Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6a7db40416bd409764df01fa1a52259576b328e.cer
File:                     e6a7db40416bd409764df01fa1a52259576b328e.cer (raw, json)
Hash identifier:          hw5EiUw5x5s/ItHGk2R9wIZupiRoHbs8wKONarGmcxI=
Subject key identifier:   0E:81:41:66:36:1F:C6:D0:91:01:77:BD:04:5C:F6:F0:F9:3F:0F:2B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE6D28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9066c3cf-f942-4b00-97f3-a2d300024e70/e6a7db40416bd409764df01fa1a52259576b328e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9066c3cf-f942-4b00-97f3-a2d300024e70/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:14 +0000
Certificate not after:    Tue 12 Mar 2024 22:16:33 +0000
Subordinate resources:    AS: 27740
                          IP: 190.11.240.0/20
                          IP: 190.108.64.0/21
                          IP: 2800:b30::/31

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14576936 (0xde6d28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:14 2017 GMT
            Not After : Mar 12 22:16:33 2024 GMT
        Subject: CN=e6a7db40416bd409764df01fa1a52259576b328e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bf:46:57:e8:77:85:c2:f5:6c:20:87:9d:e0:
                    37:9d:fc:55:18:a8:c5:d0:c2:a0:7c:b5:e2:db:b8:
                    d8:71:44:57:18:14:de:77:b2:ff:ab:91:e9:98:0c:
                    d8:ee:23:86:82:e0:e4:4f:2c:4d:0f:6a:db:88:38:
                    56:b9:e1:09:66:87:59:a9:3d:53:79:d4:e6:f8:e1:
                    30:3f:5e:91:7b:b2:ec:27:7c:15:98:9e:95:33:2d:
                    fe:c1:e8:59:52:c4:95:f9:a6:3d:2f:a1:3d:ff:2a:
                    64:cb:fb:2c:e0:94:4c:a3:a4:9d:bb:f6:de:28:11:
                    00:18:4d:ba:17:e4:e5:2d:36:0e:aa:6b:0b:2e:ad:
                    f3:ee:ef:99:1f:9d:f3:8b:df:d7:f9:c5:76:ca:66:
                    cf:b3:01:19:f6:04:1c:2b:17:2b:6e:22:1d:b7:6f:
                    dc:42:00:d0:8b:a5:4c:9e:26:02:1b:fa:cf:cb:97:
                    24:95:66:17:d4:3c:cf:78:ed:69:c4:52:6a:47:85:
                    00:00:50:d3:09:0c:49:e7:6e:af:9f:dc:60:bd:1c:
                    3d:01:dd:24:76:30:de:f1:c8:60:e5:07:fd:7d:ea:
                    e2:1d:3a:46:c5:e8:a3:6c:cb:3d:e9:e7:a6:68:55:
                    46:86:0b:95:22:9f:d7:fa:d9:4f:87:2f:53:83:ee:
                    cc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:81:41:66:36:1F:C6:D0:91:01:77:BD:04:5C:F6:F0:F9:3F:0F:2B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9066c3cf-f942-4b00-97f3-a2d300024e70/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9066c3cf-f942-4b00-97f3-a2d300024e70/e6a7db40416bd409764df01fa1a52259576b328e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.240.0/20
                  190.108.64.0/21
                IPv6:
                  2800:b30::/31

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27740

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:56:0f:86:68:92:6d:3a:d6:7a:f2:23:78:74:db:57:4e:
         f9:1d:ec:45:b5:84:c5:de:c8:20:bf:32:98:97:d2:84:a7:f4:
         39:01:d5:eb:14:a2:26:48:6d:74:fb:4e:e6:e0:61:e5:61:06:
         bf:80:9a:0a:f9:83:8c:32:5a:47:d1:5a:93:1f:03:7f:ee:43:
         62:96:31:77:75:2c:47:3a:fa:58:a4:e6:5c:03:1d:6a:3f:8f:
         f3:9b:78:db:16:6f:26:18:ac:c6:12:f5:38:c5:b1:e0:ad:3a:
         cc:8b:78:f5:96:c0:99:97:a0:b6:c6:0a:ee:e7:8b:0b:a6:2f:
         7f:d6:62:b0:88:19:cc:89:cb:53:cf:d6:23:76:55:41:79:ea:
         67:97:fb:34:da:6c:67:14:40:cf:c1:93:10:ed:46:cc:fa:a8:
         cf:86:50:40:38:38:b8:71:81:85:29:1a:fc:39:a0:3f:d0:01:
         c7:4f:d6:eb:b3:ca:7d:c6:a1:24:30:d3:de:73:df:b9:91:37:
         1f:87:7c:2e:b6:2c:9c:51:1d:a2:52:3b:52:f8:d2:46:c6:99:
         5c:71:c5:9b:3b:ff:41:cb:08:01:bd:38:31:98:e7:6e:d1:50:
         c7:d3:b8:39:c1:cb:0f:75:6e:47:40:a9:8f:1b:2b:30:7d:7c:
         8d:a4:4a:a9
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIEAN5tKDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcxNFoXDTI0MDMxMjIyMTYz
M1owMzExMC8GA1UEAxMoZTZhN2RiNDA0MTZiZDQwOTc2NGRmMDFmYTFhNTIyNTk1
NzZiMzI4ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIa/Rlfod4XC
9Wwgh53gN538VRioxdDCoHy14tu42HFEVxgU3ney/6uR6ZgM2O4jhoLg5E8sTQ9q
24g4VrnhCWaHWak9U3nU5vjhMD9ekXuy7Cd8FZielTMt/sHoWVLElfmmPS+hPf8q
ZMv7LOCUTKOknbv23igRABhNuhfk5S02DqprCy6t8+7vmR+d84vf1/nFdspmz7MB
GfYEHCsXK24iHbdv3EIA0IulTJ4mAhv6z8uXJJVmF9Q8z3jtacRSakeFAABQ0wkM
Sedur5/cYL0cPQHdJHYw3vHIYOUH/X3q4h06RsXoo2zLPennpmhVRoYLlSKf1/rZ
T4cvU4PuzFMCAwEAAaOCAw4wggMKMB0GA1UdDgQWBBQOgUFmNh/G0JEBd70EXPbw
+T8PKzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85MDY2YzNjZi1mOTQy
LTRiMDAtOTdmMy1hMmQzMDAwMjRlNzAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTA2NmMzY2YtZjk0Mi00
YjAwLTk3ZjMtYTJkMzAwMDI0ZTcwL2U2YTdkYjQwNDE2YmQ0MDk3NjRkZjAxZmEx
YTUyMjU5NTc2YjMyOGUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBL4L8AMEA75sQDANBAIAAjAHAwUB
KAALMDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJsXDANBgkqhkiG9w0BAQsFAAOC
AQEAJNdWD4Zokm061nryI3h021dO+R3sRbWExd7IIL8ymJfShKf0OQHV6xSiJkht
dPtO5uBh5WEGv4CaCvmDjDJaR9Fakx8Df+5DYpYxd3UsRzr6WKTmXAMdaj+P85t4
2xZvJhisxhL1OMWx4K06zIt49ZbAmZegtsYK7ueLC6Yvf9ZisIgZzInLU8/WI3ZV
QXnqZ5f7NNpsZxRAz8GTEO1GzPqoz4ZQQDg4uHGBhSka/DmgP9ABx0/W67PKfcah
JDDT3nPfuZE3H4d8LrYsnFEdolI7UvjSRsaZXHHFmzv/QcsIAb04MZjnbtFQx9O4
OcHLD3VuR0CpjxsrMH18jaRKqQ==
-----END CERTIFICATE-----