Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7557920befd2cb115a85e3e331f30ebd7d5004c.cer
File:                     f7557920befd2cb115a85e3e331f30ebd7d5004c.cer (raw, json)
Hash identifier:          FOOPaHZe3WAc5RXXh2EvHuIa8g35KfolBysbGXXa3wM=
Subject key identifier:   CE:F5:4C:B6:34:66:71:6B:0A:74:90:D8:C6:EE:C9:31:77:E2:B1:FD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA65BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f81e7ede-c896-4679-a1ea-5539e38471e2/f7557920befd2cb115a85e3e331f30ebd7d5004c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f81e7ede-c896-4679-a1ea-5539e38471e2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:21 +0000
Certificate not after:    Wed 24 Jan 2024 14:35:15 +0000
Subordinate resources:    AS: 262932
                          IP: 170.150.64.0/22
                          IP: 191.103.96.0/20
                          IP: 2803:ba80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14312893 (0xda65bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:21 2017 GMT
            Not After : Jan 24 14:35:15 2024 GMT
        Subject: CN=f7557920befd2cb115a85e3e331f30ebd7d5004c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:81:7c:f8:7d:b6:a4:73:2b:e9:0d:a9:14:
                    45:6b:e0:25:0f:de:e7:e4:48:d9:9f:9f:10:14:53:
                    cd:4b:ed:f3:f4:7a:fa:a7:4b:49:7c:99:94:5e:16:
                    31:cf:ad:49:b5:37:0c:fe:83:80:f3:66:7e:9c:42:
                    ef:00:3d:59:d8:4f:25:ba:aa:4c:e5:33:ae:6a:2a:
                    96:35:e7:38:16:5c:f9:50:fc:ae:bf:f2:38:d2:cd:
                    79:79:98:89:ab:69:95:4e:6c:a8:bd:86:e0:b7:1c:
                    c2:ed:d7:e1:2a:26:c0:d7:53:0b:f7:46:01:cd:6c:
                    71:d4:e0:b6:93:22:f7:90:86:a4:cd:24:0e:d0:d6:
                    58:f4:67:f9:ad:a3:1c:45:7c:d0:c2:d1:d2:50:22:
                    d6:de:f0:54:ed:e1:47:3d:f6:b1:b3:16:70:40:40:
                    e3:32:62:66:d9:0f:a1:48:d5:15:77:4b:6b:3c:13:
                    37:b7:52:fa:29:bf:52:62:6e:b3:ea:58:86:5c:56:
                    35:3c:95:ee:2a:ca:60:5d:ca:d8:61:f3:31:50:22:
                    a3:c8:10:44:44:c7:e5:f5:c4:a2:24:ab:50:3c:a4:
                    fa:dd:46:ec:fe:98:d8:fb:8d:b6:30:c5:f1:c3:92:
                    f3:d5:51:2c:d9:21:1c:56:a9:9a:b0:f0:e1:d4:67:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F5:4C:B6:34:66:71:6B:0A:74:90:D8:C6:EE:C9:31:77:E2:B1:FD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f81e7ede-c896-4679-a1ea-5539e38471e2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f81e7ede-c896-4679-a1ea-5539e38471e2/f7557920befd2cb115a85e3e331f30ebd7d5004c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.64.0/22
                  191.103.96.0/20
                IPv6:
                  2803:ba80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262932

    Signature Algorithm: sha256WithRSAEncryption
         b4:56:85:77:d1:6d:04:3c:bb:4f:44:1c:be:b1:ec:6d:c7:c4:
         40:75:51:ce:91:f4:18:9a:a0:34:96:37:6b:5a:52:f1:c8:b1:
         74:27:93:76:45:cf:c8:2e:be:e4:57:c1:6e:69:49:0b:e3:10:
         76:83:91:83:57:39:84:b1:3a:f0:4a:72:10:d5:66:b9:3d:73:
         bd:bc:a5:b9:42:ed:22:b4:62:8e:25:69:30:e9:b4:24:21:b3:
         60:56:e9:7c:4a:6e:be:f6:da:82:ef:45:9e:6c:6b:3b:a0:f9:
         3f:0c:ff:b7:01:ba:f7:25:d1:c7:0d:02:22:a7:53:e0:4b:12:
         0d:cc:09:a2:80:ed:b0:9a:0b:74:bd:0d:38:ae:a2:17:a5:f2:
         6a:5d:2a:78:3f:ab:0b:18:be:0a:b8:b5:2c:46:9e:5e:85:d4:
         51:ae:3b:96:15:95:6d:f8:1c:42:d8:0a:fc:9e:9d:d1:b3:bc:
         37:20:6d:75:5f:6c:8d:6a:0c:49:f7:b0:86:7e:7e:2c:f1:bf:
         63:24:c7:71:5c:8a:8d:14:12:67:aa:37:2a:ac:90:02:bd:c3:
         e3:26:90:5f:02:ba:6b:c2:72:88:36:7d:1c:2e:b6:bb:60:17:
         87:cd:0a:34:f9:5c:55:3d:1f:0b:8f:6d:45:c2:31:78:7c:8e:
         03:64:a3:62
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEANplvTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyMVoXDTI0MDEyNDE0MzUx
NVowMzExMC8GA1UEAxMoZjc1NTc5MjBiZWZkMmNiMTE1YTg1ZTNlMzMxZjMwZWJk
N2Q1MDA0YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALYUgXz4fbak
cyvpDakURWvgJQ/e5+RI2Z+fEBRTzUvt8/R6+qdLSXyZlF4WMc+tSbU3DP6DgPNm
fpxC7wA9WdhPJbqqTOUzrmoqljXnOBZc+VD8rr/yONLNeXmYiatplU5sqL2G4Lcc
wu3X4SomwNdTC/dGAc1scdTgtpMi95CGpM0kDtDWWPRn+a2jHEV80MLR0lAi1t7w
VO3hRz32sbMWcEBA4zJiZtkPoUjVFXdLazwTN7dS+im/UmJus+pYhlxWNTyV7irK
YF3K2GHzMVAio8gQRETH5fXEoiSrUDyk+t1G7P6Y2PuNtjDF8cOS89VRLNkhHFap
mrDw4dRnQXkCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBTO9Uy2NGZxawp0kNjG7skx
d+Kx/TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mODFlN2VkZS1jODk2
LTQ2NzktYTFlYS01NTM5ZTM4NDcxZTIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjgxZTdlZGUtYzg5Ni00
Njc5LWExZWEtNTUzOWUzODQ3MWUyL2Y3NTU3OTIwYmVmZDJjYjExNWE4NWUzZTMz
MWYzMGViZDdkNTAwNGMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqqWQAMEBL9nYDANBAIAAjAHAwUA
KAO6gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAxQwDQYJKoZIhvcNAQELBQAD
ggEBALRWhXfRbQQ8u09EHL6x7G3HxEB1Uc6R9BiaoDSWN2taUvHIsXQnk3ZFz8gu
vuRXwW5pSQvjEHaDkYNXOYSxOvBKchDVZrk9c728pblC7SK0Yo4laTDptCQhs2BW
6XxKbr722oLvRZ5sazug+T8M/7cBuvcl0ccNAiKnU+BLEg3MCaKA7bCaC3S9DTiu
ohel8mpdKng/qwsYvgq4tSxGnl6F1FGuO5YVlW34HELYCvyendGzvDcgbXVfbI1q
DEn3sIZ+fizxv2Mkx3Fcio0UEmeqNyqskAK9w+MmkF8CumvCcog2fRwutrtgF4fN
CjT5XFU9HwuPbUXCMXh8jgNko2I=
-----END CERTIFICATE-----