Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/196eb8a832f848562e11842dee4c377735a0eb9f.cer
File:                     196eb8a832f848562e11842dee4c377735a0eb9f.cer (raw, json)
Hash identifier:          QYfxJkyLpRYzW+jTw/pyH7qt4NrJxPhYmUhDUy7Mgvo=
Subject key identifier:   0F:99:B5:F0:25:8D:56:EE:8A:F5:DF:2A:64:35:69:CA:7B:9A:FD:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC5AA8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c71b5c8a-e844-4d02-ad50-e5964fcf7cfc/196eb8a832f848562e11842dee4c377735a0eb9f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c71b5c8a-e844-4d02-ad50-e5964fcf7cfc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2019 00:13:48 +0000
Certificate not after:    Sat 17 Feb 2024 17:16:03 +0000
Subordinate resources:    AS: 263127
                          IP: 207.248.108.0 -- 207.248.113.255
                          IP: 2806:350::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14441128 (0xdc5aa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 19 00:13:48 2019 GMT
            Not After : Feb 17 17:16:03 2024 GMT
        Subject: CN=196eb8a832f848562e11842dee4c377735a0eb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3b:a4:b4:c4:02:9c:0d:95:9a:a6:fa:c6:92:
                    64:3a:b4:7b:3c:19:8a:28:59:96:08:bb:5d:74:ce:
                    5a:01:48:30:02:ef:68:b8:09:ca:16:1e:11:f2:bf:
                    21:cd:39:63:f7:55:ed:e9:82:36:82:97:1f:fd:1b:
                    94:cd:ea:d8:2d:9b:3d:12:8a:f0:6d:dd:be:32:3c:
                    7d:e6:8d:4c:b5:19:9e:28:c6:38:4c:ce:95:ec:c8:
                    4c:36:f9:4d:b6:27:0b:9c:ed:10:10:21:25:02:a2:
                    aa:b5:89:47:31:bb:51:55:f9:3b:45:42:32:45:37:
                    67:d4:52:a4:b7:bb:ab:b0:71:ee:b7:75:06:7a:e3:
                    a2:ff:ee:97:ee:3a:02:4b:38:8c:71:b8:01:0e:d1:
                    da:20:d1:f6:db:55:72:ef:10:b8:ad:95:f6:bc:e1:
                    60:c5:4a:3e:19:a2:5b:2c:b0:d4:09:04:c8:5f:00:
                    91:9c:61:a9:e7:39:b0:f4:27:99:51:24:61:a6:7f:
                    f0:b9:11:14:2f:ab:69:21:4e:29:12:40:3b:8a:2a:
                    e2:3b:89:51:6a:2b:44:4e:2b:3e:24:f2:a8:2e:db:
                    5b:03:8e:65:11:18:97:11:bf:c9:f0:c8:ca:32:38:
                    54:64:49:70:cb:6a:73:3c:f5:6c:68:b1:94:9d:e6:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:99:B5:F0:25:8D:56:EE:8A:F5:DF:2A:64:35:69:CA:7B:9A:FD:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c71b5c8a-e844-4d02-ad50-e5964fcf7cfc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c71b5c8a-e844-4d02-ad50-e5964fcf7cfc/196eb8a832f848562e11842dee4c377735a0eb9f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.108.0-207.248.113.255
                IPv6:
                  2806:350::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263127

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:21:e6:b7:79:c1:28:f0:59:19:27:9a:ba:f7:36:51:1d:
         de:ef:9a:7a:b2:b6:15:bc:13:bd:23:90:53:24:7e:ec:31:f8:
         5d:f1:95:19:29:43:30:dc:70:01:f7:e4:7c:ce:da:df:ad:e1:
         b5:88:35:9b:cc:9d:cf:c0:6a:7e:fd:75:d0:ce:e0:73:e8:3a:
         f3:12:aa:61:18:75:59:48:42:45:57:91:60:2d:f1:47:44:52:
         ea:40:ac:79:68:15:4a:aa:ba:d1:7d:76:27:bc:de:7d:50:b9:
         a3:41:85:db:19:58:79:20:9d:fd:3e:27:53:0f:ec:86:d5:e0:
         52:83:8c:b2:56:b9:3e:94:44:8a:11:43:87:4d:6e:5d:9a:8f:
         ab:74:a2:55:eb:6a:c3:bd:cf:6a:18:27:ee:dd:48:a3:8d:3d:
         a7:d1:f9:39:37:9a:2c:17:d9:8f:e3:e1:57:9e:be:1c:4b:4b:
         fd:28:d5:d8:b3:96:f2:86:1a:1a:f5:80:7e:69:9e:2c:88:4f:
         9b:15:cf:53:1c:2d:82:f2:26:1e:53:14:f7:5b:15:76:01:e0:
         dd:f9:14:30:e5:5a:5a:63:29:45:97:f3:14:d5:30:84:c7:d8:
         85:92:6c:98:b9:11:cd:be:49:ff:48:98:93:9c:d1:df:26:4e:
         6f:93:43:85
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIEANxaqDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDMxOTAwMTM0OFoXDTI0MDIxNzE3MTYw
M1owMzExMC8GA1UEAxMoMTk2ZWI4YTgzMmY4NDg1NjJlMTE4NDJkZWU0YzM3Nzcz
NWEwZWI5ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJo7pLTEApwN
lZqm+saSZDq0ezwZiihZlgi7XXTOWgFIMALvaLgJyhYeEfK/Ic05Y/dV7emCNoKX
H/0blM3q2C2bPRKK8G3dvjI8feaNTLUZnijGOEzOlezITDb5TbYnC5ztEBAhJQKi
qrWJRzG7UVX5O0VCMkU3Z9RSpLe7q7Bx7rd1Bnrjov/ul+46Aks4jHG4AQ7R2iDR
9ttVcu8QuK2V9rzhYMVKPhmiWyyw1AkEyF8AkZxhqec5sPQnmVEkYaZ/8LkRFC+r
aSFOKRJAO4oq4juJUWorRE4rPiTyqC7bWwOOZREYlxG/yfDIyjI4VGRJcMtqczz1
bGixlJ3mmA8CAwEAAaOCAxEwggMNMB0GA1UdDgQWBBQPmbXwJY1W7or13ypkNWnK
e5r9tzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jNzFiNWM4YS1lODQ0
LTRkMDItYWQ1MC1lNTk2NGZjZjdjZmMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzcxYjVjOGEtZTg0NC00
ZDAyLWFkNTAtZTU5NjRmY2Y3Y2ZjLzE5NmViOGE4MzJmODQ4NTYyZTExODQyZGVl
NGMzNzc3MzVhMGViOWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwFAQCAAEwDjAMAwQCz/hsAwQBz/hwMA0EAgACMAcD
BQAoBgNQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQD1zANBgkqhkiG9w0BAQsF
AAOCAQEASlgh5rd5wSjwWRknmrr3NlEd3u+aerK2FbwTvSOQUyR+7DH4XfGVGSlD
MNxwAffkfM7a363htYg1m8ydz8Bqfv110M7gc+g68xKqYRh1WUhCRVeRYC3xR0RS
6kCseWgVSqq60X12J7zefVC5o0GF2xlYeSCd/T4nUw/shtXgUoOMsla5PpREihFD
h01uXZqPq3SiVetqw73Pahgn7t1Io409p9H5OTeaLBfZj+PhV56+HEtL/SjV2LOW
8oYaGvWAfmmeLIhPmxXPUxwtgvImHlMU91sVdgHg3fkUMOVaWmMpRZfzFNUwhMfY
hZJsmLkRzb5J/0iYk5zR3yZOb5NDhQ==
-----END CERTIFICATE-----