Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f172ca4093ff4ce47d20beb1ff07624aff070b40.cer
File:                     f172ca4093ff4ce47d20beb1ff07624aff070b40.cer (raw, json)
Hash identifier:          /xLr/kZksgE+Ir5F7+36RgGHURxjHxAduX6oQdS5Bxc=
Subject key identifier:   F5:4B:B6:F3:7D:92:91:07:1D:76:5A:6F:B9:AF:84:6B:EE:61:58:B5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F91A14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/f172ca4093ff4ce47d20beb1ff07624aff070b40.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:37 +0000
Certificate not after:    Sat 12 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 263716
                          IP: 132.255.224.0/22
                          IP: 2803:a780::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16325140 (0xf91a14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:37 2017 GMT
            Not After : Oct 12 05:00:00 2024 GMT
        Subject: CN=f172ca4093ff4ce47d20beb1ff07624aff070b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:4a:e3:12:1f:83:62:60:da:71:f5:77:00:
                    14:a0:4d:0e:54:eb:78:e5:19:b3:58:95:ed:df:83:
                    47:49:f6:9e:e9:6f:e0:55:b7:29:1a:d3:1b:a3:9f:
                    26:25:e3:f7:b2:54:d7:a1:03:85:93:48:9a:6f:a8:
                    1c:8b:72:78:93:5a:5e:7a:58:83:02:bc:17:99:ce:
                    3a:2a:7d:51:c4:a0:c9:27:73:8a:c0:f8:4f:f0:ce:
                    2d:4f:6d:89:be:47:6f:b3:b1:e0:e1:c4:4a:88:be:
                    51:f0:0e:ef:73:f0:14:dd:7f:0c:79:8c:08:19:7c:
                    77:eb:14:43:b3:16:9b:ef:32:31:95:c4:c8:49:40:
                    30:c4:87:99:f1:ad:bc:38:01:8f:fd:b3:8b:56:44:
                    d0:14:c9:b9:f4:d3:ec:a2:f5:70:13:cd:9c:2f:55:
                    02:36:61:7b:f7:b7:c7:f5:a3:47:bd:5f:47:30:74:
                    00:4f:d2:43:b3:9b:20:15:18:ec:a6:e5:36:dd:56:
                    67:7e:b8:1a:71:0f:3a:59:54:27:9f:4d:c6:08:a8:
                    6a:88:31:f8:bd:4a:af:5b:a1:82:2f:e8:cb:c9:23:
                    79:93:97:bc:ab:5e:43:ba:c3:88:95:f7:7d:2c:ba:
                    f2:f2:66:ee:55:6e:65:97:f2:05:0a:b8:f9:52:62:
                    f7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4B:B6:F3:7D:92:91:07:1D:76:5A:6F:B9:AF:84:6B:EE:61:58:B5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/f172ca4093ff4ce47d20beb1ff07624aff070b40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.224.0/22
                IPv6:
                  2803:a780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263716

    Signature Algorithm: sha256WithRSAEncryption
         0d:6b:dd:9d:39:56:32:ce:a7:30:8e:ca:43:d3:f7:84:8d:8d:
         29:68:41:52:4f:bd:0c:8e:a0:7d:ef:b8:f2:14:03:f3:c0:8d:
         cd:80:1a:7f:e5:63:5c:83:91:27:b9:6f:f8:7e:be:11:be:f4:
         d6:c4:a9:f7:e5:9f:9e:2e:60:13:b2:03:20:54:a7:77:f4:29:
         44:dd:cd:0b:15:8c:ff:5a:d4:63:09:5c:08:49:aa:5e:e1:c5:
         11:3a:3e:74:9c:44:95:82:56:79:10:53:4e:1f:42:ad:ee:0d:
         74:76:bf:64:9f:0d:5e:04:aa:d9:89:b1:02:7b:6f:03:b4:8d:
         0e:21:bd:08:8c:47:17:1e:37:3f:d0:2d:bb:6a:47:de:ae:6b:
         49:7d:12:0f:c6:af:2a:ab:fe:b2:30:4f:ca:64:82:c6:70:97:
         0f:87:d4:b8:85:c7:e7:90:2b:10:7c:7b:59:24:a2:d7:08:fb:
         3c:83:eb:51:91:13:9d:d3:53:d3:0b:0a:2f:de:4c:65:2a:91:
         ed:69:e3:06:4d:3b:01:8c:12:cd:f9:d7:97:93:2b:cf:a8:22:
         7d:70:52:b6:1f:52:f0:7c:5f:d3:c2:5a:53:2e:72:69:6e:94:
         1c:78:c6:8a:f8:3f:83:44:d4:0e:1b:bc:93:0b:2e:66:bd:d1:
         d0:09:ba:c8
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPkaFDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzN1oXDTI0MTAxMjA1MDAw
MFowMzExMC8GA1UEAxMoZjE3MmNhNDA5M2ZmNGNlNDdkMjBiZWIxZmYwNzYyNGFm
ZjA3MGI0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJySSuMSH4Ni
YNpx9XcAFKBNDlTreOUZs1iV7d+DR0n2nulv4FW3KRrTG6OfJiXj97JU16EDhZNI
mm+oHItyeJNaXnpYgwK8F5nOOip9UcSgySdzisD4T/DOLU9tib5Hb7Ox4OHESoi+
UfAO73PwFN1/DHmMCBl8d+sUQ7MWm+8yMZXEyElAMMSHmfGtvDgBj/2zi1ZE0BTJ
ufTT7KL1cBPNnC9VAjZhe/e3x/WjR71fRzB0AE/SQ7ObIBUY7KblNt1WZ364GnEP
OllUJ59Nxgioaogx+L1Kr1uhgi/oy8kjeZOXvKteQ7rDiJX3fSy68vJm7lVuZZfy
BQq4+VJi96sCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBT1S7bzfZKRBx12Wm+5r4Rr
7mFYtTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zY2M2ZjZiMC03ODIw
LTQ1MzAtYmUxOS04NWU2MjU1ODZjNTgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2NjNmY2YjAtNzgyMC00
NTMwLWJlMTktODVlNjI1NTg2YzU4L2YxNzJjYTQwOTNmZjRjZTQ3ZDIwYmViMWZm
MDc2MjRhZmYwNzBiNDAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoT/4DANBAIAAjAHAwUAKAOngDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBiQwDQYJKoZIhvcNAQELBQADggEBAA1r
3Z05VjLOpzCOykPT94SNjSloQVJPvQyOoH3vuPIUA/PAjc2AGn/lY1yDkSe5b/h+
vhG+9NbEqffln54uYBOyAyBUp3f0KUTdzQsVjP9a1GMJXAhJql7hxRE6PnScRJWC
VnkQU04fQq3uDXR2v2SfDV4EqtmJsQJ7bwO0jQ4hvQiMRxceNz/QLbtqR96ua0l9
Eg/Gryqr/rIwT8pkgsZwlw+H1LiFx+eQKxB8e1kkotcI+zyD61GRE53TU9MLCi/e
TGUqke1p4wZNOwGMEs3515eTK8+oIn1wUrYfUvB8X9PCWlMucmlulBx4xor4P4NE
1A4bvJMLLma90dAJusg=
-----END CERTIFICATE-----