Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b432c17b9178d531eefe49147c81e1af1b6784.cer
File:                     24b432c17b9178d531eefe49147c81e1af1b6784.cer (raw, json)
Hash identifier:          u5T1NYhZjjNGsbj1Eo7D6mG44+kBA5Luj7n5e5XUCRs=
Subject key identifier:   8C:D5:D1:14:8A:7F:1A:D0:BC:2C:81:F4:8D:DC:41:B4:D8:93:F9:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE2023
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/24b432c17b9178d531eefe49147c81e1af1b6784.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Jul 2019 23:10:44 +0000
Certificate not after:    Sat 20 Jul 2024 06:00:00 +0000
Subordinate resources:    IP: 200.9.96.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15605795 (0xee2023)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 10 23:10:44 2019 GMT
            Not After : Jul 20 06:00:00 2024 GMT
        Subject: CN=24b432c17b9178d531eefe49147c81e1af1b6784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:eb:7e:de:68:5f:c5:1f:38:21:2d:a1:d8:02:
                    51:c2:8b:b7:e5:7e:97:4f:96:6a:2d:cb:ad:3e:20:
                    1b:b6:89:26:11:7c:a0:9f:fd:59:fd:10:e4:5f:69:
                    97:73:70:87:83:0a:69:b3:b6:26:4c:8e:fe:81:c5:
                    3c:26:9b:a6:fa:75:0d:9d:8e:bb:e6:f9:e2:a2:bd:
                    3f:d0:d8:99:ff:4e:d3:77:b4:44:2c:14:0e:e2:46:
                    8a:51:21:9e:22:0d:e1:4f:b9:35:a4:b4:61:36:ab:
                    d0:ab:08:57:8d:73:a5:2b:6b:35:b6:ef:60:15:b7:
                    ac:bd:ea:82:d6:6b:3c:0b:27:2a:e9:55:30:12:d5:
                    63:d5:9b:e5:2a:78:38:d7:db:18:da:0a:92:34:d2:
                    25:be:33:bc:cf:88:25:a9:a7:36:39:16:95:cb:13:
                    03:aa:83:e1:77:30:77:59:e9:f6:49:09:5d:15:d6:
                    a9:58:b3:4e:61:4b:96:b5:55:d0:a9:25:f6:20:43:
                    9f:a4:ac:a4:0b:b6:84:81:49:fc:a9:8f:8d:7e:e6:
                    63:8a:0c:0f:32:88:40:66:ca:a1:00:16:c9:60:c0:
                    53:a6:4a:6e:f7:cc:45:31:e3:6c:43:4e:bb:48:1a:
                    b8:0f:37:fb:83:87:1c:7b:6d:d8:c6:b4:3a:cc:25:
                    5e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D5:D1:14:8A:7F:1A:D0:BC:2C:81:F4:8D:DC:41:B4:D8:93:F9:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/24b432c17b9178d531eefe49147c81e1af1b6784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:3b:cc:14:9e:c1:2a:c8:c7:80:ab:ed:a0:34:37:a0:17:e8:
         9a:74:19:96:72:6f:9a:03:3b:58:a2:a9:d8:61:6a:14:67:a9:
         9a:03:ef:0f:ef:5c:67:85:3c:c7:33:ef:74:01:ed:54:00:b6:
         d0:f8:af:78:90:a8:9f:1e:50:27:71:b5:18:98:7b:10:c5:2c:
         5b:bd:48:69:6c:bf:e8:a9:21:61:92:7b:a3:31:54:84:03:77:
         70:91:51:16:1c:66:ac:72:a4:5e:2c:23:f1:45:bf:cd:9a:8b:
         ba:66:e9:fd:14:b3:41:dc:6f:1e:85:c6:1e:3a:01:b4:80:8e:
         38:ce:20:bb:e5:d5:c1:bf:75:34:39:76:02:ff:58:00:89:60:
         f4:0b:e3:62:eb:4b:82:95:78:ea:21:f5:b9:f2:40:06:0a:25:
         a1:a1:1c:d0:6e:80:f2:8e:47:a8:cf:1d:45:ac:12:7f:6e:b6:
         f5:57:ca:21:39:57:8b:28:fc:e1:26:7b:c2:f1:52:d1:44:b5:
         0a:42:1b:59:38:53:33:31:7b:27:7d:54:bf:f4:8c:01:37:12:
         bb:8f:ee:c4:1e:dd:56:87:cd:50:4b:b1:ad:cc:d8:aa:27:e2:
         03:90:7d:28:96:7b:f2:3d:e8:0a:f3:28:64:f8:42:b7:19:ad:
         eb:d4:81:57
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAO4gIzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDcxMDIzMTA0NFoXDTI0MDcyMDA2MDAw
MFowMzExMC8GA1UEAxMoMjRiNDMyYzE3YjkxNzhkNTMxZWVmZTQ5MTQ3YzgxZTFh
ZjFiNjc4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAILrft5oX8Uf
OCEtodgCUcKLt+V+l0+Wai3LrT4gG7aJJhF8oJ/9Wf0Q5F9pl3Nwh4MKabO2JkyO
/oHFPCabpvp1DZ2Ou+b54qK9P9DYmf9O03e0RCwUDuJGilEhniIN4U+5NaS0YTar
0KsIV41zpStrNbbvYBW3rL3qgtZrPAsnKulVMBLVY9Wb5Sp4ONfbGNoKkjTSJb4z
vM+IJamnNjkWlcsTA6qD4Xcwd1np9kkJXRXWqVizTmFLlrVV0Kkl9iBDn6SspAu2
hIFJ/KmPjX7mY4oMDzKIQGbKoQAWyWDAU6ZKbvfMRTHjbENOu0gauA83+4OHHHtt
2Ma0OswlXrMCAwEAAaOCAt4wggLaMB0GA1UdDgQWBBSM1dEUin8a0LwsgfSN3EG0
2JP5MDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yYWIzNjIyMy0xY2Y4
LTRmMzktOTI2OS1kNTk5MDQ5YzQ3NDkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMmFiMzYyMjMtMWNmOC00
ZjM5LTkyNjktZDU5OTA0OWM0NzQ5LzI0YjQzMmMxN2I5MTc4ZDUzMWVlZmU0OTE0
N2M4MWUxYWYxYjY3ODQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgJYDANBgkqhkiG9w0BAQsFAAOC
AQEAEDvMFJ7BKsjHgKvtoDQ3oBfomnQZlnJvmgM7WKKp2GFqFGepmgPvD+9cZ4U8
xzPvdAHtVAC20PiveJConx5QJ3G1GJh7EMUsW71IaWy/6KkhYZJ7ozFUhAN3cJFR
FhxmrHKkXiwj8UW/zZqLumbp/RSzQdxvHoXGHjoBtICOOM4gu+XVwb91NDl2Av9Y
AIlg9AvjYutLgpV46iH1ufJABgoloaEc0G6A8o5HqM8dRawSf2629VfKITlXiyj8
4SZ7wvFS0US1CkIbWThTMzF7J31Uv/SMATcSu4/uxB7dVofNUEuxrczYqifiA5B9
KJZ78j3oCvMoZPhCtxmt69SBVw==
-----END CERTIFICATE-----