Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b0ea3fd60b077e803d51836f0354bf6ef1b8e70.cer
File:                     5b0ea3fd60b077e803d51836f0354bf6ef1b8e70.cer (raw, json)
Hash identifier:          zd+XLECZBSkWTLRu1yHZ0TcRb+jrm019dLMpKKwygsM=
Subject key identifier:   DD:93:67:EC:87:F6:E1:FF:64:E5:DE:24:B8:C5:91:FB:57:F8:17:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1D94C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/34530802-72e5-40b7-b091-fb3fa6aa3b27/5b0ea3fd60b077e803d51836f0354bf6ef1b8e70.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/34530802-72e5-40b7-b091-fb3fa6aa3b27/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Feb 2019 22:39:50 +0000
Certificate not after:    Thu 18 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 11237
                          IP: 200.12.176.0/20
                          IP: 2801:110::/35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14801228 (0xe1d94c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 14 22:39:50 2019 GMT
            Not After : Apr 18 06:00:00 2024 GMT
        Subject: CN=5b0ea3fd60b077e803d51836f0354bf6ef1b8e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:b2:08:6d:e1:2e:8c:76:13:6c:bc:07:b1:
                    6b:50:52:14:e8:65:a1:84:37:3d:75:3e:ab:89:4c:
                    8c:26:dc:4d:e9:9e:ac:2b:89:f5:c8:71:af:b1:ee:
                    c4:39:da:0f:13:68:28:81:f9:5e:09:be:99:4b:cc:
                    5f:4c:8d:e2:0d:41:95:1f:9b:7b:b6:cd:7e:e1:a3:
                    89:21:27:47:63:d6:09:0e:86:c1:83:2b:0d:5d:e3:
                    54:e1:00:b1:69:73:df:1b:60:9b:2d:b4:b3:43:4b:
                    b5:f7:49:c4:d6:4e:7e:a7:5c:23:fd:b8:95:09:16:
                    f7:da:c0:d4:e5:bf:63:48:19:81:37:70:56:31:fe:
                    af:b5:c7:cc:0f:f5:1d:37:88:a7:a5:41:38:23:02:
                    d7:4d:e4:34:6c:0e:f1:00:ad:28:eb:54:b6:cb:cb:
                    ad:d9:68:3b:8e:21:ee:a1:3d:ca:79:13:a1:6f:00:
                    5c:2f:ae:b2:3b:d4:c5:7c:d8:25:d8:d4:e5:de:0b:
                    42:cc:a7:e7:f4:83:a2:10:fc:af:36:03:f9:db:36:
                    a0:aa:2e:08:d8:be:57:f6:88:70:72:4f:06:9b:81:
                    06:23:55:30:45:f5:c2:ae:45:d8:8f:b4:fa:b0:70:
                    50:46:d8:e9:5a:44:d7:ed:7b:8f:ff:66:41:3c:0e:
                    4b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:93:67:EC:87:F6:E1:FF:64:E5:DE:24:B8:C5:91:FB:57:F8:17:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/34530802-72e5-40b7-b091-fb3fa6aa3b27/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/34530802-72e5-40b7-b091-fb3fa6aa3b27/5b0ea3fd60b077e803d51836f0354bf6ef1b8e70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.176.0/20
                IPv6:
                  2801:110::/35

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11237

    Signature Algorithm: sha256WithRSAEncryption
         bd:8d:c7:52:28:41:11:ea:4a:9b:7d:d2:24:55:7f:ef:d3:81:
         67:f0:a3:a9:d6:74:22:84:fb:47:ac:31:cb:d0:06:68:60:5e:
         c9:21:7a:73:26:4c:09:83:59:9c:c5:9e:78:25:23:d3:3d:e6:
         40:08:05:8f:56:68:cd:e5:73:48:b8:51:20:a2:f7:e4:c0:e6:
         eb:fa:1c:51:01:e7:02:8b:2d:fb:b4:99:8b:a0:19:5e:99:38:
         55:e0:d5:0b:ef:6f:bf:79:5b:d2:83:b4:c7:21:e9:93:bf:7f:
         d6:e7:25:05:0a:b2:ca:36:23:bc:a4:b8:f3:45:ae:b5:27:83:
         3c:d5:20:dc:74:42:75:1c:8a:22:5d:ec:23:7f:bb:74:3c:81:
         f5:ba:fc:26:c4:a4:24:0f:cc:15:89:f6:01:f9:95:5d:ec:4f:
         e4:3e:70:73:0e:22:04:71:62:19:50:4f:fc:cc:bf:d6:36:88:
         4d:ee:18:07:f5:9a:60:01:ef:38:20:2d:2c:b8:5a:b3:84:d3:
         17:c2:62:d5:4d:b0:aa:7b:36:c3:8a:cb:2b:01:3b:dc:07:30:
         b0:db:40:a4:ae:fd:87:f1:1c:1d:aa:04:30:64:99:c8:0f:d6:
         a7:79:ad:c7:fc:35:8c:30:1d:8c:37:c5:1a:3a:77:6f:4d:29:
         33:8c:52:9c
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOHZTDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDIxNDIyMzk1MFoXDTI0MDQxODA2MDAw
MFowMzExMC8GA1UEAxMoNWIwZWEzZmQ2MGIwNzdlODAzZDUxODM2ZjAzNTRiZjZl
ZjFiOGU3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALYKsght4S6M
dhNsvAexa1BSFOhloYQ3PXU+q4lMjCbcTemerCuJ9chxr7HuxDnaDxNoKIH5Xgm+
mUvMX0yN4g1BlR+be7bNfuGjiSEnR2PWCQ6GwYMrDV3jVOEAsWlz3xtgmy20s0NL
tfdJxNZOfqdcI/24lQkW99rA1OW/Y0gZgTdwVjH+r7XHzA/1HTeIp6VBOCMC103k
NGwO8QCtKOtUtsvLrdloO44h7qE9ynkToW8AXC+usjvUxXzYJdjU5d4LQsyn5/SD
ohD8rzYD+ds2oKouCNi+V/aIcHJPBpuBBiNVMEX1wq5F2I+0+rBwUEbY6VpE1+17
j/9mQTwOS3UCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTdk2fsh/bh/2Tl3iS4xZH7
V/gX9zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zNDUzMDgwMi03MmU1
LTQwYjctYjA5MS1mYjNmYTZhYTNiMjcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzQ1MzA4MDItNzJlNS00
MGI3LWIwOTEtZmIzZmE2YWEzYjI3LzViMGVhM2ZkNjBiMDc3ZTgwM2Q1MTgzNmYw
MzU0YmY2ZWYxYjhlNzAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEBMgMsDAOBAIAAjAIAwYFKAEBEAAw
GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICK+UwDQYJKoZIhvcNAQELBQADggEBAL2N
x1IoQRHqSpt90iRVf+/TgWfwo6nWdCKE+0esMcvQBmhgXskhenMmTAmDWZzFnngl
I9M95kAIBY9WaM3lc0i4USCi9+TA5uv6HFEB5wKLLfu0mYugGV6ZOFXg1Qvvb795
W9KDtMch6ZO/f9bnJQUKsso2I7ykuPNFrrUngzzVINx0QnUciiJd7CN/u3Q8gfW6
/CbEpCQPzBWJ9gH5lV3sT+Q+cHMOIgRxYhlQT/zMv9Y2iE3uGAf1mmAB7zggLSy4
WrOE0xfCYtVNsKp7NsOKyysBO9wHMLDbQKSu/YfxHB2qBDBkmcgP1qd5rcf8NYww
HYw3xRo6d29NKTOMUpw=
-----END CERTIFICATE-----