Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer
File:                     f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer (raw, json)
Hash identifier:          mjmdKBGlrFnSZEo7P94hsK9aqA0MmXA9gV+GT/oIPgo=
Subject key identifier:   E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB8E09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:33 +0000
Certificate not after:    Sun 21 Apr 2024 15:35:26 +0000
Subordinate resources:    IP: 170.150.60.0/22
                          IP: 2803:c740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14388745 (0xdb8e09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:33 2017 GMT
            Not After : Apr 21 15:35:26 2024 GMT
        Subject: CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:f6:b4:9e:4d:13:f1:6a:13:e1:ff:54:a0:
                    42:73:9b:9b:18:0b:e8:0f:d6:32:b0:30:f8:0a:26:
                    6a:09:99:08:d5:f0:a7:05:37:24:2c:55:e8:a6:92:
                    08:af:96:ac:7e:80:94:b6:5e:66:bc:0a:14:a2:5c:
                    9e:6c:a0:30:31:3d:2a:d5:98:44:64:ef:7d:61:9e:
                    07:0e:ee:4b:24:dc:fb:e9:84:64:4b:2e:ea:19:e3:
                    86:f0:c1:e6:c4:68:e6:7f:59:ba:35:88:5e:d4:b0:
                    aa:83:fb:9e:12:5b:4f:b8:95:7b:20:2e:22:d8:ad:
                    97:5d:66:58:d9:6f:87:cf:a7:00:72:d5:04:95:8f:
                    9e:8d:ff:c1:29:02:69:9f:9b:21:8b:94:31:35:ed:
                    c2:d8:48:24:8a:c3:9a:4f:07:05:74:cf:1c:f4:df:
                    3e:9a:56:8d:50:b3:f5:a2:72:bc:ad:f1:53:20:16:
                    5d:79:c9:94:45:01:d0:b0:f9:23:33:23:26:92:42:
                    0c:3e:f8:e4:b0:fa:7b:c8:75:aa:13:94:eb:10:57:
                    b3:36:4c:06:10:00:3b:61:95:45:de:cb:a7:dc:73:
                    e2:82:1e:a9:5a:73:bd:36:05:ef:be:38:7f:e5:c4:
                    88:0d:0e:00:a8:16:db:f9:6b:a7:d5:6f:11:3a:0c:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.60.0/22
                IPv6:
                  2803:c740::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:ec:d4:eb:ff:42:15:b2:bf:08:b4:77:2e:e0:c4:fc:5b:e7:
         b9:4e:49:bd:b5:1a:72:14:bf:07:86:0e:2f:16:bf:44:40:9f:
         e6:03:82:17:c6:b7:4a:17:21:31:32:53:a5:1b:8c:90:6a:dd:
         77:b0:88:5c:89:c3:b2:a1:a3:58:61:22:77:09:ed:77:e6:c5:
         f5:3b:e3:e0:55:2f:0b:a3:70:0f:43:3e:8e:94:9a:67:53:b6:
         95:ea:b9:11:b8:5d:88:23:d7:ac:0c:82:1c:68:81:e5:c2:e6:
         57:10:e2:74:b7:4e:d9:1b:71:bc:54:56:cd:da:21:3a:ad:36:
         8d:f7:7f:08:2f:2a:2f:c9:b4:0c:9b:b9:32:4e:4e:71:6e:6d:
         e5:2b:29:19:37:29:df:4d:3e:6e:bf:8a:be:65:8c:f2:f5:c5:
         27:40:76:72:ef:82:5c:25:8e:86:a3:e0:70:1a:9a:95:d7:dd:
         67:e0:13:d1:b8:8b:9a:65:98:78:f0:55:cd:f2:4d:ef:e2:b2:
         db:85:4f:46:f1:4d:be:f8:6e:54:c2:da:12:7b:82:a0:41:ee:
         cf:46:be:32:16:2d:c0:2e:99:6c:e7:07:c2:77:0a:71:ba:2c:
         6d:e8:3c:2a:bd:d9:b3:7e:dd:01:0a:a2:f9:78:c3:64:7b:50:
         25:ef:00:fc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEANuOCTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzM1oXDTI0MDQyMTE1MzUy
NlowMzExMC8GA1UEAxMoZjVjOWVmOGIzZTM2MjE1YmIzNTZmMWNmMzIyOGI5ZDc5
YjY4NTlmOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIl/9rSeTRPx
ahPh/1SgQnObmxgL6A/WMrAw+AomagmZCNXwpwU3JCxV6KaSCK+WrH6AlLZeZrwK
FKJcnmygMDE9KtWYRGTvfWGeBw7uSyTc++mEZEsu6hnjhvDB5sRo5n9ZujWIXtSw
qoP7nhJbT7iVeyAuItitl11mWNlvh8+nAHLVBJWPno3/wSkCaZ+bIYuUMTXtwthI
JIrDmk8HBXTPHPTfPppWjVCz9aJyvK3xUyAWXXnJlEUB0LD5IzMjJpJCDD745LD6
e8h1qhOU6xBXszZMBhAAO2GVRd7Lp9xz4oIeqVpzvTYF7744f+XEiA0OAKgW2/lr
p9VvEToMkGUCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBTpIJcbOkCFAgoqHsO8/pdO
Ha80iDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xZmNmYzcwNS0zOWQ2
LTRkMmEtYWI5My1jOTAwOTZjMzE0MjgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWZjZmM3MDUtMzlkNi00
ZDJhLWFiOTMtYzkwMDk2YzMxNDI4L2Y1YzllZjhiM2UzNjIxNWJiMzU2ZjFjZjMy
MjhiOWQ3OWI2ODU5ZjkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqqWPDANBAIAAjAHAwUAKAPHQDAN
BgkqhkiG9w0BAQsFAAOCAQEAM+zU6/9CFbK/CLR3LuDE/FvnuU5JvbUachS/B4YO
Lxa/RECf5gOCF8a3ShchMTJTpRuMkGrdd7CIXInDsqGjWGEidwntd+bF9Tvj4FUv
C6NwD0M+jpSaZ1O2leq5EbhdiCPXrAyCHGiB5cLmVxDidLdO2RtxvFRWzdohOq02
jfd/CC8qL8m0DJu5Mk5OcW5t5SspGTcp300+br+KvmWM8vXFJ0B2cu+CXCWOhqPg
cBqaldfdZ+AT0biLmmWYePBVzfJN7+Ky24VPRvFNvvhuVMLaEnuCoEHuz0a+MhYt
wC6ZbOcHwncKcbosbeg8Kr3Zs37dAQqi+XjDZHtQJe8A/A==
-----END CERTIFICATE-----