Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/289abcd1e1f93d61bdc6909a719a00037281ea11.cer
File:                     289abcd1e1f93d61bdc6909a719a00037281ea11.cer (raw, json)
Hash identifier:          QqRGzon84SH4MAHL4ekuEHab02VK/DjRbdJViAPDDg4=
Subject key identifier:   D5:29:FD:D5:66:5C:30:7F:C4:06:94:85:C2:E8:C5:FD:34:86:24:73
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC5BA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/083727e2-5f88-4d83-aba6-95e0c39f559c/289abcd1e1f93d61bdc6909a719a00037281ea11.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/083727e2-5f88-4d83-aba6-95e0c39f559c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 25 Feb 2019 13:51:41 +0000
Certificate not after:    Sun 10 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 267750
                          IP: 45.170.8.0/22
                          IP: 2803:a3a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16538530 (0xfc5ba2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 25 13:51:41 2019 GMT
            Not After : Nov 10 04:00:00 2024 GMT
        Subject: CN=289abcd1e1f93d61bdc6909a719a00037281ea11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:c1:98:31:18:b6:7c:4e:d3:7b:7d:60:c2:d8:
                    96:51:e2:f8:99:0b:8d:f2:2e:dc:61:23:ee:3b:98:
                    2b:ca:2f:48:26:0c:29:99:29:7f:23:8a:69:dc:f7:
                    62:1b:6f:10:af:e7:94:21:08:4b:e3:0b:7e:f2:fa:
                    70:31:85:79:cb:2f:f9:cb:43:40:26:ff:4e:e5:e1:
                    85:a7:fd:d0:a4:aa:37:5d:ea:58:a4:a2:7e:6b:26:
                    98:fa:f0:5e:0a:10:80:5c:e2:21:3c:f9:9c:59:ba:
                    ad:02:c9:bc:59:0d:ba:b1:40:69:b7:0c:b6:43:ec:
                    bd:72:c0:03:08:f9:bf:96:96:d8:15:a7:88:a3:88:
                    23:26:75:17:c0:50:9b:79:65:69:92:7f:1c:d0:86:
                    7c:5a:be:41:d5:59:19:46:fd:54:68:03:40:95:79:
                    d0:e1:3c:72:94:cd:27:48:4b:b0:a2:29:1f:30:d8:
                    99:9f:23:e1:78:70:39:83:ea:db:03:7b:9d:7c:01:
                    c5:cf:cd:eb:36:6c:aa:fc:33:2b:a3:9e:78:94:2f:
                    0c:54:8d:f3:35:f9:96:74:c0:d4:1e:26:04:66:bd:
                    35:ce:f1:71:16:b7:7e:9d:12:b0:58:26:d7:38:3e:
                    62:a0:5c:dd:78:63:f7:07:72:54:24:d5:35:2d:60:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:29:FD:D5:66:5C:30:7F:C4:06:94:85:C2:E8:C5:FD:34:86:24:73
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/083727e2-5f88-4d83-aba6-95e0c39f559c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/083727e2-5f88-4d83-aba6-95e0c39f559c/289abcd1e1f93d61bdc6909a719a00037281ea11.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.8.0/22
                IPv6:
                  2803:a3a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267750

    Signature Algorithm: sha256WithRSAEncryption
         a1:03:36:11:aa:be:5b:d6:ca:f3:f8:82:55:ca:33:99:a7:17:
         df:80:b8:3c:1c:17:63:9f:d8:77:69:3c:1a:79:ce:17:77:ec:
         f1:b4:93:05:95:cb:fc:18:8b:ee:c0:29:c5:de:ed:d0:d9:d1:
         19:f9:1a:ab:39:11:30:d9:9c:f8:14:21:58:89:a2:ea:cc:ec:
         dd:4a:0e:c1:20:cc:97:48:3c:d2:0b:a4:e9:15:59:7d:57:51:
         2f:fc:94:85:9f:b2:b6:e5:f3:04:5f:d4:53:62:6a:de:58:e6:
         9c:b1:cb:6d:26:28:f0:0c:8d:50:ad:1a:19:bb:6a:81:e4:ae:
         13:5d:a9:56:33:17:72:99:cf:44:fc:ce:26:55:2d:8c:63:79:
         f1:d9:c6:d2:c7:50:85:0a:85:e3:4a:12:db:42:1a:4a:9f:70:
         23:fe:51:6c:d5:18:29:f0:dd:33:f2:10:13:19:77:6f:cf:8c:
         93:27:a4:cf:20:42:9d:8e:2f:16:ee:bf:1d:95:ef:c5:31:a2:
         10:43:7e:07:82:60:60:c6:61:b8:22:bd:42:16:ee:2c:21:91:
         f8:be:2c:03:0b:c4:fc:b4:3b:7b:5a:b0:ae:c5:3c:c1:ed:ac:
         e8:aa:a9:1e:55:47:22:aa:47:80:dc:64:d9:de:8e:1d:76:b3:
         a3:ba:69:66
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPxbojANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDIyNTEzNTE0MVoXDTI0MTExMDA0MDAw
MFowMzExMC8GA1UEAxMoMjg5YWJjZDFlMWY5M2Q2MWJkYzY5MDlhNzE5YTAwMDM3
MjgxZWExMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAP7BmDEYtnxO
03t9YMLYllHi+JkLjfIu3GEj7juYK8ovSCYMKZkpfyOKadz3YhtvEK/nlCEIS+ML
fvL6cDGFecsv+ctDQCb/TuXhhaf90KSqN13qWKSifmsmmPrwXgoQgFziITz5nFm6
rQLJvFkNurFAabcMtkPsvXLAAwj5v5aW2BWniKOIIyZ1F8BQm3llaZJ/HNCGfFq+
QdVZGUb9VGgDQJV50OE8cpTNJ0hLsKIpHzDYmZ8j4XhwOYPq2wN7nXwBxc/N6zZs
qvwzK6OeeJQvDFSN8zX5lnTA1B4mBGa9Nc7xcRa3fp0SsFgm1zg+YqBc3Xhj9wdy
VCTVNS1gg5ECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTVKf3VZlwwf8QGlIXC6MX9
NIYkczAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wODM3MjdlMi01Zjg4
LTRkODMtYWJhNi05NWUwYzM5ZjU1OWMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDgzNzI3ZTItNWY4OC00
ZDgzLWFiYTYtOTVlMGMzOWY1NTljLzI4OWFiY2QxZTFmOTNkNjFiZGM2OTA5YTcx
OWEwMDAzNzI4MWVhMTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2qCDANBAIAAjAHAwUAKAOjoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFeYwDQYJKoZIhvcNAQELBQADggEBAKED
NhGqvlvWyvP4glXKM5mnF9+AuDwcF2Of2HdpPBp5zhd37PG0kwWVy/wYi+7AKcXe
7dDZ0Rn5Gqs5ETDZnPgUIViJourM7N1KDsEgzJdIPNILpOkVWX1XUS/8lIWfsrbl
8wRf1FNiat5Y5pyxy20mKPAMjVCtGhm7aoHkrhNdqVYzF3KZz0T8ziZVLYxjefHZ
xtLHUIUKheNKEttCGkqfcCP+UWzVGCnw3TPyEBMZd2/PjJMnpM8gQp2OLxbuvx2V
78UxohBDfgeCYGDGYbgivUIW7iwhkfi+LAMLxPy0O3tasK7FPMHtrOiqqR5VRyKq
R4DcZNnejh12s6O6aWY=
-----END CERTIFICATE-----