Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5039f4b2aa162007908260599b8ed17383f15425.cer
File:                     5039f4b2aa162007908260599b8ed17383f15425.cer (raw, json)
Hash identifier:          bEcPgdFerUXDBsaVBbVtOkmOqugBwBol22uXf1mVjOY=
Subject key identifier:   29:88:83:E6:79:5B:46:6C:AF:EA:68:00:63:1C:2E:55:54:2A:7B:FB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E109AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9965ca79-a2bb-4ddd-afdd-aaa5acd9e16e/5039f4b2aa162007908260599b8ed17383f15425.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9965ca79-a2bb-4ddd-afdd-aaa5acd9e16e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2019 21:53:00 +0000
Certificate not after:    Tue 09 Apr 2024 17:13:04 +0000
Subordinate resources:    AS: 52507
                          IP: 170.84.204.0/22
                          IP: 2803:bb40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14748079 (0xe109af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 18 21:53:00 2019 GMT
            Not After : Apr  9 17:13:04 2024 GMT
        Subject: CN=5039f4b2aa162007908260599b8ed17383f15425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:5c:0b:22:df:61:39:cf:80:88:e6:74:6b:
                    7d:5e:12:c7:15:d2:c6:a3:9a:1a:ed:d2:3f:04:57:
                    f3:5e:d4:e6:35:41:c8:2f:01:ba:91:0a:56:75:e7:
                    27:a2:0e:a3:0f:66:c4:84:1a:44:82:21:70:59:32:
                    82:bb:49:c0:c7:7e:94:4f:81:63:c5:bb:bb:3f:5d:
                    f5:07:0b:35:3c:03:28:50:c8:18:7b:3a:ac:ee:23:
                    b1:a5:af:83:d5:94:22:08:f0:4e:3b:00:95:a7:e6:
                    2c:12:30:bf:0a:2e:b7:f1:33:dc:f7:ae:69:2b:f8:
                    d7:75:45:1a:15:5f:6f:53:9d:de:5f:e7:5d:59:3f:
                    d8:71:3f:86:b2:10:1b:2a:89:5c:29:06:35:d1:4b:
                    92:80:4c:47:b1:cd:57:bd:cc:a8:8d:bc:fe:72:19:
                    dc:64:69:4e:aa:33:51:7b:ad:31:8f:3a:12:30:cd:
                    6d:98:71:40:d6:51:af:91:25:bf:d2:dd:c8:2c:20:
                    d4:13:d6:30:4f:70:32:84:2f:e5:b8:06:da:79:4d:
                    38:44:c8:c2:01:d7:db:50:0a:e8:5f:d5:79:14:61:
                    ce:c8:22:71:78:4d:27:36:3a:c5:ec:23:15:20:10:
                    ed:ad:57:98:01:1a:15:11:9b:e0:3b:33:a7:a5:8e:
                    23:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:88:83:E6:79:5B:46:6C:AF:EA:68:00:63:1C:2E:55:54:2A:7B:FB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9965ca79-a2bb-4ddd-afdd-aaa5acd9e16e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9965ca79-a2bb-4ddd-afdd-aaa5acd9e16e/5039f4b2aa162007908260599b8ed17383f15425.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.204.0/22
                IPv6:
                  2803:bb40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52507

    Signature Algorithm: sha256WithRSAEncryption
         b5:b7:de:4a:ef:1c:8d:c6:cc:ac:db:66:3d:62:1c:0a:e8:79:
         ea:14:14:89:f4:ff:b1:15:75:c9:5a:41:d4:3f:1b:89:0c:7e:
         c2:ab:7b:79:dc:1e:4b:5e:5f:a0:c1:13:0b:f2:ff:97:91:a1:
         a4:10:ac:00:7e:8c:4e:b6:97:e5:95:16:3d:e4:d2:b6:e0:4b:
         2e:70:c5:01:54:9e:01:0f:74:e9:16:d7:5c:5e:7b:4c:c5:00:
         ed:be:8b:f8:ae:9f:77:2d:e4:94:22:da:a5:42:35:bd:38:2c:
         8b:1c:0f:ed:bf:f8:0e:26:48:43:f3:c2:85:43:d1:a7:92:94:
         7a:14:8c:74:10:73:3a:0c:e4:a1:a0:bd:5c:e7:d2:1a:d5:1b:
         18:46:f5:8c:78:da:6c:1b:e2:e6:eb:bf:b7:c5:46:61:05:89:
         de:11:5c:60:4f:3f:01:e9:53:75:36:e4:a6:56:be:cd:99:73:
         a2:90:f4:a6:5e:d7:d5:cb:2b:0e:e5:42:c6:a6:ce:36:f1:7f:
         38:d7:a7:0c:2c:a1:3c:80:8c:9b:13:0f:0d:56:e5:93:7c:be:
         a6:d8:45:4d:d7:7c:e5:d2:63:5a:42:30:f1:c7:a4:4d:5a:a8:
         ee:5d:da:58:5b:f0:97:a0:e0:21:cd:53:17:08:95:4e:14:d0:
         1a:30:23:13
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOEJrzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDMxODIxNTMwMFoXDTI0MDQwOTE3MTMw
NFowMzExMC8GA1UEAxMoNTAzOWY0YjJhYTE2MjAwNzkwODI2MDU5OWI4ZWQxNzM4
M2YxNTQyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/LXAsi32E5
z4CI5nRrfV4SxxXSxqOaGu3SPwRX817U5jVByC8BupEKVnXnJ6IOow9mxIQaRIIh
cFkygrtJwMd+lE+BY8W7uz9d9QcLNTwDKFDIGHs6rO4jsaWvg9WUIgjwTjsAlafm
LBIwvwout/Ez3PeuaSv413VFGhVfb1Od3l/nXVk/2HE/hrIQGyqJXCkGNdFLkoBM
R7HNV73MqI28/nIZ3GRpTqozUXutMY86EjDNbZhxQNZRr5Elv9LdyCwg1BPWME9w
MoQv5bgG2nlNOETIwgHX21AK6F/VeRRhzsgicXhNJzY6xewjFSAQ7a1XmAEaFRGb
4Dszp6WOI30CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQpiIPmeVtGbK/qaABjHC5V
VCp7+zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85OTY1Y2E3OS1hMmJi
LTRkZGQtYWZkZC1hYWE1YWNkOWUxNmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTk2NWNhNzktYTJiYi00
ZGRkLWFmZGQtYWFhNWFjZDllMTZlLzUwMzlmNGIyYWExNjIwMDc5MDgyNjA1OTli
OGVkMTczODNmMTU0MjUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqpUzDANBAIAAjAHAwUAKAO7QDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzRswDQYJKoZIhvcNAQELBQADggEBALW3
3krvHI3GzKzbZj1iHAroeeoUFIn0/7EVdclaQdQ/G4kMfsKre3ncHkteX6DBEwvy
/5eRoaQQrAB+jE62l+WVFj3k0rbgSy5wxQFUngEPdOkW11xee0zFAO2+i/iun3ct
5JQi2qVCNb04LIscD+2/+A4mSEPzwoVD0aeSlHoUjHQQczoM5KGgvVzn0hrVGxhG
9Yx42mwb4ubrv7fFRmEFid4RXGBPPwHpU3U25KZWvs2Zc6KQ9KZe19XLKw7lQsam
zjbxfzjXpwwsoTyAjJsTDw1W5ZN8vqbYRU3XfOXSY1pCMPHHpE1aqO5d2lhb8Jeg
4CHNUxcIlU4U0BowIxM=
-----END CERTIFICATE-----