Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f568e289143efd5bc87b265db5fbd7741f1aaab9.cer
File:                     f568e289143efd5bc87b265db5fbd7741f1aaab9.cer (raw, json)
Hash identifier:          8bQ1Kmg2VXmyFXbFpCQUVk8QM8JHo3+lmlI+3ZdRolw=
Subject key identifier:   8D:11:80:9A:29:81:AF:C2:63:B5:44:A4:E0:77:41:45:1F:24:2B:6E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2B5EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/f568e289143efd5bc87b265db5fbd7741f1aaab9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 15 Oct 2018 17:00:10 +0000
Certificate not after:    Fri 23 Aug 2024 21:53:06 +0000
Subordinate resources:    AS: 265851
                          IP: 45.225.184.0/22
                          IP: 2803:6a20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15906282 (0xf2b5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 15 17:00:10 2018 GMT
            Not After : Aug 23 21:53:06 2024 GMT
        Subject: CN=f568e289143efd5bc87b265db5fbd7741f1aaab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:09:ae:06:ac:f2:62:a0:2c:27:db:e4:86:
                    37:c7:aa:df:43:86:fc:06:fa:22:5e:4c:28:d4:69:
                    7b:ec:ff:14:61:b3:ea:34:5c:d5:fc:50:4c:1e:7b:
                    f6:9e:94:d5:11:a8:de:e4:cd:5a:f8:27:28:6b:0b:
                    d1:2a:77:23:02:16:b5:f5:ec:53:5d:c6:97:d5:f6:
                    b8:3e:13:72:17:95:2f:fa:ae:bc:05:37:05:63:fe:
                    e8:64:60:a8:41:d2:3f:44:7f:7d:90:e3:be:8c:02:
                    d0:49:ed:a0:20:64:56:76:77:92:50:c2:65:f6:31:
                    27:26:d3:b3:60:e4:16:b2:65:28:5e:f0:83:af:a2:
                    ed:40:da:1c:04:00:38:17:0f:d7:ff:1e:4a:58:6b:
                    3b:46:d3:f6:ed:df:e7:58:0a:da:d8:4e:cd:9d:9f:
                    5c:d6:c3:12:d6:8c:da:f5:16:ed:39:f8:0f:e2:97:
                    23:45:d3:2e:83:b1:8a:5c:45:2e:8b:6c:19:92:0a:
                    93:41:8a:d3:ca:67:f7:ee:65:b5:bb:66:a3:ac:04:
                    24:a2:da:77:d7:58:d7:5c:a1:09:6d:1c:3d:cc:61:
                    9b:48:ca:ee:2b:9f:88:50:6b:19:53:95:02:e5:ed:
                    06:76:34:ef:fb:88:90:ea:f0:32:a5:99:70:31:e9:
                    fe:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:11:80:9A:29:81:AF:C2:63:B5:44:A4:E0:77:41:45:1F:24:2B:6E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/f568e289143efd5bc87b265db5fbd7741f1aaab9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.184.0/22
                IPv6:
                  2803:6a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265851

    Signature Algorithm: sha256WithRSAEncryption
         8f:d7:d0:39:80:50:4f:69:73:be:db:81:81:5f:eb:9b:e1:be:
         ab:03:9c:bd:85:f3:89:77:64:29:ca:3f:ea:d6:1c:e5:d0:b4:
         5e:52:95:e7:e8:32:fc:bb:f7:9d:32:f5:07:b5:9b:d7:cb:1b:
         0e:62:3b:e6:d0:e4:34:fb:94:da:90:5a:0c:a6:25:2e:a5:de:
         9a:0e:2f:94:ce:d7:9e:bd:d1:23:6a:2b:34:60:00:e7:8e:35:
         35:4f:6c:e5:49:ab:6e:dc:e6:76:3b:ed:50:5e:d1:19:e9:75:
         ed:1f:dc:83:3f:15:52:1c:0a:ee:fe:5c:7f:d8:9a:b2:48:90:
         ef:73:2b:7d:45:71:05:d4:d8:e3:02:77:c4:8c:01:be:ee:33:
         16:d9:ec:05:ff:4c:c5:77:c0:a1:a7:a2:01:c9:c7:58:74:42:
         67:93:70:cb:0c:46:70:fb:b6:af:c9:71:78:b5:fb:c0:2d:bc:
         51:d2:50:75:c1:ad:40:73:ba:43:fb:2c:c0:d7:87:08:89:9e:
         a4:7e:4e:17:b1:59:b7:5c:bf:f2:0b:d7:99:d1:b5:bf:b8:a9:
         13:2a:2d:5a:cd:07:1c:b3:67:33:1e:03:27:64:e1:46:17:2b:
         51:e2:1d:a5:39:e6:d0:73:e9:bb:ca:0c:c1:92:b3:c8:68:fb:
         f3:ce:97:04
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPK16jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MTAxNTE3MDAxMFoXDTI0MDgyMzIxNTMw
NlowMzExMC8GA1UEAxMoZjU2OGUyODkxNDNlZmQ1YmM4N2IyNjVkYjVmYmQ3NzQx
ZjFhYWFiOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALiaCa4GrPJi
oCwn2+SGN8eq30OG/Ab6Il5MKNRpe+z/FGGz6jRc1fxQTB579p6U1RGo3uTNWvgn
KGsL0Sp3IwIWtfXsU13Gl9X2uD4TcheVL/quvAU3BWP+6GRgqEHSP0R/fZDjvowC
0EntoCBkVnZ3klDCZfYxJybTs2DkFrJlKF7wg6+i7UDaHAQAOBcP1/8eSlhrO0bT
9u3f51gK2thOzZ2fXNbDEtaM2vUW7Tn4D+KXI0XTLoOxilxFLotsGZIKk0GK08pn
9+5ltbtmo6wEJKLad9dY11yhCW0cPcxhm0jK7iufiFBrGVOVAuXtBnY07/uIkOrw
MqWZcDHp/vUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSNEYCaKYGvwmO1RKTgd0FF
HyQrbjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jNmM2NmU5Yy0zOTY4
LTRmMWEtYWVmYi01OWU0Mzc3YWU4YWYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzZjNjZlOWMtMzk2OC00
ZjFhLWFlZmItNTllNDM3N2FlOGFmL2Y1NjhlMjg5MTQzZWZkNWJjODdiMjY1ZGI1
ZmJkNzc0MWYxYWFhYjkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3huDANBAIAAjAHAwUAKANqIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDnswDQYJKoZIhvcNAQELBQADggEBAI/X
0DmAUE9pc77bgYFf65vhvqsDnL2F84l3ZCnKP+rWHOXQtF5SlefoMvy7950y9Qe1
m9fLGw5iO+bQ5DT7lNqQWgymJS6l3poOL5TO15690SNqKzRgAOeONTVPbOVJq27c
5nY77VBe0Rnpde0f3IM/FVIcCu7+XH/YmrJIkO9zK31FcQXU2OMCd8SMAb7uMxbZ
7AX/TMV3wKGnogHJx1h0QmeTcMsMRnD7tq/JcXi1+8AtvFHSUHXBrUBzukP7LMDX
hwiJnqR+ThexWbdcv/IL15nRtb+4qRMqLVrNBxyzZzMeAydk4UYXK1HiHaU55tBz
6bvKDMGSs8ho+/POlwQ=
-----END CERTIFICATE-----