Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbd0b26e28ec0e225838e2cda93e25e122b332a.cer
File:                     1bbd0b26e28ec0e225838e2cda93e25e122b332a.cer (raw, json)
Hash identifier:          0XVNjrrprlsk0ESbO6LQW0jtkiM2iWjAkJM1x11Lqmc=
Subject key identifier:   62:CB:ED:1B:21:A1:AD:2F:E5:F5:B2:63:B3:90:0D:90:EA:E1:C4:05
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FAF5C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1bbd0b26e28ec0e225838e2cda93e25e122b332a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 31 Dec 2018 14:16:36 +0000
Certificate not after:    Mon 28 Oct 2024 18:15:17 +0000
Subordinate resources:    AS: 272128
                          IP: 45.169.164.0/22
                          IP: 2803:3a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16446920 (0xfaf5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 31 14:16:36 2018 GMT
            Not After : Oct 28 18:15:17 2024 GMT
        Subject: CN=1bbd0b26e28ec0e225838e2cda93e25e122b332a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0e:4c:75:53:30:eb:84:3f:a4:d9:62:42:c8:
                    3c:32:40:5e:d4:1a:3e:0a:fa:79:87:e6:2b:7a:d8:
                    b0:66:9a:9a:ed:e1:58:16:d0:e1:a6:47:ec:8b:13:
                    31:87:fa:58:0d:28:25:0b:cf:8a:db:96:0f:56:a1:
                    22:93:56:6c:7a:64:c4:a1:85:17:8d:2d:83:2b:e3:
                    ba:69:ef:6f:82:a4:29:91:dd:57:3b:58:76:c3:99:
                    11:d4:c6:28:a6:1c:7d:68:ef:e4:8c:4c:f4:f6:7e:
                    17:b5:8b:0e:bc:e7:f2:75:5f:cb:f2:09:7f:81:cf:
                    90:a4:b7:ed:b5:80:dd:ab:9d:4e:1c:c1:7d:e8:2c:
                    b7:90:59:c4:8d:28:19:79:4c:b1:e2:b8:7d:b4:f7:
                    27:13:7c:5a:58:ee:38:60:69:19:d0:71:ae:ae:e6:
                    cc:21:a2:40:be:a6:7d:23:6a:2f:51:f8:d2:3f:46:
                    8d:f8:0b:9f:f8:03:b6:f6:5d:6e:a3:f1:88:81:f9:
                    a4:a3:d2:a7:ec:f9:7d:ea:0b:c6:e9:d1:9b:33:0d:
                    81:40:e8:7d:5b:7c:e6:de:8a:1c:e1:f0:52:a9:d5:
                    73:eb:b0:92:bb:f3:70:3c:ea:c2:88:1a:9a:a6:08:
                    e7:e2:e7:3b:2c:9d:f6:ef:12:44:81:bc:8f:b7:63:
                    df:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CB:ED:1B:21:A1:AD:2F:E5:F5:B2:63:B3:90:0D:90:EA:E1:C4:05
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1bbd0b26e28ec0e225838e2cda93e25e122b332a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.164.0/22
                IPv6:
                  2803:3a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272128

    Signature Algorithm: sha256WithRSAEncryption
         a1:3b:35:b7:6d:33:46:55:a2:6d:dc:11:2a:87:32:a0:a8:12:
         5a:65:f5:70:50:2b:11:3c:91:84:c9:87:c6:a9:ce:96:94:25:
         b8:73:0a:43:f8:d0:36:2f:0d:f2:0b:c1:95:bb:ad:83:41:b5:
         76:bb:8d:b6:59:f4:24:61:9d:74:35:7f:b7:10:90:3b:01:9b:
         b7:e4:5b:b3:6c:0d:45:ed:bd:00:69:a3:70:5d:87:11:58:7f:
         56:b6:0e:25:18:d3:0f:7e:33:b0:21:7f:b6:65:00:07:69:63:
         9a:2b:67:ac:3c:a5:80:ba:e0:13:52:67:ab:27:20:4b:0e:d8:
         15:86:f4:36:fa:05:25:a7:e6:73:b8:fd:7a:bb:ed:b5:0f:df:
         dc:86:4f:27:ef:1e:c4:25:2c:0e:5d:7a:71:9e:d8:7f:c6:13:
         3d:49:fd:4f:72:f0:18:e5:94:b0:12:aa:cb:da:19:29:aa:ab:
         b4:88:24:28:da:1f:d7:2b:ae:b3:98:dc:4b:fb:87:6e:e0:ab:
         ee:17:38:9a:3b:18:81:fb:4c:05:0f:31:42:a0:c6:de:0f:39:
         b1:a6:77:fa:8c:eb:ea:ff:1c:a7:13:dc:ba:a7:ad:f0:82:83:
         55:3c:86:f2:36:73:af:a6:5c:43:ef:24:e4:5b:50:ae:55:a0:
         7a:2e:7e:31
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPr1yDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MTIzMTE0MTYzNloXDTI0MTAyODE4MTUx
N1owMzExMC8GA1UEAxMoMWJiZDBiMjZlMjhlYzBlMjI1ODM4ZTJjZGE5M2UyNWUx
MjJiMzMyYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIkOTHVTMOuE
P6TZYkLIPDJAXtQaPgr6eYfmK3rYsGaamu3hWBbQ4aZH7IsTMYf6WA0oJQvPituW
D1ahIpNWbHpkxKGFF40tgyvjumnvb4KkKZHdVztYdsOZEdTGKKYcfWjv5IxM9PZ+
F7WLDrzn8nVfy/IJf4HPkKS37bWA3audThzBfegst5BZxI0oGXlMseK4fbT3JxN8
WljuOGBpGdBxrq7mzCGiQL6mfSNqL1H40j9GjfgLn/gDtvZdbqPxiIH5pKPSp+z5
feoLxunRmzMNgUDofVt85t6KHOHwUqnVc+uwkrvzcDzqwogamqYI5+LnOyyd9u8S
RIG8j7dj37sCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRiy+0bIaGtL+X1smOzkA2Q
6uHEBTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82ODViNjU4Yy04M2Mz
LTQ1NDItOTI5OS1hZjVjYWM1YjJlZmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjg1YjY1OGMtODNjMy00
NTQyLTkyOTktYWY1Y2FjNWIyZWZlLzFiYmQwYjI2ZTI4ZWMwZTIyNTgzOGUyY2Rh
OTNlMjVlMTIyYjMzMmEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2ppDANBAIAAjAHAwUAKAMDoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJwAwDQYJKoZIhvcNAQELBQADggEBAKE7
NbdtM0ZVom3cESqHMqCoElpl9XBQKxE8kYTJh8apzpaUJbhzCkP40DYvDfILwZW7
rYNBtXa7jbZZ9CRhnXQ1f7cQkDsBm7fkW7NsDUXtvQBpo3BdhxFYf1a2DiUY0w9+
M7Ahf7ZlAAdpY5orZ6w8pYC64BNSZ6snIEsO2BWG9Db6BSWn5nO4/Xq77bUP39yG
TyfvHsQlLA5denGe2H/GEz1J/U9y8BjllLASqsvaGSmqq7SIJCjaH9crrrOY3Ev7
h27gq+4XOJo7GIH7TAUPMUKgxt4PObGmd/qM6+r/HKcT3LqnrfCCg1U8hvI2c6+m
XEPvJORbUK5VoHoufjE=
-----END CERTIFICATE-----