Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f704dcc2bd05f2f811f329995911565e1ff53e09.cer
File:                     f704dcc2bd05f2f811f329995911565e1ff53e09.cer (raw, json)
Hash identifier:          wDKPvRG6AW91i/7a3yRDTwrma/asJnaBScXsOqJ/95Q=
Subject key identifier:   29:50:CD:67:0B:F0:D9:8B:2F:8D:D9:F4:08:53:EE:DB:28:C8:EA:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED7249
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/f704dcc2bd05f2f811f329995911565e1ff53e09.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:48 +0000
Certificate not after:    Fri 12 Jul 2024 15:00:00 +0000
Subordinate resources:    AS: 27701
                          IP: 201.219.128.0/19
                          IP: 2800:290::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15561289 (0xed7249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:48 2017 GMT
            Not After : Jul 12 15:00:00 2024 GMT
        Subject: CN=f704dcc2bd05f2f811f329995911565e1ff53e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:33:49:2c:1e:a1:5b:ab:a9:90:a2:5c:0f:
                    4b:ec:bb:94:42:0d:f1:f6:2b:f3:82:9a:90:fd:05:
                    f3:41:dc:23:51:fd:7c:1c:2d:26:c1:54:46:69:10:
                    58:ea:f2:c1:16:bb:e6:39:6f:7a:41:1d:08:16:e3:
                    9c:92:30:7c:18:95:39:19:e8:c6:9a:fa:5d:31:4c:
                    2e:98:7c:cd:50:ce:aa:29:34:06:d4:27:bf:bb:ac:
                    a8:85:cf:ea:a4:45:f6:30:9b:20:f1:14:8b:e6:43:
                    93:10:e8:1f:cf:23:88:3a:dd:03:db:9b:e3:01:c7:
                    e8:da:81:89:54:ed:3d:c6:a4:77:64:1e:25:0e:c6:
                    1b:f2:be:3f:06:0e:75:be:af:cd:55:9a:fd:f7:2d:
                    37:3e:b2:3e:3a:de:40:a1:16:66:47:23:41:d6:b5:
                    8f:2a:fd:66:e3:6d:f4:6e:4d:41:2e:33:a8:4d:d1:
                    9f:11:b6:f9:21:f0:f8:f2:03:38:3a:72:0b:09:8e:
                    2e:67:4d:73:d1:81:e3:a1:b0:67:0d:f3:27:e9:78:
                    b2:82:fd:d6:5d:87:63:94:e3:3e:05:0a:75:b9:21:
                    b5:62:68:fa:90:9e:2a:c9:90:27:7f:83:94:04:9f:
                    70:48:06:b9:a9:85:46:3e:79:6b:ff:df:85:1e:be:
                    00:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:50:CD:67:0B:F0:D9:8B:2F:8D:D9:F4:08:53:EE:DB:28:C8:EA:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/f704dcc2bd05f2f811f329995911565e1ff53e09.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.128.0/19
                IPv6:
                  2800:290::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27701

    Signature Algorithm: sha256WithRSAEncryption
         32:50:d5:5a:3d:fe:af:d4:85:d4:67:a5:60:e5:e9:98:2f:b5:
         bb:f0:ea:37:28:66:d8:02:92:40:a3:4c:5b:87:78:9c:cd:b8:
         57:5a:c4:2e:b3:5c:e8:eb:ac:4f:7a:3f:a7:c5:e6:d9:c5:f1:
         14:61:c6:38:ff:15:da:ce:1f:20:07:ac:d8:79:b7:8a:84:35:
         91:e6:04:a6:14:db:c2:f0:f1:2e:bf:a8:05:2a:40:0c:eb:8f:
         6e:a0:3e:be:0d:82:aa:df:c8:fb:e8:28:38:d4:31:42:ee:fb:
         2f:65:5c:2c:bc:83:b4:4e:ac:43:30:67:34:fa:5b:84:2b:31:
         46:36:93:55:a2:87:83:3d:6d:ca:4c:92:d4:75:96:0b:bd:25:
         40:94:57:7c:73:00:e0:54:ed:28:fd:7a:99:ca:ca:3a:52:8a:
         b3:5f:0e:68:7d:e6:39:1b:ad:91:89:37:4d:c9:f4:96:9f:7b:
         88:6b:2e:e1:51:55:4e:e0:4c:d6:2c:dc:2e:6d:96:d3:0d:b7:
         a9:42:b5:d5:14:ca:f8:5f:d8:e3:b1:7d:11:e7:68:7d:d9:93:
         d6:2e:11:12:7b:55:69:a2:6c:c0:46:63:0c:bc:e7:40:7e:d5:
         1e:95:58:2e:5c:20:36:b1:fb:01:ce:2f:96:20:63:6a:4a:c0:
         3f:a3:fe:77
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIEAO1ySTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0OFoXDTI0MDcxMjE1MDAw
MFowMzExMC8GA1UEAxMoZjcwNGRjYzJiZDA1ZjJmODExZjMyOTk5NTkxMTU2NWUx
ZmY1M2UwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKc4M0ksHqFb
q6mQolwPS+y7lEIN8fYr84KakP0F80HcI1H9fBwtJsFURmkQWOrywRa75jlvekEd
CBbjnJIwfBiVORnoxpr6XTFMLph8zVDOqik0BtQnv7usqIXP6qRF9jCbIPEUi+ZD
kxDoH88jiDrdA9ub4wHH6NqBiVTtPcakd2QeJQ7GG/K+PwYOdb6vzVWa/fctNz6y
PjreQKEWZkcjQda1jyr9ZuNt9G5NQS4zqE3RnxG2+SHw+PIDODpyCwmOLmdNc9GB
46GwZw3zJ+l4soL91l2HY5TjPgUKdbkhtWJo+pCeKsmQJ3+DlASfcEgGuamFRj55
a//fhR6+ANcCAwEAAaOCAwgwggMEMB0GA1UdDgQWBBQpUM1nC/DZiy+N2fQIU+7b
KMjqtzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84MjJkZTE2Ny00NmYy
LTQ5YWYtYjE1Yy1kNWIzODZlNjBjYzIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODIyZGUxNjctNDZmMi00
OWFmLWIxNWMtZDViMzg2ZTYwY2MyL2Y3MDRkY2MyYmQwNWYyZjgxMWYzMjk5OTU5
MTE1NjVlMWZmNTNlMDkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBcnbgDANBAIAAjAHAwUAKAACkDAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJsNTANBgkqhkiG9w0BAQsFAAOCAQEAMlDV
Wj3+r9SF1GelYOXpmC+1u/DqNyhm2AKSQKNMW4d4nM24V1rELrNc6OusT3o/p8Xm
2cXxFGHGOP8V2s4fIAes2Hm3ioQ1keYEphTbwvDxLr+oBSpADOuPbqA+vg2Cqt/I
++goONQxQu77L2VcLLyDtE6sQzBnNPpbhCsxRjaTVaKHgz1tykyS1HWWC70lQJRX
fHMA4FTtKP16mcrKOlKKs18OaH3mORutkYk3Tcn0lp97iGsu4VFVTuBM1izcLm2W
0w23qUK11RTK+F/Y47F9EedofdmT1i4REntVaaJswEZjDLznQH7VHpVYLlwgNrH7
Ac4vliBjakrAP6P+dw==
-----END CERTIFICATE-----