Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.cer
File:                     ea7028769533b4ca1a1bb8492dcfde9795a18ca2.cer (raw, json)
Hash identifier:          7fen388gwY7KUj9hDx0M7rAsfcieLUohzDdeGtW6MkM=
Subject key identifier:   83:82:FD:78:F2:44:81:2B:A0:DB:7C:4E:FE:41:D2:1E:DA:BA:17:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F225E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Mar 2018 13:18:27 +0000
Certificate not after:    Sun 18 Aug 2024 15:00:00 +0000
Subordinate resources:    AS: 27940
                          IP: 131.100.100.0/22
                          IP: 190.122.64.0/20
                          IP: 200.110.192.0/21
                          IP: 2803:4b80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15869412 (0xf225e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 27 13:18:27 2018 GMT
            Not After : Aug 18 15:00:00 2024 GMT
        Subject: CN=ea7028769533b4ca1a1bb8492dcfde9795a18ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:80:09:df:54:43:ac:c0:7e:5f:10:14:a1:
                    63:9d:f6:12:bd:2b:c5:91:06:23:04:02:b9:0d:3c:
                    cf:e6:01:a5:e9:6c:40:39:d3:52:0d:36:70:d4:ac:
                    97:81:36:d4:74:28:40:8d:ef:4d:75:17:dc:71:76:
                    d8:11:9d:d9:16:f4:a8:2f:8e:db:14:35:50:18:57:
                    b0:d2:cc:60:c6:8f:cb:d7:57:e3:e1:47:e3:cd:26:
                    43:fb:57:1f:31:23:25:45:5e:e7:04:5c:70:39:8f:
                    08:6e:22:c9:3b:de:a7:8c:2b:e5:c6:97:70:68:02:
                    de:f4:3a:a4:a5:47:7a:3d:ec:55:60:00:87:1b:9f:
                    21:d8:5f:ae:2a:d6:99:0a:5b:8b:24:8a:78:e2:63:
                    d4:a4:39:5e:cf:ab:ad:6b:55:83:d4:d8:92:0b:91:
                    50:32:00:80:26:5c:b3:4c:d3:36:fd:e5:28:8a:dc:
                    47:e7:72:5a:57:66:d4:b9:d0:88:7c:7a:22:f6:1b:
                    fb:14:1b:c3:f0:85:e2:71:a1:76:9f:72:06:65:c8:
                    04:c1:e1:e0:00:c9:b4:b2:a0:da:71:01:a5:b7:61:
                    d7:82:d9:f7:02:da:07:75:bc:51:0e:5e:13:37:ef:
                    aa:2c:a0:9e:9a:30:1b:17:d6:93:80:67:5f:cb:9f:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:82:FD:78:F2:44:81:2B:A0:DB:7C:4E:FE:41:D2:1E:DA:BA:17:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.100.0/22
                  190.122.64.0/20
                  200.110.192.0/21
                IPv6:
                  2803:4b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27940

    Signature Algorithm: sha256WithRSAEncryption
         44:39:9e:97:f2:30:06:7c:b0:e0:c8:39:54:ec:7e:32:49:31:
         48:99:de:4a:83:14:30:9a:11:a2:8d:5c:57:6a:01:a2:54:c5:
         ba:f8:a9:0a:58:d0:5e:a7:0a:9c:cf:90:68:d3:ca:16:6e:f4:
         6e:33:84:0c:5b:7a:4b:15:ce:c7:f8:2d:90:98:ac:d3:43:77:
         c1:22:12:f1:bd:a4:e8:69:dd:93:58:0c:4c:20:83:8d:d8:47:
         48:2d:f1:56:8c:63:d7:24:12:de:b2:87:20:52:b0:65:69:8d:
         d4:52:55:c5:cd:b8:aa:a5:5e:c8:92:87:da:c7:65:55:27:3a:
         72:a8:dd:be:d4:b9:dd:66:f0:b9:32:1d:9d:e6:96:99:42:b8:
         76:8c:13:d6:ba:ab:e5:80:e0:d4:81:4a:d9:54:95:6f:df:30:
         87:c4:ee:bf:7d:0b:9d:f5:83:6c:b3:fa:cd:3e:cc:58:63:ee:
         d2:44:ae:62:fb:8c:fd:87:e9:65:e0:c9:d6:09:20:24:fb:2f:
         f1:ed:c9:0c:39:69:d6:8f:d6:3d:00:82:9d:6c:6f:b4:ab:3f:
         08:61:75:c0:d0:53:13:8e:5b:46:9a:49:59:ae:59:74:70:f3:
         e7:8e:8b:36:f4:9a:cd:45:ec:f0:b3:cb:cf:f5:cf:cc:40:89:
         1c:6d:41:25
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgIEAPIl5DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDMyNzEzMTgyN1oXDTI0MDgxODE1MDAw
MFowMzExMC8GA1UEAxMoZWE3MDI4NzY5NTMzYjRjYTFhMWJiODQ5MmRjZmRlOTc5
NWExOGNhMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVQgAnfVEOs
wH5fEBShY532Er0rxZEGIwQCuQ08z+YBpelsQDnTUg02cNSsl4E21HQoQI3vTXUX
3HF22BGd2Rb0qC+O2xQ1UBhXsNLMYMaPy9dX4+FH480mQ/tXHzEjJUVe5wRccDmP
CG4iyTvep4wr5caXcGgC3vQ6pKVHej3sVWAAhxufIdhfrirWmQpbiySKeOJj1KQ5
Xs+rrWtVg9TYkguRUDIAgCZcs0zTNv3lKIrcR+dyWldm1LnQiHx6IvYb+xQbw/CF
4nGhdp9yBmXIBMHh4ADJtLKg2nEBpbdh14LZ9wLaB3W8UQ5eEzfvqiygnpowGxfW
k4BnX8uf6R8CAwEAAaOCAxQwggMQMB0GA1UdDgQWBBSDgv148kSBK6DbfE7+QdIe
2roXozAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82MjQzOGQ3Mi1hYjVm
LTQ2MDYtYmFhZi1hYjNkNjBjZjc3ZGQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjI0MzhkNzItYWI1Zi00
NjA2LWJhYWYtYWIzZDYwY2Y3N2RkL2VhNzAyODc2OTUzM2I0Y2ExYTFiYjg0OTJk
Y2ZkZTk3OTVhMThjYTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAoNkZAMEBL56QAMEA8huwDANBAIA
AjAHAwUAKANLgDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJtJDANBgkqhkiG9w0B
AQsFAAOCAQEARDmel/IwBnyw4Mg5VOx+MkkxSJneSoMUMJoRoo1cV2oBolTFuvip
CljQXqcKnM+QaNPKFm70bjOEDFt6SxXOx/gtkJis00N3wSIS8b2k6Gndk1gMTCCD
jdhHSC3xVoxj1yQS3rKHIFKwZWmN1FJVxc24qqVeyJKH2sdlVSc6cqjdvtS53Wbw
uTIdneaWmUK4dowT1rqr5YDg1IFK2VSVb98wh8Tuv30LnfWDbLP6zT7MWGPu0kSu
YvuM/YfpZeDJ1gkgJPsv8e3JDDlp1o/WPQCCnWxvtKs/CGF1wNBTE45bRppJWa5Z
dHDz546LNvSazUXs8LPLz/XPzECJHG1BJQ==
-----END CERTIFICATE-----