Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56e9063141ecae3e451bc80f158507a7cdfb7cd7.cer
File:                     56e9063141ecae3e451bc80f158507a7cdfb7cd7.cer (raw, json)
Hash identifier:          2lIe6TxbebQNfobFVQvtB2gcTL0CNLyjpevO+VN300A=
Subject key identifier:   1A:D6:13:E4:B8:4D:AF:F2:9F:A0:33:E9:B8:AF:55:A0:01:C0:37:C7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F44E6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/938e6aff-5e7e-44dd-8422-d940f2a79ca6/56e9063141ecae3e451bc80f158507a7cdfb7cd7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/938e6aff-5e7e-44dd-8422-d940f2a79ca6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 06 May 2019 16:40:59 +0000
Certificate not after:    Sun 08 Sep 2024 05:00:00 +0000
Subordinate resources:    IP: 2801:0:3b0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16010860 (0xf44e6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  6 16:40:59 2019 GMT
            Not After : Sep  8 05:00:00 2024 GMT
        Subject: CN=56e9063141ecae3e451bc80f158507a7cdfb7cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:de:99:d9:6a:f5:4b:67:e6:8a:18:87:7f:b5:
                    0d:b4:61:84:62:69:b8:ac:0e:c2:0b:de:cb:f7:f6:
                    cb:8d:7e:03:20:ed:0c:d7:ce:d4:de:ca:50:74:be:
                    75:02:8e:52:8d:6f:9a:48:38:55:7e:0e:e1:42:05:
                    35:33:4f:44:a2:81:3a:4d:66:2d:ed:23:06:9d:02:
                    59:40:e6:17:2f:0e:0f:b2:d1:34:1f:bf:70:a3:ca:
                    25:fc:9b:61:e6:ec:35:b6:17:e4:dc:d4:e6:2f:4e:
                    c8:85:c3:7f:68:b4:33:88:36:cb:7e:66:f5:4f:62:
                    f9:3c:50:d7:50:08:09:6f:6c:93:ae:28:fa:4c:ed:
                    b2:13:b3:99:1f:b8:d2:e7:88:63:4e:ed:81:f4:ae:
                    30:c7:05:01:27:a1:e3:c8:4f:4a:6e:dd:09:77:15:
                    0f:02:8f:b8:0e:53:1d:26:4e:3a:81:61:aa:9d:76:
                    66:95:f0:cf:90:12:ba:64:a3:70:97:b1:1b:0e:6f:
                    66:60:ae:a1:a6:40:40:1d:61:4a:07:b6:6a:b6:58:
                    95:4f:b5:85:7e:44:a3:61:c3:58:80:de:c5:be:8d:
                    16:af:5a:1f:b4:79:06:62:14:fc:3a:01:f8:ef:5c:
                    df:df:a6:61:1c:95:87:c0:8c:01:7e:c0:b3:02:cd:
                    a7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D6:13:E4:B8:4D:AF:F2:9F:A0:33:E9:B8:AF:55:A0:01:C0:37:C7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/938e6aff-5e7e-44dd-8422-d940f2a79ca6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/938e6aff-5e7e-44dd-8422-d940f2a79ca6/56e9063141ecae3e451bc80f158507a7cdfb7cd7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:3b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:49:8b:0d:e9:95:00:d0:eb:7e:f8:4e:24:f2:a7:49:69:
         e1:0d:7d:25:e4:2f:a3:03:9b:78:c7:8a:b0:17:ef:37:1d:0a:
         83:d0:76:0a:1f:a6:21:0d:a2:65:dd:28:26:97:eb:f7:c2:67:
         fd:3f:44:cb:5a:78:c0:a8:b2:10:ed:14:63:7b:7b:ac:68:1b:
         9b:07:10:ea:c8:93:2f:e8:57:c9:6d:14:1b:cd:bb:b2:7c:00:
         9e:e0:2c:1c:e3:b6:8a:3c:29:10:ac:eb:ad:36:0a:43:7c:ea:
         ff:64:ae:f8:89:39:14:d1:aa:97:53:7a:cb:6a:9a:e1:8c:50:
         10:86:6f:6f:60:3c:86:ad:ff:23:35:18:81:e7:5f:f0:e9:fb:
         8e:52:ef:d2:77:06:2f:e8:03:7b:1d:a4:c3:e5:03:e8:2b:73:
         8c:d3:de:22:f4:57:53:e6:25:01:5c:27:2f:69:c1:2c:39:17:
         4e:e6:00:a8:4d:dc:33:f2:af:ba:27:bb:c0:30:01:96:e3:35:
         e1:fc:fd:1a:84:07:53:3d:d2:50:c2:7f:30:61:b7:cb:1c:d0:
         d6:3f:92:26:fa:66:84:8e:92:cf:3f:c5:ad:ed:23:8c:11:6c:
         4b:df:a8:b1:8c:b2:ed:99:2b:b9:50:f8:42:30:3a:46:fa:d8:
         42:d3:2f:ec
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAPRObDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDUwNjE2NDA1OVoXDTI0MDkwODA1MDAw
MFowMzExMC8GA1UEAxMoNTZlOTA2MzE0MWVjYWUzZTQ1MWJjODBmMTU4NTA3YTdj
ZGZiN2NkNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJnemdlq9Utn
5ooYh3+1DbRhhGJpuKwOwgvey/f2y41+AyDtDNfO1N7KUHS+dQKOUo1vmkg4VX4O
4UIFNTNPRKKBOk1mLe0jBp0CWUDmFy8OD7LRNB+/cKPKJfybYebsNbYX5NzU5i9O
yIXDf2i0M4g2y35m9U9i+TxQ11AICW9sk64o+kztshOzmR+40ueIY07tgfSuMMcF
ASeh48hPSm7dCXcVDwKPuA5THSZOOoFhqp12ZpXwz5ASumSjcJexGw5vZmCuoaZA
QB1hSge2arZYlU+1hX5Eo2HDWIDexb6NFq9aH7R5BmIU/DoB+O9c39+mYRyVh8CM
AX7AswLNp9UCAwEAAaOCAuEwggLdMB0GA1UdDgQWBBQa1hPkuE2v8p+gM+m4r1Wg
AcA3xzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85MzhlNmFmZi01ZTdl
LTQ0ZGQtODQyMi1kOTQwZjJhNzljYTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTM4ZTZhZmYtNWU3ZS00
NGRkLTg0MjItZDk0MGYyYTc5Y2E2LzU2ZTkwNjMxNDFlY2FlM2U0NTFiYzgwZjE1
ODUwN2E3Y2RmYjdjZDcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAAADsDANBgkqhkiG9w0BAQsF
AAOCAQEARY1Jiw3plQDQ6374TiTyp0lp4Q19JeQvowObeMeKsBfvNx0Kg9B2Ch+m
IQ2iZd0oJpfr98Jn/T9Ey1p4wKiyEO0UY3t7rGgbmwcQ6siTL+hXyW0UG827snwA
nuAsHOO2ijwpEKzrrTYKQ3zq/2Su+Ik5FNGql1N6y2qa4YxQEIZvb2A8hq3/IzUY
gedf8On7jlLv0ncGL+gDex2kw+UD6CtzjNPeIvRXU+YlAVwnL2nBLDkXTuYAqE3c
M/Kvuie7wDABluM14fz9GoQHUz3SUMJ/MGG3yxzQ1j+SJvpmhI6Szz/Fre0jjBFs
S9+osYyy7ZkruVD4QjA6RvrYQtMv7A==
-----END CERTIFICATE-----