Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8999a5bb1c665f3c628fb53842304cdf432ef4d1.cer
File:                     8999a5bb1c665f3c628fb53842304cdf432ef4d1.cer (raw, json)
Hash identifier:          cyCnaUoovM+kPiay9LU+w0OGIKtUqqMfc9NloDaSNJc=
Subject key identifier:   6E:73:F1:01:D6:37:41:BB:04:10:00:51:85:18:BE:C9:85:62:1F:71
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101B0A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/8999a5bb1c665f3c628fb53842304cdf432ef4d1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:59 +0000
Certificate not after:    Fri 20 Dec 2024 17:20:53 +0000
Subordinate resources:    AS: 266736
                          IP: 201.131.90.0/23
                          IP: 2801:0:4c0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16887969 (0x101b0a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:59 2017 GMT
            Not After : Dec 20 17:20:53 2024 GMT
        Subject: CN=8999a5bb1c665f3c628fb53842304cdf432ef4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c0:91:5f:a9:da:26:4e:d9:20:61:a0:60:49:
                    bd:4c:13:09:e5:9a:02:6d:0d:76:95:c7:98:b6:94:
                    7f:fb:1b:36:d6:dd:34:07:ad:93:3f:f6:73:26:4b:
                    88:6d:00:65:88:73:88:0f:09:c0:4a:7f:b7:94:d5:
                    aa:3f:2a:f1:fb:bf:f2:7b:34:ed:3a:9b:08:a0:19:
                    42:f8:c7:cc:fe:81:e4:f7:49:4f:26:ce:d3:d2:7a:
                    2d:f7:46:50:67:95:5e:bc:90:97:78:e6:96:23:f6:
                    93:43:52:79:64:04:0a:52:6c:32:25:0b:64:2a:ed:
                    e4:0d:ac:9d:62:e3:52:10:59:be:45:1d:80:6c:b1:
                    af:91:71:7a:5c:16:b3:b6:62:cd:8c:2c:30:c5:de:
                    37:2c:b3:ec:ff:07:24:68:a9:f7:3a:8c:67:8c:73:
                    73:f0:df:c9:e4:25:5c:d1:47:75:e6:33:ee:38:a0:
                    3c:95:6b:8b:65:2e:4c:02:83:57:e6:0a:42:ab:d2:
                    49:58:0c:16:cf:32:47:e7:99:25:73:c0:9d:31:59:
                    63:db:fb:b7:03:a8:c9:bd:3a:1b:30:a2:a9:4a:d3:
                    55:86:28:36:53:7d:1b:be:37:18:35:41:52:f2:dc:
                    6c:8e:51:1f:9b:21:ad:1e:e8:54:a6:63:a4:27:63:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:73:F1:01:D6:37:41:BB:04:10:00:51:85:18:BE:C9:85:62:1F:71
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/8999a5bb1c665f3c628fb53842304cdf432ef4d1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.90.0/23
                IPv6:
                  2801:0:4c0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266736

    Signature Algorithm: sha256WithRSAEncryption
         89:55:e0:37:6e:dd:87:d1:c8:66:5a:cf:5e:7f:50:37:8f:34:
         cf:09:68:13:94:3d:62:5a:81:85:1f:de:18:36:af:ca:bd:84:
         46:e1:24:fb:62:1a:1e:81:24:7c:ef:76:b4:63:29:66:70:c2:
         31:33:12:9d:07:bb:0c:85:ab:aa:82:91:14:6b:a3:6f:ba:52:
         13:5c:9e:07:a6:db:2d:c0:46:57:c5:fb:35:75:29:45:2f:97:
         42:ec:ac:e8:c3:6d:e8:b6:a4:f0:79:a3:5f:fa:a1:99:71:f9:
         98:d6:d6:aa:98:7f:93:3a:3a:df:40:3c:6b:17:89:a0:48:ef:
         fc:e1:91:3d:15:ff:92:df:35:e1:9c:3b:ab:12:16:25:c9:2c:
         8c:1f:2c:fc:08:69:aa:5a:28:d7:6d:53:a7:ea:0c:e0:a1:3d:
         b4:ef:06:f6:ec:d4:14:c5:fe:e4:2a:b8:71:16:06:9b:2f:52:
         c0:90:d7:4c:b1:2e:99:47:ed:70:97:8d:62:54:0d:a0:c2:01:
         55:71:c5:41:60:a7:73:1c:04:64:bb:ba:74:9f:2a:d6:67:83:
         af:b2:38:43:93:bd:61:ef:a7:64:90:c2:5d:39:3b:1b:ec:1a:
         66:aa:d2:50:8c:13:0a:85:26:2d:0e:6d:d7:e7:5f:ce:58:da:
         83:9d:12:0f
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAQGwoTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1OVoXDTI0MTIyMDE3MjA1
M1owMzExMC8GA1UEAxMoODk5OWE1YmIxYzY2NWYzYzYyOGZiNTM4NDIzMDRjZGY0
MzJlZjRkMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIbAkV+p2iZO
2SBhoGBJvUwTCeWaAm0NdpXHmLaUf/sbNtbdNAetkz/2cyZLiG0AZYhziA8JwEp/
t5TVqj8q8fu/8ns07TqbCKAZQvjHzP6B5PdJTybO09J6LfdGUGeVXryQl3jmliP2
k0NSeWQEClJsMiULZCrt5A2snWLjUhBZvkUdgGyxr5FxelwWs7ZizYwsMMXeNyyz
7P8HJGip9zqMZ4xzc/DfyeQlXNFHdeYz7jigPJVri2UuTAKDV+YKQqvSSVgMFs8y
R+eZJXPAnTFZY9v7twOoyb06GzCiqUrTVYYoNlN9G743GDVBUvLcbI5RH5shrR7o
VKZjpCdj8VcCAwEAAaOCAwswggMHMB0GA1UdDgQWBBRuc/EB1jdBuwQQAFGFGL7J
hWIfcTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85OWE0NmQyNS1kOTMy
LTRlMzEtOTVmMS0wYzkxN2M0OTM2M2IvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTlhNDZkMjUtZDkzMi00
ZTMxLTk1ZjEtMGM5MTdjNDkzNjNiLzg5OTlhNWJiMWM2NjVmM2M2MjhmYjUzODQy
MzA0Y2RmNDMyZWY0ZDEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAcmDWjAPBAIAAjAJAwcAKAEAAATA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQR8DANBgkqhkiG9w0BAQsFAAOCAQEA
iVXgN27dh9HIZlrPXn9QN480zwloE5Q9YlqBhR/eGDavyr2ERuEk+2IaHoEkfO92
tGMpZnDCMTMSnQe7DIWrqoKRFGujb7pSE1yeB6bbLcBGV8X7NXUpRS+XQuys6MNt
6Lak8HmjX/qhmXH5mNbWqph/kzo630A8axeJoEjv/OGRPRX/kt814Zw7qxIWJcks
jB8s/Ahpqloo121Tp+oM4KE9tO8G9uzUFMX+5Cq4cRYGmy9SwJDXTLEumUftcJeN
YlQNoMIBVXHFQWCncxwEZLu6dJ8q1meDr7I4Q5O9Ye+nZJDCXTk7G+waZqrSUIwT
CoUmLQ5t1+dfzljag50SDw==
-----END CERTIFICATE-----