Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed5f8a17df2be0e5eeacaed3ac9ad360bc0b17ab.cer
File:                     ed5f8a17df2be0e5eeacaed3ac9ad360bc0b17ab.cer (raw, json)
Hash identifier:          G93mPsWk4w4GqM7UuaU5ocj4ToKT09wFr/L8pRGXuK0=
Subject key identifier:   DE:5D:5C:5A:E9:EE:5A:B3:5C:00:AF:F8:0B:5C:F9:14:81:FC:5A:7B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F20DB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3c8c046b-0e4d-4c1e-8bee-41a3083a41fe/ed5f8a17df2be0e5eeacaed3ac9ad360bc0b17ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3c8c046b-0e4d-4c1e-8bee-41a3083a41fe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:55 +0000
Certificate not after:    Sun 18 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 27937
                          IP: 138.97.80.0/22
                          IP: 190.97.128.0/19
                          IP: 2803:ff80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15863220 (0xf20db4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:55 2017 GMT
            Not After : Aug 18 05:00:00 2024 GMT
        Subject: CN=ed5f8a17df2be0e5eeacaed3ac9ad360bc0b17ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:0d:a8:ba:5e:c2:3d:5c:f6:f2:f7:c3:33:
                    5a:67:d8:58:ea:30:64:12:16:cb:2e:9d:fd:99:6b:
                    3e:a3:42:69:11:e0:16:bb:c4:39:e0:a9:bf:6b:d9:
                    f4:84:b0:43:49:7c:b8:01:34:8e:44:84:6c:84:e3:
                    c0:aa:3a:2c:ca:d8:a4:22:db:23:b0:70:8f:c1:8e:
                    a3:ab:e8:da:bc:4a:ce:b0:31:75:f5:45:9c:ed:73:
                    47:52:c5:52:80:f8:03:02:f6:0d:a4:5e:00:b0:57:
                    1c:b2:48:7f:f6:45:a2:54:3f:23:7e:21:55:50:d1:
                    85:60:5f:21:0d:3a:a1:17:0b:71:d4:92:c4:e7:25:
                    29:3c:d2:e9:da:c8:98:90:ba:b8:b4:7b:00:1b:00:
                    a7:61:f7:29:24:fa:c4:3f:a1:27:51:45:2b:ec:37:
                    e1:ec:ef:fe:a7:18:0b:ea:1b:ab:8d:d9:57:84:f9:
                    a8:2a:93:28:41:3d:a5:7a:f0:ff:0d:bf:53:8b:e0:
                    3d:7d:a4:15:24:ae:6e:79:2c:e6:bc:40:e0:31:a2:
                    a1:32:24:91:73:2b:91:6c:36:76:92:30:83:32:dc:
                    d3:b4:c9:19:4d:d9:4a:55:a3:c9:82:53:ee:b2:77:
                    99:88:46:d5:81:6d:3f:d4:5e:6b:a5:a2:ae:5d:9d:
                    c4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5D:5C:5A:E9:EE:5A:B3:5C:00:AF:F8:0B:5C:F9:14:81:FC:5A:7B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3c8c046b-0e4d-4c1e-8bee-41a3083a41fe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3c8c046b-0e4d-4c1e-8bee-41a3083a41fe/ed5f8a17df2be0e5eeacaed3ac9ad360bc0b17ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.80.0/22
                  190.97.128.0/19
                IPv6:
                  2803:ff80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27937

    Signature Algorithm: sha256WithRSAEncryption
         a8:15:63:a6:ff:47:42:2d:29:6e:bb:8c:0a:5b:80:e3:f9:bb:
         b6:c1:7e:9e:8f:43:9e:0e:5e:c2:1d:25:67:9c:89:4f:13:b0:
         97:9b:3f:f5:34:b2:8c:fc:b8:8b:4d:95:b2:30:07:5a:0d:f0:
         a6:f8:84:0a:b3:c6:ce:6d:d7:7f:96:b5:66:3b:f2:bb:cc:7e:
         c6:e3:16:2c:5f:1c:be:19:18:07:ca:2c:0d:9f:cd:b2:49:d5:
         73:e4:71:a8:38:10:d4:6e:50:e2:c4:1d:6d:4d:92:ba:bd:25:
         1a:90:5d:50:67:3c:68:48:ac:b8:bf:f6:85:00:84:61:87:95:
         10:a0:00:ab:ec:46:1d:e8:11:d2:8b:ad:b0:10:2e:78:4c:93:
         9c:b8:29:e2:e8:18:ef:77:c2:af:dd:bc:11:5f:48:81:55:49:
         b5:55:e9:23:27:5e:9d:2f:72:fb:48:25:73:d9:56:6a:64:b9:
         8c:c7:6a:e8:16:e1:05:e0:f0:b7:42:06:e5:ca:db:70:58:16:
         f3:23:bc:ca:44:87:bf:64:b7:cd:ef:43:10:b9:13:f1:c2:57:
         af:7c:8e:1b:46:f6:ec:af:35:03:b6:9b:39:b3:09:c9:36:5c:
         16:c2:de:b7:ae:f5:58:74:78:e2:2d:9e:34:09:4e:41:14:d0:
         dd:4b:94:0f
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIEAPINtDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1NVoXDTI0MDgxODA1MDAw
MFowMzExMC8GA1UEAxMoZWQ1ZjhhMTdkZjJiZTBlNWVlYWNhZWQzYWM5YWQzNjBi
YzBiMTdhYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI3cDai6XsI9
XPby98MzWmfYWOowZBIWyy6d/ZlrPqNCaRHgFrvEOeCpv2vZ9ISwQ0l8uAE0jkSE
bITjwKo6LMrYpCLbI7Bwj8GOo6vo2rxKzrAxdfVFnO1zR1LFUoD4AwL2DaReALBX
HLJIf/ZFolQ/I34hVVDRhWBfIQ06oRcLcdSSxOclKTzS6drImJC6uLR7ABsAp2H3
KST6xD+hJ1FFK+w34ezv/qcYC+obq43ZV4T5qCqTKEE9pXrw/w2/U4vgPX2kFSSu
bnks5rxA4DGioTIkkXMrkWw2dpIwgzLc07TJGU3ZSlWjyYJT7rJ3mYhG1YFtP9Re
a6Wirl2dxDkCAwEAAaOCAw4wggMKMB0GA1UdDgQWBBTeXVxa6e5as1wAr/gLXPkU
gfxaezAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zYzhjMDQ2Yi0wZTRk
LTRjMWUtOGJlZS00MWEzMDgzYTQxZmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2M4YzA0NmItMGU0ZC00
YzFlLThiZWUtNDFhMzA4M2E0MWZlL2VkNWY4YTE3ZGYyYmUwZTVlZWFjYWVkM2Fj
OWFkMzYwYmMwYjE3YWIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAophUAMEBb5hgDANBAIAAjAHAwUA
KAP/gDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJtITANBgkqhkiG9w0BAQsFAAOC
AQEAqBVjpv9HQi0pbruMCluA4/m7tsF+no9Dng5ewh0lZ5yJTxOwl5s/9TSyjPy4
i02VsjAHWg3wpviECrPGzm3Xf5a1Zjvyu8x+xuMWLF8cvhkYB8osDZ/NsknVc+Rx
qDgQ1G5Q4sQdbU2Sur0lGpBdUGc8aEisuL/2hQCEYYeVEKAAq+xGHegR0outsBAu
eEyTnLgp4ugY73fCr928EV9IgVVJtVXpIydenS9y+0glc9lWamS5jMdq6BbhBeDw
t0IG5crbcFgW8yO8ykSHv2S3ze9DELkT8cJXr3yOG0b27K81A7abObMJyTZcFsLe
t671WHR44i2eNAlOQRTQ3UuUDw==
-----END CERTIFICATE-----