:27:0f:97:
         86:48:65:a1:a8:f1:1a:f8:ba:42:15:1b:ad:d8:f9:d2:36:3d:
         6c:e6:9a:cc:48:e8:e6:ab:aa:50:21:a1:5a:70:8e:ae:0b:02:
         5c:be:3f:f9:09:3e:84:cd:63:ef:62:6b:8f:1e:f5:50:dc:50:
         80:09:97:9c:ed:4c:ba:16:10:10:ce:f3:73:40:61:ec:73:18:
         13:57:07:29:76:cd:b5:00:c2:ff:d6:5e:7d:5f:55:c3:30:0f:
         ca:b3:31:d7:8a:2c:cb:95:d5:8d:4f:a0:c0:dd:8f:2e:4a:d3:
         a4:d3:ca:64:80:f5:89:ee:4b:85:48:07:56:02:9f:7f:f3:41:
         f5:84:72:a0:fc:d8:6a:95:af:69:58:1c:cb:fb:98:1c:bb:44:
         c7:2a:48:96:b0:04:eb:e7:5c:64:6c:87:c1:06:7b:4e:5d:31:
         9d:47:83:1c:d8:7f:d7:4b:5b:74:c5:51:fa:f7:7b:4b:03:cc:
         fe:d8:b3:5a
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgIEAPcVAzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyNloXDTI0MDkyOTA1MDAw
MFowMzExMC8GA1UEAxMoZTY2NjU5ZGZjYzhlODg1OTE4OWZhM2U0NDVkZDQzYWI1
NWU0YzI0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIGzJO2DBNSD
h3TGca5wkw95Mo2fUDH/6Nfw1hqw9lD4C3u9PtxMBtiD18+GaoLewUhs+qVKKJf2
Nj3MnPJB//1njGmQrtwJt8q+uuhWW3oO1rSpP/MyTkde17u8C9EsEzVPh3dZkWCs
OuAVrxx1gq+QuDR3ee3dhQH6J7WtcUWO3+asXo7BU2dFdE9VIrBDaGyH5v0by0gh
IBAa7hLWZEQZsi1D/owKeBkuEDPa583+4+u0iQB2bq5Px7+07ixHmubnyEI4rRg/
ryclmE+c6pHl9Bz4engYKNmqOtWBqtTLQVZIj1ZM2zIqdrywzq6GvYBfE2o7s1U3
Yku0jMxa6rECAwEAAaOCAxYwggMSMB0GA1UdDgQWBBTyei591ntdWMvvwz4/WFci
5nmlJjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jNTBiNWZhNi1iNWYw
LTRhOWQtYTdmMC0xZWMxNzEzYTk2ZjcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzUwYjVmYTYtYjVmMC00
YTlkLWE3ZjAtMWVjMTcxM2E5NmY3L2U2NjY1OWRmY2M4ZTg4NTkxODlmYTNlNDQ1
ZGQ0M2FiNTVlNGMyNDMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGgQCAAEwFDAMAwQFvntgAwQDvntwAwQDyG6gMA0E
AgACMAcDBQAoA1AAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmzlMA0GCSqGSIb3
DQEBCwUAA4IBAQCmIdMzpy8gkTz3XRANy8QZfp4zKeey//VFaoNy1LE1GecQUsXI
oIuxxh0LF3RbsOmwQGm7lATLPoIPd0iNzRnYAcJTmkMnD5eGSGWhqPEa+LpCFRut
2PnSNj1s5prMSOjmq6pQIaFacI6uCwJcvj/5CT6EzWPvYmuPHvVQ3FCACZec7Uy6
FhAQzvNzQGHscxgTVwcpds21AML/1l59X1XDMA/KszHXiizLldWNT6DA3Y8uStOk
08pkgPWJ7kuFSAdWAp9/80H1hHKg/Nhqla9pWBzL+5gcu0THKkiWsATr51xkbIfB
BntOXTGdR4Mc2H/XS1t0xVH693tLA8z+2LNa
-----END CERTIFICATE-----