Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd270e2e7c0dcc9b425710f445fd28ad35578566.cer
File:                     fd270e2e7c0dcc9b425710f445fd28ad35578566.cer (raw, json)
Hash identifier:          wLXwrg3xdDkoADwQf5YLAgvNPdreKBmQOMHcfG64AQ0=
Subject key identifier:   04:07:64:CB:7D:CA:DD:10:F6:23:3B:8C:5A:05:19:DA:3A:A5:41:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE7EA0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7456dfbd-3a0b-4904-8706-1bda602e7d75/fd270e2e7c0dcc9b425710f445fd28ad35578566.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7456dfbd-3a0b-4904-8706-1bda602e7d75/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:25 +0000
Certificate not after:    Wed 13 Mar 2024 15:00:00 +0000
Subordinate resources:    AS: 28501
                          IP: 200.33.26.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14581408 (0xde7ea0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:25 2017 GMT
            Not After : Mar 13 15:00:00 2024 GMT
        Subject: CN=fd270e2e7c0dcc9b425710f445fd28ad35578566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:af:1e:7e:d0:29:9c:47:14:24:b2:01:15:
                    84:16:bb:4b:97:40:25:71:d7:3b:ff:4a:6e:e0:8a:
                    5b:da:76:c5:8c:9e:99:fe:02:67:34:6f:7d:ca:70:
                    d7:f0:d6:ad:04:42:be:3e:70:6f:ee:4a:d0:9e:be:
                    c4:9d:73:e8:5a:95:09:61:8d:8d:e0:95:42:95:7b:
                    4e:30:01:a6:c1:af:9f:38:c2:e9:b0:cf:18:1f:56:
                    15:31:4b:1d:cc:e7:39:48:7e:27:d3:5b:3b:db:39:
                    4b:54:e6:78:fd:5d:0f:86:8e:60:1c:b4:a0:66:bc:
                    c4:66:3d:be:64:90:88:55:0c:40:a7:06:d4:9d:a0:
                    97:fd:0d:bd:be:4a:7c:9a:9f:60:43:2b:33:50:ad:
                    ac:d8:14:3e:d1:d4:16:80:52:43:7e:ed:86:51:68:
                    b7:a2:18:a5:d8:95:6f:dc:d8:50:64:23:59:f1:a2:
                    1e:2b:47:72:17:fb:05:8a:8b:1a:c7:78:6f:9d:1c:
                    14:a3:56:f3:15:21:5e:9e:eb:a8:27:e7:8a:7a:9d:
                    b3:00:d6:7c:a1:41:2b:ce:b7:a1:e9:9c:55:be:93:
                    c0:d1:e2:bc:37:d5:b4:0c:2b:1c:a2:0c:5b:70:44:
                    34:29:d3:f5:de:17:5e:b3:ca:9a:04:6b:f1:15:83:
                    07:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:07:64:CB:7D:CA:DD:10:F6:23:3B:8C:5A:05:19:DA:3A:A5:41:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7456dfbd-3a0b-4904-8706-1bda602e7d75/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7456dfbd-3a0b-4904-8706-1bda602e7d75/fd270e2e7c0dcc9b425710f445fd28ad35578566.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.26.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28501

    Signature Algorithm: sha256WithRSAEncryption
         8f:8c:28:46:db:7e:87:65:aa:aa:90:8b:40:5a:f0:9e:4a:af:
         84:33:ea:79:ad:8f:16:87:a4:f8:2b:ed:73:86:45:49:11:8c:
         08:96:4b:8d:d0:e3:42:4d:02:44:28:a9:6a:cf:71:b5:72:22:
         79:0a:0a:b9:d4:8d:b8:27:65:30:3c:9f:3a:c8:ea:2a:14:a0:
         ea:13:8d:de:98:d3:79:d7:a4:ce:b4:57:9f:d7:e1:10:e1:7f:
         f9:58:82:a9:3b:63:ee:06:d3:1c:d1:25:95:25:39:30:75:ba:
         e1:56:be:15:dc:8f:f2:06:3e:1b:53:d3:ab:aa:79:89:4b:90:
         c1:f6:29:43:fd:65:fe:7c:d7:19:c3:de:84:48:29:8f:1a:22:
         2f:64:b0:e7:3c:15:01:ee:f0:78:24:1e:b0:aa:8b:3f:9f:cb:
         0b:bf:4c:00:7a:96:86:c2:90:73:1f:a3:25:1d:ac:81:1a:6d:
         1c:ec:87:94:54:50:4a:d7:e9:24:cf:a3:34:04:c4:09:79:da:
         72:e5:68:e0:67:06:d4:7c:7d:6f:95:3e:de:66:19:5a:5d:a0:
         0f:1e:ed:72:c2:df:9a:fb:6d:97:a6:45:48:56:74:67:83:b3:
         d5:f9:0c:f8:7b:14:ec:62:80:b4:fe:1e:0b:51:fe:5b:a7:7b:
         b7:b0:65:3e
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAN5+oDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcyNVoXDTI0MDMxMzE1MDAw
MFowMzExMC8GA1UEAxMoZmQyNzBlMmU3YzBkY2M5YjQyNTcxMGY0NDVmZDI4YWQz
NTU3ODU2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKqVrx5+0Cmc
RxQksgEVhBa7S5dAJXHXO/9KbuCKW9p2xYyemf4CZzRvfcpw1/DWrQRCvj5wb+5K
0J6+xJ1z6FqVCWGNjeCVQpV7TjABpsGvnzjC6bDPGB9WFTFLHcznOUh+J9NbO9s5
S1TmeP1dD4aOYBy0oGa8xGY9vmSQiFUMQKcG1J2gl/0Nvb5KfJqfYEMrM1CtrNgU
PtHUFoBSQ37thlFot6IYpdiVb9zYUGQjWfGiHitHchf7BYqLGsd4b50cFKNW8xUh
Xp7rqCfninqdswDWfKFBK863oemcVb6TwNHivDfVtAwrHKIMW3BENCnT9d4XXrPK
mgRr8RWDBxcCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBQEB2TLfcrdEPYjO4xaBRna
OqVBtzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83NDU2ZGZiZC0zYTBi
LTQ5MDQtODcwNi0xYmRhNjAyZTdkNzUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzQ1NmRmYmQtM2EwYi00
OTA0LTg3MDYtMWJkYTYwMmU3ZDc1L2ZkMjcwZTJlN2MwZGNjOWI0MjU3MTBmNDQ1
ZmQyOGFkMzU1Nzg1NjYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcghGjAZBggrBgEFBQcBCAEB/wQK
MAigBjAEAgJvVTANBgkqhkiG9w0BAQsFAAOCAQEAj4woRtt+h2WqqpCLQFrwnkqv
hDPqea2PFoek+Cvtc4ZFSRGMCJZLjdDjQk0CRCipas9xtXIieQoKudSNuCdlMDyf
OsjqKhSg6hON3pjTedekzrRXn9fhEOF/+ViCqTtj7gbTHNEllSU5MHW64Va+FdyP
8gY+G1PTq6p5iUuQwfYpQ/1l/nzXGcPehEgpjxoiL2Sw5zwVAe7weCQesKqLP5/L
C79MAHqWhsKQcx+jJR2sgRptHOyHlFRQStfpJM+jNATECXnacuVo4GcG1Hx9b5U+
3mYZWl2gDx7tcsLfmvttl6ZFSFZ0Z4Oz1fkM+HsU7GKAtP4eC1H+W6d7t7BlPg==
-----END CERTIFICATE-----