Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer
File:                     73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer (raw, json)
Hash identifier:          H6rYHe03/GjyuTuGhTUMFnleRyMCTvIF7zzMh2Pcajs=
Subject key identifier:   0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD8473
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/73c0dcfd4c271be5c9e543e84783482d9b25ef39.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Aug 2019 00:09:13 +0000
Certificate not after:    Sat 02 Mar 2024 18:17:04 +0000
Subordinate resources:    IP: 160.19.200.0/22
                          IP: 2803:25c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14517363 (0xdd8473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 30 00:09:13 2019 GMT
            Not After : Mar  2 18:17:04 2024 GMT
        Subject: CN=73c0dcfd4c271be5c9e543e84783482d9b25ef39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:25:01:8b:ea:2d:92:ac:8e:a6:29:14:25:
                    60:6a:09:ea:a7:0e:08:f8:7b:3b:c0:93:e1:6b:c2:
                    87:49:60:2e:a5:7b:36:bf:52:c0:37:52:04:e9:64:
                    fa:28:58:dd:41:2b:27:9b:9a:52:d8:bb:3f:64:4b:
                    b7:df:be:55:f4:21:1d:e8:f2:58:17:05:65:35:50:
                    e9:48:a3:e4:28:f9:26:9d:b7:c2:98:20:f0:a1:0b:
                    c7:19:b3:c1:75:4e:54:40:a7:14:6d:22:09:3f:51:
                    d1:99:c9:de:4a:60:70:97:5c:97:db:a5:22:7a:04:
                    b8:62:5e:3d:d5:74:b0:a3:8a:33:dc:d2:9b:23:7b:
                    af:63:3b:b5:d4:c5:3b:75:5d:34:6b:b4:c4:b4:13:
                    5a:2c:c2:50:d4:cb:cc:36:7e:28:5e:f1:14:79:18:
                    49:cb:35:35:42:cc:36:80:bd:99:cc:c8:da:bc:b7:
                    c6:cf:b9:20:00:31:79:0b:d5:60:ab:ac:db:2b:23:
                    73:34:cc:fe:9b:d5:52:1d:af:b6:69:61:e6:8a:bd:
                    8a:b1:a3:f7:85:25:74:db:c9:22:31:08:90:22:07:
                    cd:b8:f1:ee:79:80:81:dc:ef:75:17:d1:cf:87:18:
                    a3:96:b9:ae:fb:ae:52:f5:2a:a4:86:0d:ce:8f:89:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/73c0dcfd4c271be5c9e543e84783482d9b25ef39.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.200.0/22
                IPv6:
                  2803:25c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:15:b9:c5:39:e0:a5:ac:bc:93:7e:03:cc:1c:00:2f:e3:6e:
         08:7b:ec:ae:f8:67:fe:73:6c:4c:93:13:e0:2b:24:e7:70:ab:
         8e:cb:02:6a:18:87:03:cf:bb:0c:5f:d6:84:04:5a:7e:f4:23:
         83:87:70:f3:f0:f7:ae:58:b5:81:7a:d7:6b:68:41:ab:1a:0a:
         a9:58:49:b4:26:bb:53:6f:5c:b2:bd:30:a6:ac:a9:85:d6:18:
         f9:70:97:08:45:b3:03:3c:ca:1a:e1:59:4c:4e:ee:d8:b7:3e:
         b3:9b:a6:c9:57:49:88:1d:68:d2:40:d4:35:de:12:b7:ce:93:
         54:05:ed:3c:b7:e0:e7:de:b6:1e:41:45:fa:df:88:3a:3d:93:
         64:fd:16:ff:5e:13:79:f3:03:8f:52:7d:82:8a:5c:2b:fb:f8:
         62:05:bc:d7:50:59:37:13:0b:95:5f:8c:1f:fd:5d:56:71:3d:
         be:df:2c:10:a5:e5:4d:5b:6a:d1:83:0c:71:39:47:b1:c2:13:
         e6:60:43:21:f1:38:67:0e:14:30:70:64:4c:80:70:55:36:90:
         c3:27:33:8c:f9:94:2d:ba:1b:49:63:ac:1a:d9:68:4c:75:83:
         9a:34:e0:21:24:31:a5:03:e6:15:d1:9b:e5:24:39:37:eb:b8:
         72:a2:42:92
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAN2EczANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDgzMDAwMDkxM1oXDTI0MDMwMjE4MTcw
NFowMzExMC8GA1UEAxMoNzNjMGRjZmQ0YzI3MWJlNWM5ZTU0M2U4NDc4MzQ4MmQ5
YjI1ZWYzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJw/JQGL6i2S
rI6mKRQlYGoJ6qcOCPh7O8CT4WvCh0lgLqV7Nr9SwDdSBOlk+ihY3UErJ5uaUti7
P2RLt9++VfQhHejyWBcFZTVQ6Uij5Cj5Jp23wpgg8KELxxmzwXVOVECnFG0iCT9R
0ZnJ3kpgcJdcl9ulInoEuGJePdV0sKOKM9zSmyN7r2M7tdTFO3VdNGu0xLQTWizC
UNTLzDZ+KF7xFHkYScs1NULMNoC9mczI2ry3xs+5IAAxeQvVYKus2ysjczTM/pvV
Uh2vtmlh5oq9irGj94UldNvJIjEIkCIHzbjx7nmAgdzvdRfRz4cYo5a5rvuuUvUq
pIYNzo+J2D8CAwEAAaOCAu0wggLpMB0GA1UdDgQWBBQMN2oBnpodQItefLPEew0X
RfsJ4DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84YWY4MWJhZC01ZWUw
LTRhOWUtODNmNS02YmI2ODM4NDg2N2YvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOGFmODFiYWQtNWVlMC00
YTllLTgzZjUtNmJiNjgzODQ4NjdmLzczYzBkY2ZkNGMyNzFiZTVjOWU1NDNlODQ3
ODM0ODJkOWIyNWVmMzkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqATyDANBAIAAjAHAwUAKAMlwDAN
BgkqhkiG9w0BAQsFAAOCAQEAfxW5xTngpay8k34DzBwAL+NuCHvsrvhn/nNsTJMT
4Csk53CrjssCahiHA8+7DF/WhARafvQjg4dw8/D3rli1gXrXa2hBqxoKqVhJtCa7
U29csr0wpqyphdYY+XCXCEWzAzzKGuFZTE7u2Lc+s5umyVdJiB1o0kDUNd4St86T
VAXtPLfg5962HkFF+t+IOj2TZP0W/14TefMDj1J9gopcK/v4YgW811BZNxMLlV+M
H/1dVnE9vt8sEKXlTVtq0YMMcTlHscIT5mBDIfE4Zw4UMHBkTIBwVTaQwyczjPmU
LbobSWOsGtloTHWDmjTgISQxpQPmFdGb5SQ5N+u4cqJCkg==
-----END CERTIFICATE-----