Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.cer
File:                     ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.cer (raw, json)
Hash identifier:          NeX4yiyh6dTwDnE8CFAfAPTMyR6B3FFk4Gpp/iwvlXg=
Subject key identifier:   58:69:D0:57:05:08:32:46:08:EE:2C:6F:83:08:52:C3:1B:4A:08:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9D408
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:22 +0000
Certificate not after:    Fri 18 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 27851
                          IP: 170.231.36.0/22
                          IP: 200.81.152.0/21
                          IP: 200.110.184.0/21
                          IP: 2803:3680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16372744 (0xf9d408)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:22 2017 GMT
            Not After : Oct 18 05:00:00 2024 GMT
        Subject: CN=ecc9a7cf8cd28da7666e8648a4847d34d878fdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:67:b6:f9:64:0c:0e:cd:b5:b3:cb:96:f7:
                    22:c9:3c:14:6d:8e:d8:1e:62:9a:1f:1f:c6:73:2d:
                    f0:1f:5c:48:10:29:e8:bb:64:c0:9f:fe:a0:bd:4e:
                    de:00:c4:06:51:ab:d3:03:c9:5b:65:bf:2e:68:9e:
                    ea:ac:56:fb:1b:0e:3e:76:a3:cb:5d:8c:02:2d:40:
                    2e:b2:da:50:73:1e:e1:d4:c3:81:36:12:0a:95:4b:
                    cf:79:b3:1c:62:df:63:24:50:a0:11:46:df:bf:e6:
                    78:a1:2c:13:62:53:a9:85:52:7c:b9:0f:10:89:54:
                    c3:e0:c4:c1:1d:f2:62:cc:9f:46:30:dc:f5:aa:b4:
                    e0:48:a2:9b:00:c3:cd:c1:6a:b5:3c:7b:1d:65:f4:
                    3f:3c:12:d1:f2:cc:1c:3c:0f:8e:91:41:d6:9f:96:
                    db:f9:a7:07:e9:2c:b3:dc:f8:6c:29:47:e9:53:b5:
                    05:88:24:0e:55:40:1b:c8:5a:af:4c:0d:18:1f:93:
                    f9:38:4f:e0:79:84:07:8e:ee:26:93:c0:6f:b5:e8:
                    64:6e:40:c3:83:09:4a:ae:77:4c:a5:ea:b3:e9:da:
                    94:bd:c4:9a:6d:1d:9f:db:f7:10:59:8a:58:26:3b:
                    fa:d5:c8:fb:00:db:65:08:5a:ab:a8:20:a9:05:c6:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:69:D0:57:05:08:32:46:08:EE:2C:6F:83:08:52:C3:1B:4A:08:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.36.0/22
                  200.81.152.0/21
                  200.110.184.0/21
                IPv6:
                  2803:3680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27851

    Signature Algorithm: sha256WithRSAEncryption
         aa:9c:10:50:a3:2a:39:01:4b:5f:27:3e:5e:a4:a6:e3:a3:f8:
         e0:14:c5:75:c6:ed:f8:4d:d1:3e:5f:ab:b5:c9:02:a2:10:97:
         b5:58:8b:4b:bd:ec:e2:40:14:f7:19:86:b1:3e:7c:45:71:22:
         76:b7:06:f6:a9:79:ed:a3:e6:be:64:61:f8:ec:4e:a4:69:44:
         5e:3c:47:dc:b5:ec:fb:ff:32:53:28:50:3e:89:76:4a:f4:e1:
         fd:31:3c:c2:60:d1:b3:40:cc:43:ef:2f:44:1a:89:72:07:1d:
         cd:ad:c9:2c:45:29:0c:ee:bf:9e:d0:07:6e:e0:f4:61:ca:59:
         83:47:9c:cf:58:28:14:05:5e:c0:2e:d8:3a:70:20:73:cb:4d:
         80:62:37:e3:59:34:9c:f4:6e:30:8c:16:1e:0d:33:32:ae:a7:
         89:7e:4b:12:8c:e9:09:6d:07:78:f8:96:fa:6c:ad:b1:60:bb:
         b9:df:c0:3d:cf:65:97:2e:12:e6:bc:36:4a:36:2d:05:b8:d9:
         d1:a1:a5:3f:b3:74:4b:e9:8c:28:28:1a:90:05:6d:66:18:5c:
         63:15:3b:7d:46:32:2f:a4:74:30:93:27:99:ab:a5:d6:99:2b:
         90:c1:ba:b7:d8:56:e9:9e:17:b3:39:9b:ac:84:dc:24:3c:71:
         49:45:00:15
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgIEAPnUCDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyMloXDTI0MTAxODA1MDAw
MFowMzExMC8GA1UEAxMoZWNjOWE3Y2Y4Y2QyOGRhNzY2NmU4NjQ4YTQ4NDdkMzRk
ODc4ZmRjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKIuZ7b5ZAwO
zbWzy5b3Isk8FG2O2B5imh8fxnMt8B9cSBAp6LtkwJ/+oL1O3gDEBlGr0wPJW2W/
Lmie6qxW+xsOPnajy12MAi1ALrLaUHMe4dTDgTYSCpVLz3mzHGLfYyRQoBFG37/m
eKEsE2JTqYVSfLkPEIlUw+DEwR3yYsyfRjDc9aq04EiimwDDzcFqtTx7HWX0PzwS
0fLMHDwPjpFB1p+W2/mnB+kss9z4bClH6VO1BYgkDlVAG8har0wNGB+T+ThP4HmE
B47uJpPAb7XoZG5Aw4MJSq53TKXqs+nalL3Emm0dn9v3EFmKWCY7+tXI+wDbZQha
q6ggqQXGwpsCAwEAAaOCAxQwggMQMB0GA1UdDgQWBBRYadBXBQgyRgjuLG+DCFLD
G0oI7TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85ZjBkYjUxNy01YjA4
LTQyNGUtYjM1Mi01MjkyYmM2NjM2ZGIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWYwZGI1MTctNWIwOC00
MjRlLWIzNTItNTI5MmJjNjYzNmRiL2VjYzlhN2NmOGNkMjhkYTc2NjZlODY0OGE0
ODQ3ZDM0ZDg3OGZkY2QubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAqrnJAMEA8hRmAMEA8huuDANBAIA
AjAHAwUAKAM2gDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJsyzANBgkqhkiG9w0B
AQsFAAOCAQEAqpwQUKMqOQFLXyc+XqSm46P44BTFdcbt+E3RPl+rtckCohCXtViL
S73s4kAU9xmGsT58RXEidrcG9ql57aPmvmRh+OxOpGlEXjxH3LXs+/8yUyhQPol2
SvTh/TE8wmDRs0DMQ+8vRBqJcgcdza3JLEUpDO6/ntAHbuD0YcpZg0ecz1goFAVe
wC7YOnAgc8tNgGI341k0nPRuMIwWHg0zMq6niX5LEozpCW0HePiW+mytsWC7ud/A
Pc9lly4S5rw2SjYtBbjZ0aGlP7N0S+mMKCgakAVtZhhcYxU7fUYyL6R0MJMnmaul
1pkrkMG6t9hW6Z4XszmbrITcJDxxSUUAFQ==
-----END CERTIFICATE-----