Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fe69658fec8044fa33652933c2a79abddeb974b4.cer
File:                     fe69658fec8044fa33652933c2a79abddeb974b4.cer (raw, json)
Hash identifier:          YXGha36MHzoPwWUQOuy4v7ycvTFtdLHbtv00QmLqcTE=
Subject key identifier:   D2:B0:0B:0D:FE:C2:0B:3D:67:0C:4F:A5:1D:0F:4E:3A:42:6B:7C:6B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5DBFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/76976ae6-9ba9-4d9a-b58a-60fd07f883fa/fe69658fec8044fa33652933c2a79abddeb974b4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/76976ae6-9ba9-4d9a-b58a-60fd07f883fa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Jul 2018 21:14:25 +0000
Certificate not after:    Fri 17 May 2024 17:33:37 +0000
Subordinate resources:    AS: 266859
                          IP: 45.239.22.0/23
                          IP: 192.75.4.0/24
                          IP: 2803:a2a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15064060 (0xe5dbfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 19 21:14:25 2018 GMT
            Not After : May 17 17:33:37 2024 GMT
        Subject: CN=fe69658fec8044fa33652933c2a79abddeb974b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:df:3d:d2:25:16:d0:3f:db:03:02:ff:e7:84:
                    a2:ac:a6:36:34:72:e2:06:a2:20:f0:09:47:6d:ef:
                    92:62:a5:04:4e:9b:53:9d:a7:e2:c2:5e:90:d4:a9:
                    da:06:4b:25:88:74:af:20:b5:62:ff:24:a4:68:4f:
                    77:7e:6f:04:17:e2:f1:40:0e:28:df:14:20:c9:49:
                    22:98:27:41:38:cb:2d:f9:8f:cf:fd:dd:92:ff:fb:
                    46:8c:a7:3f:8a:89:bd:b9:12:d2:50:ba:39:6b:7d:
                    ca:a0:52:86:db:82:61:76:98:59:92:fb:55:97:70:
                    a9:58:37:95:23:69:e5:da:45:a8:71:95:d2:8e:b4:
                    5d:8d:3a:ea:4c:0c:f8:67:cd:e5:61:ab:fc:e1:4d:
                    aa:67:48:3e:78:39:10:1f:79:a9:a1:93:c6:8f:62:
                    a7:96:c1:53:13:14:82:4b:59:2b:79:a0:0e:99:7c:
                    c1:7a:dd:cc:21:44:9a:c5:09:32:8f:2e:48:64:47:
                    e8:f7:5c:db:4f:ce:4e:57:d2:fd:49:52:65:8d:4e:
                    a6:d2:a4:61:19:57:4b:f7:22:45:c2:f7:90:d4:4d:
                    6f:2a:18:b2:2a:dd:85:e9:7d:a1:cf:bf:da:66:57:
                    5c:9f:d1:39:9f:5c:23:10:30:5a:e1:8a:97:17:9d:
                    eb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B0:0B:0D:FE:C2:0B:3D:67:0C:4F:A5:1D:0F:4E:3A:42:6B:7C:6B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/76976ae6-9ba9-4d9a-b58a-60fd07f883fa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/76976ae6-9ba9-4d9a-b58a-60fd07f883fa/fe69658fec8044fa33652933c2a79abddeb974b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.22.0/23
                  192.75.4.0/24
                IPv6:
                  2803:a2a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266859

    Signature Algorithm: sha256WithRSAEncryption
         84:7c:4f:42:32:85:db:05:38:06:65:99:a6:aa:fa:5a:88:97:
         c4:46:aa:7c:77:f8:ae:45:c9:a3:9d:96:4f:5f:7e:b7:98:bd:
         55:ce:e9:5e:11:d8:c6:77:72:bb:02:13:39:34:27:39:fa:43:
         4f:df:27:86:6d:43:67:2e:1b:ff:0f:09:8e:1d:08:11:38:d1:
         f1:df:bf:97:02:09:87:0e:09:57:85:44:87:a1:c9:b7:14:e6:
         8e:af:8d:75:3f:06:96:bd:f0:e8:64:95:3d:85:98:04:82:a8:
         8e:4c:1b:ac:c1:30:5f:a3:28:4c:ae:3b:cc:7e:12:be:0d:c2:
         09:4a:0f:20:e3:b6:d8:13:b8:ca:4c:47:79:fc:d6:52:99:2b:
         50:47:23:7f:20:d6:30:23:cc:ae:c2:d2:2f:ec:eb:33:b1:33:
         58:7c:0c:27:62:7a:a7:28:81:f7:25:bc:3c:e1:b1:45:c7:81:
         55:6c:11:8d:63:c2:5b:97:7a:8a:1d:10:e5:aa:06:8a:cf:64:
         ca:ea:94:76:a8:b4:7b:6c:59:b2:96:11:c7:92:af:62:13:e0:
         20:c0:cf:0c:9b:69:0f:cd:9a:3f:dc:91:ab:43:5d:b2:d0:b6:
         6c:a1:90:1e:0b:ab:87:6d:7a:0d:41:49:20:c5:32:84:d1:b4:
         67:6d:8d:16
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAOXb/DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDcxOTIxMTQyNVoXDTI0MDUxNzE3MzMz
N1owMzExMC8GA1UEAxMoZmU2OTY1OGZlYzgwNDRmYTMzNjUyOTMzYzJhNzlhYmRk
ZWI5NzRiNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIffPdIlFtA/
2wMC/+eEoqymNjRy4gaiIPAJR23vkmKlBE6bU52n4sJekNSp2gZLJYh0ryC1Yv8k
pGhPd35vBBfi8UAOKN8UIMlJIpgnQTjLLfmPz/3dkv/7RoynP4qJvbkS0lC6OWt9
yqBShtuCYXaYWZL7VZdwqVg3lSNp5dpFqHGV0o60XY066kwM+GfN5WGr/OFNqmdI
Png5EB95qaGTxo9ip5bBUxMUgktZK3mgDpl8wXrdzCFEmsUJMo8uSGRH6Pdc20/O
TlfS/UlSZY1OptKkYRlXS/ciRcL3kNRNbyoYsirdhel9oc+/2mZXXJ/ROZ9cIxAw
WuGKlxed608CAwEAAaOCAw8wggMLMB0GA1UdDgQWBBTSsAsN/sILPWcMT6UdD046
Qmt8azAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83Njk3NmFlNi05YmE5
LTRkOWEtYjU4YS02MGZkMDdmODgzZmEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzY5NzZhZTYtOWJhOS00
ZDlhLWI1OGEtNjBmZDA3Zjg4M2ZhL2ZlNjk2NThmZWM4MDQ0ZmEzMzY1MjkzM2My
YTc5YWJkZGViOTc0YjQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAS3vFgMEAMBLBDANBAIAAjAHAwUA
KAOioDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEmswDQYJKoZIhvcNAQELBQAD
ggEBAIR8T0IyhdsFOAZlmaaq+lqIl8RGqnx3+K5FyaOdlk9ffreYvVXO6V4R2MZ3
crsCEzk0Jzn6Q0/fJ4ZtQ2cuG/8PCY4dCBE40fHfv5cCCYcOCVeFRIehybcU5o6v
jXU/Bpa98OhklT2FmASCqI5MG6zBMF+jKEyuO8x+Er4NwglKDyDjttgTuMpMR3n8
1lKZK1BHI38g1jAjzK7C0i/s6zOxM1h8DCdieqcogfclvDzhsUXHgVVsEY1jwluX
eoodEOWqBorPZMrqlHaotHtsWbKWEceSr2IT4CDAzwybaQ/Nmj/ckatDXbLQtmyh
kB4Lq4dteg1BSSDFMoTRtGdtjRY=
-----END CERTIFICATE-----