Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acf2f8bdf63fefc207c62a198746368b3d6991d1.cer
File:                     acf2f8bdf63fefc207c62a198746368b3d6991d1.cer (raw, json)
Hash identifier:          i8pYp66fWAsYFnX6itDGYCi5n2tF+oItX9m5KP1eaS0=
Subject key identifier:   19:16:F1:DA:85:AC:C5:FB:D1:A0:F6:25:22:ED:D2:92:80:2C:68:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010040B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/acf2f8bdf63fefc207c62a198746368b3d6991d1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:28 +0000
Certificate not after:    Sat 07 Dec 2024 15:55:18 +0000
Subordinate resources:    AS: 262194
                          IP: 190.109.32.0/19
                          IP: 2803:9000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16793782 (0x10040b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:28 2017 GMT
            Not After : Dec  7 15:55:18 2024 GMT
        Subject: CN=acf2f8bdf63fefc207c62a198746368b3d6991d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:9f:32:e8:07:60:a9:fa:c1:2a:28:92:a3:
                    24:b1:f4:55:df:55:4a:5f:80:ee:b3:12:ed:98:12:
                    91:f1:0b:b3:d1:9c:b8:03:c8:5c:fd:57:00:d0:97:
                    35:64:3b:ca:ef:9c:13:ec:70:55:9f:e2:48:91:86:
                    3f:1c:3c:b0:0a:ad:ce:08:3a:21:34:67:5f:b7:0b:
                    2d:de:86:f6:29:cb:56:0d:8d:3c:5c:2c:2b:ae:98:
                    c4:1c:9d:af:dd:2c:b3:6f:e8:b6:9a:dd:27:eb:84:
                    fb:23:44:0f:12:c8:e8:63:cf:0e:3c:9a:24:01:26:
                    ad:f3:2d:cb:8e:05:1b:5f:ec:84:ab:44:1b:62:e3:
                    ad:e9:e3:20:62:ae:40:f9:f5:c4:90:f7:76:21:78:
                    88:1a:d6:e2:d6:9b:d7:e6:e7:02:10:6d:62:bb:ea:
                    de:87:54:ee:82:80:1e:37:bf:73:1f:2b:3d:db:9f:
                    aa:6a:97:65:db:20:a5:95:23:50:cc:9e:8d:68:e1:
                    d9:45:fc:c0:4c:df:be:99:f2:c2:5b:21:f3:9e:b9:
                    64:16:5a:1b:95:af:6d:7a:f7:97:b7:6d:6a:62:f9:
                    22:46:16:93:95:68:68:9e:87:6a:9e:4c:03:9c:a1:
                    63:06:c2:6e:f5:12:2c:71:65:47:d3:38:ef:37:a3:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:16:F1:DA:85:AC:C5:FB:D1:A0:F6:25:22:ED:D2:92:80:2C:68:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/acf2f8bdf63fefc207c62a198746368b3d6991d1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.32.0/19
                IPv6:
                  2803:9000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262194

    Signature Algorithm: sha256WithRSAEncryption
         b6:89:6a:24:4b:9e:e3:38:cf:8c:db:ba:d5:ea:57:1d:e2:c8:
         cb:99:1d:cf:4a:7f:30:0e:c2:a6:0c:32:a5:12:82:d7:a6:49:
         f5:31:c4:27:61:84:10:c4:7b:61:3a:1e:04:0d:f3:04:6c:35:
         c0:6f:6f:09:ad:2a:5f:f3:f8:b6:ba:85:f9:43:ee:34:29:41:
         69:b1:f0:b7:a5:01:b4:8d:7e:51:c3:78:79:28:7f:45:65:08:
         6e:bb:5e:cc:20:e0:35:32:a0:99:e0:2b:89:5e:c2:e1:4a:db:
         1b:69:89:78:9e:f0:37:2b:61:60:d6:d1:54:9a:62:89:ae:0a:
         a5:0e:7b:46:e0:94:65:53:bf:68:41:4f:31:20:2d:23:c4:a7:
         f0:f7:3a:f0:1f:8a:d4:fb:7d:0f:77:0a:a3:66:3f:38:96:0a:
         62:17:a0:15:1e:e2:d6:19:d2:1b:04:28:fb:35:e4:f1:20:18:
         08:58:fe:45:5d:cd:ac:83:8d:a0:67:f6:88:30:2b:cd:a6:83:
         f6:b7:03:a3:aa:87:d8:64:3c:79:4b:b4:1b:2f:cf:08:13:7d:
         84:2f:d5:d6:0e:7e:32:d7:45:a5:c0:ac:d1:99:70:25:98:54:
         1f:74:ed:5d:ca:bd:d0:8c:43:03:30:90:aa:6a:95:21:90:99:
         4d:d2:2d:f2
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQBAtjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyOFoXDTI0MTIwNzE1NTUx
OFowMzExMC8GA1UEAxMoYWNmMmY4YmRmNjNmZWZjMjA3YzYyYTE5ODc0NjM2OGIz
ZDY5OTFkMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMHrnzLoB2Cp
+sEqKJKjJLH0Vd9VSl+A7rMS7ZgSkfELs9GcuAPIXP1XANCXNWQ7yu+cE+xwVZ/i
SJGGPxw8sAqtzgg6ITRnX7cLLd6G9inLVg2NPFwsK66YxBydr90ss2/otprdJ+uE
+yNEDxLI6GPPDjyaJAEmrfMty44FG1/shKtEG2LjrenjIGKuQPn1xJD3diF4iBrW
4tab1+bnAhBtYrvq3odU7oKAHje/cx8rPdufqmqXZdsgpZUjUMyejWjh2UX8wEzf
vpnywlsh8565ZBZaG5WvbXr3l7dtamL5IkYWk5VoaJ6Hap5MA5yhYwbCbvUSLHFl
R9M47zejX4UCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQZFvHahazF+9Gg9iUi7dKS
gCxoxjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jNWFhZDc5Yy1lYjFk
LTQ2MjktYThlNi02OWViNGM4YmMyY2QvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzVhYWQ3OWMtZWIxZC00
NjI5LWE4ZTYtNjllYjRjOGJjMmNkL2FjZjJmOGJkZjYzZmVmYzIwN2M2MmExOTg3
NDYzNjhiM2Q2OTkxZDEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBb5tIDANBAIAAjAHAwUAKAOQADAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEADIwDQYJKoZIhvcNAQELBQADggEBALaJ
aiRLnuM4z4zbutXqVx3iyMuZHc9KfzAOwqYMMqUSgtemSfUxxCdhhBDEe2E6HgQN
8wRsNcBvbwmtKl/z+La6hflD7jQpQWmx8LelAbSNflHDeHkof0VlCG67Xswg4DUy
oJngK4lewuFK2xtpiXie8DcrYWDW0VSaYomuCqUOe0bglGVTv2hBTzEgLSPEp/D3
OvAfitT7fQ93CqNmPziWCmIXoBUe4tYZ0hsEKPs15PEgGAhY/kVdzayDjaBn9ogw
K82mg/a3A6Oqh9hkPHlLtBsvzwgTfYQv1dYOfjLXRaXArNGZcCWYVB907V3KvdCM
QwMwkKpqlSGQmU3SLfI=
-----END CERTIFICATE-----