Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59ba3379065ccda821ece8dec246871e80f15545.cer
File:                     59ba3379065ccda821ece8dec246871e80f15545.cer (raw, json)
Hash identifier:          7UZn1Wn/LSQjIu847USEEPD9TyZx46a/CAkJz+klEKY=
Subject key identifier:   6C:76:1E:50:C0:15:8E:91:80:5F:0C:85:C0:73:31:E9:A5:2B:50:2C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F34655
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c16842e5-523c-460b-b315-ef2e64b520b1/59ba3379065ccda821ece8dec246871e80f15545.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c16842e5-523c-460b-b315-ef2e64b520b1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 23 Jun 2019 19:29:43 +0000
Certificate not after:    Thu 29 Aug 2024 21:20:20 +0000
Subordinate resources:    AS: 267710
                          IP: 45.165.36.0/22
                          IP: 2803:29a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15943253 (0xf34655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 23 19:29:43 2019 GMT
            Not After : Aug 29 21:20:20 2024 GMT
        Subject: CN=59ba3379065ccda821ece8dec246871e80f15545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a0:e0:bc:99:19:3a:17:ef:a7:ae:30:16:bc:
                    34:13:4f:da:f1:2d:97:c9:e3:a7:7a:ed:17:2c:c1:
                    38:e8:78:c6:ed:5d:a8:2b:78:49:da:f3:07:4e:2a:
                    7a:8c:1b:ef:8c:18:78:4a:35:75:8e:2f:b3:98:73:
                    0e:2f:25:91:4a:76:2d:60:53:1f:1a:90:30:ea:02:
                    76:b2:5b:2f:04:8b:a8:c6:b9:7a:51:43:d0:7b:50:
                    d5:97:2a:7b:3d:10:97:4c:4d:f0:a4:42:8d:33:71:
                    73:70:da:93:dc:75:72:55:92:4b:fd:bd:78:20:11:
                    22:35:c3:63:79:0e:f7:bd:88:07:cf:05:70:f6:d0:
                    d6:50:ee:c3:d6:35:77:7e:a1:ba:90:9a:81:b2:dd:
                    07:4f:88:6d:07:55:cf:3b:cb:99:67:67:c6:3c:72:
                    c5:8e:12:8b:96:71:06:a1:87:ad:3f:13:2e:c8:4f:
                    96:19:84:2b:c9:f2:da:7e:5e:fc:44:d3:70:88:63:
                    92:2a:e8:1e:1d:40:94:9a:d9:3c:70:97:c7:c7:fd:
                    93:f6:04:ff:8d:c6:a0:22:84:58:cc:6b:2a:1d:9d:
                    be:ef:d1:6f:87:46:34:fd:99:3b:4e:81:87:84:6b:
                    e7:87:21:da:de:b9:8d:2d:b0:06:48:95:6c:b3:33:
                    57:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:76:1E:50:C0:15:8E:91:80:5F:0C:85:C0:73:31:E9:A5:2B:50:2C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c16842e5-523c-460b-b315-ef2e64b520b1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c16842e5-523c-460b-b315-ef2e64b520b1/59ba3379065ccda821ece8dec246871e80f15545.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.36.0/22
                IPv6:
                  2803:29a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267710

    Signature Algorithm: sha256WithRSAEncryption
         94:cc:62:6f:91:59:7f:c2:34:3d:59:c3:a7:af:ae:7c:6e:53:
         ec:f2:01:13:3b:75:1b:ba:e2:8f:30:44:af:47:1a:87:c7:17:
         23:c0:45:5c:85:5f:68:d8:74:45:a3:af:48:f3:2b:c9:87:c7:
         de:9f:d6:cc:0c:65:ca:16:70:d9:65:21:dc:35:0c:a4:cf:9a:
         d1:8e:e1:e1:99:2b:d1:8d:05:e3:d6:9a:6b:3e:f5:c9:d8:35:
         b6:31:65:f3:10:18:27:73:c5:cb:1f:9c:93:6d:05:8a:ba:80:
         a5:11:d9:45:79:37:f8:f7:71:f6:90:62:21:3d:70:df:35:ac:
         ab:3e:ad:df:19:56:0c:bf:2f:53:37:5d:69:72:ae:37:22:4f:
         02:cd:c4:82:3f:61:c8:7c:53:1d:54:41:b2:4b:ac:51:a2:95:
         07:7e:41:03:3e:c7:c7:91:fb:33:8c:eb:0e:72:98:c8:92:53:
         ee:04:4c:a3:99:57:64:e7:44:d2:a4:fc:52:3e:b8:67:b2:b1:
         57:d3:10:4d:82:2f:64:7f:2b:5a:c1:c0:45:41:1d:2d:b9:ce:
         a9:30:95:e3:96:e7:6a:dc:70:8a:7e:3a:2d:cf:e3:69:33:9c:
         e4:6f:d1:38:40:8b:91:5c:96:b3:d6:a9:1d:d5:74:59:53:a2:
         cb:77:8e:72
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPNGVTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDYyMzE5Mjk0M1oXDTI0MDgyOTIxMjAy
MFowMzExMC8GA1UEAxMoNTliYTMzNzkwNjVjY2RhODIxZWNlOGRlYzI0Njg3MWU4
MGYxNTU0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKqg4LyZGToX
76euMBa8NBNP2vEtl8njp3rtFyzBOOh4xu1dqCt4SdrzB04qeowb74wYeEo1dY4v
s5hzDi8lkUp2LWBTHxqQMOoCdrJbLwSLqMa5elFD0HtQ1Zcqez0Ql0xN8KRCjTNx
c3Dak9x1clWSS/29eCARIjXDY3kO972IB88FcPbQ1lDuw9Y1d36hupCagbLdB0+I
bQdVzzvLmWdnxjxyxY4Si5ZxBqGHrT8TLshPlhmEK8ny2n5e/ETTcIhjkiroHh1A
lJrZPHCXx8f9k/YE/43GoCKEWMxrKh2dvu/Rb4dGNP2ZO06Bh4Rr54ch2t65jS2w
BkiVbLMzVyMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRsdh5QwBWOkYBfDIXAczHp
pStQLDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jMTY4NDJlNS01MjNj
LTQ2MGItYjMxNS1lZjJlNjRiNTIwYjEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzE2ODQyZTUtNTIzYy00
NjBiLWIzMTUtZWYyZTY0YjUyMGIxLzU5YmEzMzc5MDY1Y2NkYTgyMWVjZThkZWMy
NDY4NzFlODBmMTU1NDUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2lJDANBAIAAjAHAwUAKAMpoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFb4wDQYJKoZIhvcNAQELBQADggEBAJTM
Ym+RWX/CND1Zw6evrnxuU+zyARM7dRu64o8wRK9HGofHFyPARVyFX2jYdEWjr0jz
K8mHx96f1swMZcoWcNllIdw1DKTPmtGO4eGZK9GNBePWmms+9cnYNbYxZfMQGCdz
xcsfnJNtBYq6gKUR2UV5N/j3cfaQYiE9cN81rKs+rd8ZVgy/L1M3XWlyrjciTwLN
xII/Ych8Ux1UQbJLrFGilQd+QQM+x8eR+zOM6w5ymMiSU+4ETKOZV2TnRNKk/FI+
uGeysVfTEE2CL2R/K1rBwEVBHS25zqkwleOW52rccIp+Oi3P42kznORv0ThAi5Fc
lrPWqR3VdFlTost3jnI=
-----END CERTIFICATE-----