Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.cer
File:                     1c19bb58bf30a6b5633338f01c9003f7c46c52e6.cer (raw, json)
Hash identifier:          tPgYpVlgC9fKw4/mPoAf4v1+8T8A09Y78KCQBVmz+f0=
Subject key identifier:   D8:D1:38:88:F9:CA:FE:3A:32:13:BE:AD:07:4E:F1:CB:36:16:9A:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D75D8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 24 Mar 2020 14:10:15 +0000
Certificate not after:    Sun 17 Dec 2023 14:30:29 +0000
Subordinate resources:    AS: 269949
                          IP: 190.83.124.0/22
                          IP: 2803:eae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14114186 (0xd75d8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 24 14:10:15 2020 GMT
            Not After : Dec 17 14:30:29 2023 GMT
        Subject: CN=1c19bb58bf30a6b5633338f01c9003f7c46c52e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:b7:f9:9c:e0:fb:dd:aa:60:df:83:c1:35:
                    dc:bd:01:74:8f:15:c3:7e:37:a4:b3:f1:30:f6:37:
                    da:12:b9:cd:da:36:4f:7f:71:b1:7a:48:b1:a3:2d:
                    f5:87:bd:b4:35:01:82:e0:7e:fa:72:d3:8f:c0:90:
                    58:da:b9:a2:a5:a4:80:9d:39:71:12:f6:4a:27:2a:
                    8e:99:38:b2:00:a8:ea:56:1f:77:99:81:ba:d2:a0:
                    ae:78:92:cb:2e:12:84:1c:64:f9:55:e0:1e:d0:fe:
                    7c:15:7e:79:3d:18:44:ad:23:e7:0f:34:49:80:5e:
                    14:60:f7:54:06:26:46:ea:8e:85:0e:68:46:ab:35:
                    f7:85:f6:45:ff:49:a3:e5:a5:e2:20:20:6b:55:a7:
                    fc:65:36:70:58:14:cf:d0:3c:3c:f9:41:7b:ec:04:
                    a1:06:8a:d1:97:35:81:a6:58:09:85:c4:82:7b:4f:
                    0b:37:f3:f8:e5:bc:25:56:f4:88:31:e7:14:a2:4a:
                    cc:2c:ee:39:f5:c5:e7:f8:6d:0b:54:fc:5d:45:43:
                    e9:88:d5:d8:d6:2b:42:aa:f7:9d:e2:ca:4e:84:99:
                    02:61:f0:50:bd:d8:78:74:70:81:b4:1b:4d:7e:cf:
                    50:a2:df:0b:6d:12:4a:eb:26:91:d4:6a:55:4f:e7:
                    23:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D1:38:88:F9:CA:FE:3A:32:13:BE:AD:07:4E:F1:CB:36:16:9A:A8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.124.0/22
                IPv6:
                  2803:eae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269949

    Signature Algorithm: sha256WithRSAEncryption
         af:4d:cb:7c:5b:3d:87:06:71:a8:a7:07:44:28:20:c7:6e:27:
         c7:63:4f:1c:ed:33:e6:37:95:8f:62:c6:1f:a1:64:39:08:96:
         d2:ab:ab:2c:c5:1e:20:51:c3:8e:ad:e6:84:e1:d4:ef:2c:2e:
         c2:67:f5:de:58:a3:9c:be:ac:0d:cb:af:ed:18:57:6d:c9:7e:
         a3:9f:bf:ea:92:5b:46:44:45:02:44:54:aa:56:bc:35:bc:8c:
         74:05:0d:81:d3:ba:8d:24:42:23:09:60:7f:a1:e8:4c:bc:e0:
         54:06:9a:40:e0:13:94:2d:ba:73:9f:c6:4d:27:d1:35:92:a3:
         eb:10:df:74:b5:84:f3:4a:92:a9:dd:3e:6b:3c:1b:3c:80:74:
         e9:99:7b:38:00:88:97:57:45:3a:67:4c:a6:e5:81:ae:9f:a5:
         0a:9d:97:f0:c6:b7:ea:9b:f8:c9:d8:61:c7:8d:8e:47:89:ad:
         6a:ab:c3:84:8e:13:32:00:cc:f4:4b:d8:1a:57:7b:3c:af:f8:
         bb:be:22:b5:d0:8e:cf:05:90:70:f0:c1:18:27:03:40:e1:5d:
         87:0c:7f:62:7a:96:97:27:41:40:bb:3d:fc:16:13:bf:50:e8:
         d1:13:71:32:57:77:1e:8e:0a:f4:ea:15:e7:53:ed:ce:dd:48:
         90:34:b9:79
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANddijANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDMyNDE0MTAxNVoXDTIzMTIxNzE0MzAy
OVowMzExMC8GA1UEAxMoMWMxOWJiNThiZjMwYTZiNTYzMzMzOGYwMWM5MDAzZjdj
NDZjNTJlNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJp+t/mc4Pvd
qmDfg8E13L0BdI8Vw343pLPxMPY32hK5zdo2T39xsXpIsaMt9Ye9tDUBguB++nLT
j8CQWNq5oqWkgJ05cRL2Sicqjpk4sgCo6lYfd5mButKgrniSyy4ShBxk+VXgHtD+
fBV+eT0YRK0j5w80SYBeFGD3VAYmRuqOhQ5oRqs194X2Rf9Jo+Wl4iAga1Wn/GU2
cFgUz9A8PPlBe+wEoQaK0Zc1gaZYCYXEgntPCzfz+OW8JVb0iDHnFKJKzCzuOfXF
5/htC1T8XUVD6YjV2NYrQqr3neLKToSZAmHwUL3YeHRwgbQbTX7PUKLfC20SSusm
kdRqVU/nI5sCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTY0TiI+cr+OjITvq0HTvHL
NhaaqDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zZmMzODAyNi02Yjlk
LTQ5MTktODA0Ny00ZDY5M2JhOGVjYzQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2ZjMzgwMjYtNmI5ZC00
OTE5LTgwNDctNGQ2OTNiYThlY2M0LzFjMTliYjU4YmYzMGE2YjU2MzMzMzhmMDFj
OTAwM2Y3YzQ2YzUyZTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr5TfDANBAIAAjAHAwUAKAPq4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHn0wDQYJKoZIhvcNAQELBQADggEBAK9N
y3xbPYcGcainB0QoIMduJ8djTxztM+Y3lY9ixh+hZDkIltKrqyzFHiBRw46t5oTh
1O8sLsJn9d5Yo5y+rA3Lr+0YV23JfqOfv+qSW0ZERQJEVKpWvDW8jHQFDYHTuo0k
QiMJYH+h6Ey84FQGmkDgE5QtunOfxk0n0TWSo+sQ33S1hPNKkqndPms8GzyAdOmZ
ezgAiJdXRTpnTKblga6fpQqdl/DGt+qb+MnYYceNjkeJrWqrw4SOEzIAzPRL2BpX
ezyv+Lu+IrXQjs8FkHDwwRgnA0DhXYcMf2J6lpcnQUC7PfwWE79Q6NETcTJXdx6O
CvTqFedT7c7dSJA0uXk=
-----END CERTIFICATE-----