Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd23d99a27c4af985ce7ec3b51226634dfd3b178.cer
File:                     fd23d99a27c4af985ce7ec3b51226634dfd3b178.cer (raw, json)
Hash identifier:          5oX5WLq6G2ZTriOEGHSUWggBAiVVIIAymfv+CqoPhBg=
Subject key identifier:   00:E1:88:1E:17:19:6F:53:65:A4:96:D7:77:F2:59:A9:AF:B6:68:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D9185A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4857b72b-5804-4059-a16b-b17e2cab7bbb/fd23d99a27c4af985ce7ec3b51226634dfd3b178.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4857b72b-5804-4059-a16b-b17e2cab7bbb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:21 +0000
Certificate not after:    Mon 08 Jan 2024 16:19:43 +0000
Subordinate resources:    AS: 263742
                          IP: 181.224.176.0/21
                          IP: 2803:bd00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14227546 (0xd9185a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:21 2017 GMT
            Not After : Jan  8 16:19:43 2024 GMT
        Subject: CN=fd23d99a27c4af985ce7ec3b51226634dfd3b178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c1:59:79:d4:ef:84:03:21:23:a7:cd:05:de:
                    2f:95:5c:7f:59:ea:af:51:ca:9f:86:35:c2:e9:9b:
                    24:c1:a0:5d:4d:95:c4:34:f2:7a:6b:2c:50:18:7a:
                    6e:bf:a0:ce:8e:6c:fb:d5:5b:e0:c7:4a:c0:3b:b3:
                    d1:8e:e8:63:0a:93:75:c9:1e:cd:2a:13:67:f4:a9:
                    23:cf:fb:b2:37:91:4d:7b:6a:6d:91:fa:d1:30:54:
                    3e:9c:ad:42:cc:5d:c0:60:71:a1:a8:48:11:9e:3d:
                    b1:e1:3d:0f:5d:76:b7:9f:69:e1:13:5e:32:1b:cf:
                    c1:f6:32:b7:5e:24:fd:6b:3f:4c:2c:03:7e:21:a6:
                    99:00:4e:c8:4e:0e:d2:70:df:6d:01:de:d6:45:3e:
                    80:44:ec:ab:20:f6:d0:64:1a:6d:66:f0:67:5b:22:
                    26:ba:9f:f9:77:7c:f4:1c:3b:d3:4d:d3:33:e0:1f:
                    22:ea:c5:a6:8d:28:b8:f7:8d:b2:5b:48:51:d6:66:
                    87:e4:05:63:3f:8f:c5:ee:1d:f5:13:35:75:a6:f5:
                    5f:36:e5:19:29:01:2b:11:fd:d5:ea:0b:4c:67:08:
                    bc:dd:f5:91:c4:d6:82:d2:3e:b6:a9:47:dd:44:4c:
                    4c:8a:c6:db:b0:3f:8e:df:0e:66:ed:9d:ce:e0:06:
                    6b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E1:88:1E:17:19:6F:53:65:A4:96:D7:77:F2:59:A9:AF:B6:68:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4857b72b-5804-4059-a16b-b17e2cab7bbb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4857b72b-5804-4059-a16b-b17e2cab7bbb/fd23d99a27c4af985ce7ec3b51226634dfd3b178.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.176.0/21
                IPv6:
                  2803:bd00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263742

    Signature Algorithm: sha256WithRSAEncryption
         1e:b4:21:52:66:2c:ab:e8:87:75:9d:2c:c2:89:8f:5e:f1:5f:
         1e:af:fe:dd:ac:95:0d:6c:4b:1b:15:ae:81:f1:2a:8b:54:64:
         9d:cb:b5:33:bd:80:bc:49:13:03:c1:e3:94:4a:c6:16:46:da:
         e2:ca:78:bf:23:9e:00:d7:a2:f0:e1:4c:5f:3f:90:3b:73:2b:
         a9:89:39:f5:90:64:11:3a:04:57:9f:68:1e:85:35:44:ca:47:
         63:74:c7:37:7b:4f:9f:4d:92:7b:6e:2f:21:41:54:9f:2a:86:
         48:7f:87:02:79:c9:5e:a7:47:92:76:ca:32:a7:d7:b0:06:9d:
         14:a5:2c:9b:38:2b:f6:37:18:a3:1d:cd:43:79:43:fa:c1:8b:
         2a:f6:4d:ea:d4:27:3e:3b:75:98:3b:e5:87:38:05:b3:d1:e6:
         52:d9:08:38:bf:8d:97:f4:7b:94:e9:59:15:e2:ef:6b:26:b7:
         57:fc:57:79:95:9e:fa:c0:59:c1:92:1d:82:1e:43:c1:16:96:
         1e:80:b6:64:db:7d:29:1d:d3:70:f9:b7:a2:80:f8:23:7b:00:
         98:b8:b8:0e:db:43:1b:28:ad:27:8c:7a:7d:c8:29:50:00:9c:
         a3:e4:30:9f:02:bb:d0:0b:2f:75:a1:84:9c:51:f4:8f:b7:87:
         9d:84:e9:9e
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANkYWjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyMVoXDTI0MDEwODE2MTk0
M1owMzExMC8GA1UEAxMoZmQyM2Q5OWEyN2M0YWY5ODVjZTdlYzNiNTEyMjY2MzRk
ZmQzYjE3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN3BWXnU74QD
ISOnzQXeL5Vcf1nqr1HKn4Y1wumbJMGgXU2VxDTyemssUBh6br+gzo5s+9Vb4MdK
wDuz0Y7oYwqTdckezSoTZ/SpI8/7sjeRTXtqbZH60TBUPpytQsxdwGBxoahIEZ49
seE9D112t59p4RNeMhvPwfYyt14k/Ws/TCwDfiGmmQBOyE4O0nDfbQHe1kU+gETs
qyD20GQabWbwZ1siJrqf+Xd89Bw7003TM+AfIurFpo0ouPeNsltIUdZmh+QFYz+P
xe4d9RM1dab1XzblGSkBKxH91eoLTGcIvN31kcTWgtI+tqlH3URMTIrG27A/jt8O
Zu2dzuAGa/8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQA4YgeFxlvU2Wkltd38lmp
r7ZoszAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80ODU3YjcyYi01ODA0
LTQwNTktYTE2Yi1iMTdlMmNhYjdiYmIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDg1N2I3MmItNTgwNC00
MDU5LWExNmItYjE3ZTJjYWI3YmJiL2ZkMjNkOTlhMjdjNGFmOTg1Y2U3ZWMzYjUx
MjI2NjM0ZGZkM2IxNzgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA7XgsDANBAIAAjAHAwUAKAO9ADAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBj4wDQYJKoZIhvcNAQELBQADggEBAB60
IVJmLKvoh3WdLMKJj17xXx6v/t2slQ1sSxsVroHxKotUZJ3LtTO9gLxJEwPB45RK
xhZG2uLKeL8jngDXovDhTF8/kDtzK6mJOfWQZBE6BFefaB6FNUTKR2N0xzd7T59N
kntuLyFBVJ8qhkh/hwJ5yV6nR5J2yjKn17AGnRSlLJs4K/Y3GKMdzUN5Q/rBiyr2
TerUJz47dZg75Yc4BbPR5lLZCDi/jZf0e5TpWRXi72smt1f8V3mVnvrAWcGSHYIe
Q8EWlh6AtmTbfSkd03D5t6KA+CN7AJi4uA7bQxsorSeMen3IKVAAnKPkMJ8Cu9AL
L3WhhJxR9I+3h52E6Z4=
-----END CERTIFICATE-----