Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/311c935d740e146eba9966a47206b78bd5cf9adc.cer
File:                     311c935d740e146eba9966a47206b78bd5cf9adc.cer (raw, json)
Hash identifier:          O9SJBkKlo1aAlzpyVmgTYZLLGiX7buA/q52WE7vNvpc=
Subject key identifier:   28:8C:07:AC:4B:97:9C:FC:13:3F:88:75:3E:D9:13:43:D2:AD:3A:BF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB857B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e15f412c-655d-4dd4-a769-c1f3dafcf180/311c935d740e146eba9966a47206b78bd5cf9adc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e15f412c-655d-4dd4-a769-c1f3dafcf180/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Feb 2019 16:28:02 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.12.154.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16483707 (0xfb857b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 18 16:28:02 2019 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=311c935d740e146eba9966a47206b78bd5cf9adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:c1:1c:b4:b2:b4:c7:05:b9:b3:e9:38:88:
                    83:90:44:83:29:ad:3c:38:c4:c6:7a:05:4f:92:0a:
                    43:75:66:12:c3:8c:38:28:99:81:56:29:36:dd:0b:
                    f9:eb:77:b8:07:8c:04:0f:bf:38:fd:1f:54:0e:53:
                    fd:43:5e:19:18:0d:8a:15:05:c1:7b:a3:06:97:06:
                    80:96:6a:94:16:40:91:65:df:05:21:ad:fb:3d:24:
                    a1:fd:2d:1b:49:e0:0a:90:38:7f:a5:fb:c6:10:8a:
                    c0:ad:4d:0e:2f:a7:47:64:80:02:3f:65:05:a9:09:
                    4a:c7:57:24:cc:2d:36:4c:b5:bb:35:d5:52:0e:08:
                    0b:bc:81:da:fe:d8:e0:aa:b8:6e:fc:aa:8c:9a:cb:
                    ae:16:4b:8d:39:8e:33:79:fe:10:18:17:66:ca:de:
                    bf:0b:3e:08:02:ab:43:75:ae:35:0e:72:0d:88:8c:
                    f6:e6:e4:2a:a9:44:8b:aa:f1:40:41:12:04:7e:cb:
                    2b:a1:65:6c:32:9f:8e:7c:3b:aa:62:b0:37:ec:22:
                    45:d4:bd:36:ac:01:f9:ad:ff:35:46:4e:7d:9e:32:
                    61:85:2f:6b:b3:fd:50:84:eb:44:c7:df:ab:a0:62:
                    f6:f4:6b:d0:9d:c9:a3:f2:68:07:fb:17:71:71:a4:
                    70:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8C:07:AC:4B:97:9C:FC:13:3F:88:75:3E:D9:13:43:D2:AD:3A:BF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e15f412c-655d-4dd4-a769-c1f3dafcf180/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e15f412c-655d-4dd4-a769-c1f3dafcf180/311c935d740e146eba9966a47206b78bd5cf9adc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:76:14:3e:a1:ce:80:4b:66:f8:54:a6:0c:d0:b7:ad:88:ce:
         a0:86:fe:38:55:8a:d1:ae:f4:50:0c:e6:9c:ea:e0:a4:b4:0a:
         23:7f:b8:5d:09:74:0e:62:e6:4e:be:8f:98:6b:ea:da:17:1f:
         f1:c1:88:62:e7:d7:7e:6a:be:97:8c:cf:21:68:7d:5a:c0:22:
         a0:6d:72:ce:a0:67:77:c0:2f:a3:44:58:4d:76:8b:d8:b0:af:
         3e:ef:ad:1d:ab:2a:70:e8:42:c6:7d:3a:14:80:e0:d1:0e:b4:
         bd:19:b4:42:a9:23:44:2a:13:c5:f6:e1:08:52:9a:0c:bf:58:
         a4:51:b3:f2:fe:23:2e:07:be:3d:f5:f0:05:9b:fd:d5:b3:29:
         e6:bb:b0:22:cf:36:ec:67:0c:48:9d:d6:47:52:cd:0a:4f:bd:
         74:44:42:cb:19:8b:42:d7:0e:c7:80:fb:d0:1d:ad:cb:84:48:
         07:61:07:e3:1e:79:79:ec:36:2f:18:62:4f:84:59:39:a7:8b:
         0f:35:57:67:6f:c2:00:23:59:fc:ea:6c:bf:a2:c3:d5:95:3b:
         fb:ad:f9:cb:8d:bd:7c:8f:ab:7f:76:a1:c6:51:f6:42:0a:c9:
         c5:7d:6e:46:67:01:4d:79:cf:c1:86:d4:73:a7:1c:05:e9:bd:
         fc:9a:28:89
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAPuFezANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDIxODE2MjgwMloXDTI0MTEwMTE0MDAw
MFowMzExMC8GA1UEAxMoMzExYzkzNWQ3NDBlMTQ2ZWJhOTk2NmE0NzIwNmI3OGJk
NWNmOWFkYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALonwRy0srTH
Bbmz6TiIg5BEgymtPDjExnoFT5IKQ3VmEsOMOCiZgVYpNt0L+et3uAeMBA+/OP0f
VA5T/UNeGRgNihUFwXujBpcGgJZqlBZAkWXfBSGt+z0kof0tG0ngCpA4f6X7xhCK
wK1NDi+nR2SAAj9lBakJSsdXJMwtNky1uzXVUg4IC7yB2v7Y4Kq4bvyqjJrLrhZL
jTmOM3n+EBgXZsrevws+CAKrQ3WuNQ5yDYiM9ubkKqlEi6rxQEESBH7LK6FlbDKf
jnw7qmKwN+wiRdS9NqwB+a3/NUZOfZ4yYYUva7P9UITrRMffq6Bi9vRr0J3Jo/Jo
B/sXcXGkcIsCAwEAAaOCAt4wggLaMB0GA1UdDgQWBBQojAesS5ec/BM/iHU+2RND
0q06vzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lMTVmNDEyYy02NTVk
LTRkZDQtYTc2OS1jMWYzZGFmY2YxODAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTE1ZjQxMmMtNjU1ZC00
ZGQ0LWE3NjktYzFmM2RhZmNmMTgwLzMxMWM5MzVkNzQwZTE0NmViYTk5NjZhNDcy
MDZiNzhiZDVjZjlhZGMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgMmjANBgkqhkiG9w0BAQsFAAOC
AQEAnnYUPqHOgEtm+FSmDNC3rYjOoIb+OFWK0a70UAzmnOrgpLQKI3+4XQl0DmLm
Tr6PmGvq2hcf8cGIYufXfmq+l4zPIWh9WsAioG1yzqBnd8Avo0RYTXaL2LCvPu+t
HasqcOhCxn06FIDg0Q60vRm0QqkjRCoTxfbhCFKaDL9YpFGz8v4jLge+PfXwBZv9
1bMp5ruwIs827GcMSJ3WR1LNCk+9dERCyxmLQtcOx4D70B2ty4RIB2EH4x55eew2
LxhiT4RZOaeLDzVXZ2/CACNZ/Opsv6LD1ZU7+635y429fI+rf3ahxlH2QgrJxX1u
RmcBTXnPwYbUc6ccBem9/JooiQ==
-----END CERTIFICATE-----