Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9.cer
File:                     7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9.cer (raw, json)
Hash identifier:          R2CR7C0TTZT4LL9jMwdIeUCk5+W9mfSGqQd6gFjF5aw=
Subject key identifier:   83:16:29:5C:A6:DE:03:11:B2:7D:0E:49:35:2F:60:48:E3:63:91:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF4BE3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/985285cd-3aec-4452-a0ca-38609bad691f/7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/985285cd-3aec-4452-a0ca-38609bad691f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Jun 2019 23:08:30 +0000
Certificate not after:    Thu 21 Mar 2024 14:29:29 +0000
Subordinate resources:    AS: 267860
                          IP: 45.173.56.0/22
                          IP: 2801:17:800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14633955 (0xdf4be3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 11 23:08:30 2019 GMT
            Not After : Mar 21 14:29:29 2024 GMT
        Subject: CN=7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:3a:84:89:fc:78:84:10:fb:06:e7:80:b1:
                    d5:83:59:a1:d7:26:bc:81:b6:4b:bf:e5:c5:c7:55:
                    7a:93:ef:7a:e1:89:a1:ec:ae:65:18:fe:de:ae:43:
                    1a:5f:c9:9d:64:22:fd:99:98:ff:7e:43:cd:82:c1:
                    19:51:1d:e1:8c:16:28:48:54:54:95:9c:0c:b6:34:
                    94:c8:96:3b:41:3b:96:87:95:a6:a7:7a:45:d2:47:
                    b5:a5:a8:3c:ed:b0:41:9f:65:df:ae:7d:7e:e6:ed:
                    85:81:75:bc:f8:fc:0c:14:11:62:27:0d:0f:83:e5:
                    7d:4f:e9:68:2d:11:95:e3:83:d0:06:1d:f3:40:97:
                    21:3b:26:4d:41:8e:ad:fe:f9:73:3e:49:54:40:18:
                    85:bc:fd:86:f4:b1:02:ce:48:71:2a:cc:8b:c9:19:
                    30:e6:6c:5c:66:b0:1e:51:b0:c7:e2:c6:89:0e:4c:
                    52:bb:de:ee:90:76:82:a5:61:88:75:39:30:53:69:
                    92:b7:a9:88:5b:f3:49:f9:ae:91:5a:5e:f0:5c:fd:
                    86:13:ba:98:cd:c5:13:ca:f9:5d:04:c4:8f:aa:41:
                    81:3f:c3:d5:f6:68:ee:13:70:3f:d8:60:75:2d:56:
                    85:77:07:ae:07:07:34:97:d3:2d:3c:a4:ea:6a:9b:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:16:29:5C:A6:DE:03:11:B2:7D:0E:49:35:2F:60:48:E3:63:91:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/985285cd-3aec-4452-a0ca-38609bad691f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/985285cd-3aec-4452-a0ca-38609bad691f/7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.56.0/22
                IPv6:
                  2801:17:800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267860

    Signature Algorithm: sha256WithRSAEncryption
         7f:99:42:54:35:7c:f0:59:04:71:9b:6a:21:20:66:46:07:7f:
         8d:d7:c7:ff:6a:38:6e:18:07:6e:1f:6e:7c:2f:d2:5d:c0:98:
         94:d9:d5:d8:60:76:f7:b5:de:1a:b2:c0:28:15:6c:03:b6:21:
         cd:df:06:40:c8:57:13:df:30:93:eb:2a:e1:55:a7:ec:be:4e:
         fc:ae:5d:cd:a2:b5:2e:1a:8c:6a:06:74:e0:a1:30:3f:4c:83:
         74:56:22:2f:f9:a8:19:d9:49:5d:f8:90:2e:4c:a2:42:a2:88:
         39:5f:b2:da:f8:4b:8f:ba:4d:67:9c:8a:30:4b:e8:41:3f:fc:
         fa:aa:b0:3b:7d:8b:3d:e7:74:5a:93:ad:d5:69:e6:6c:60:04:
         e2:86:11:5c:42:28:34:4d:47:d1:bc:a1:e3:77:59:5f:71:1b:
         f7:41:60:e7:bd:04:0c:7f:ad:9c:d8:87:6d:6b:24:11:75:23:
         63:c1:8f:18:79:37:fa:46:c7:72:b2:cb:a8:80:a2:64:be:b1:
         a5:80:f5:e4:06:df:57:a3:24:0e:63:88:69:0d:31:01:ce:da:
         a1:fb:a5:da:ff:20:0a:cc:8e:cd:a5:e5:94:33:de:6f:d0:c4:
         64:42:4d:a3:0f:7d:2e:05:3e:a2:a7:88:97:0e:bb:0d:88:b9:
         29:77:2d:54
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAN9L4zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDYxMTIzMDgzMFoXDTI0MDMyMTE0Mjky
OVowMzExMC8GA1UEAxMoN2IwYmIxOTRjMGYyY2I5Zjc1Y2EwZDY5YzVkNmY4YmZh
MjY3YjdmOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ2YOoSJ/HiE
EPsG54Cx1YNZodcmvIG2S7/lxcdVepPveuGJoeyuZRj+3q5DGl/JnWQi/ZmY/35D
zYLBGVEd4YwWKEhUVJWcDLY0lMiWO0E7loeVpqd6RdJHtaWoPO2wQZ9l3659fubt
hYF1vPj8DBQRYicND4PlfU/paC0RleOD0AYd80CXITsmTUGOrf75cz5JVEAYhbz9
hvSxAs5IcSrMi8kZMOZsXGawHlGwx+LGiQ5MUrve7pB2gqVhiHU5MFNpkrepiFvz
SfmukVpe8Fz9hhO6mM3FE8r5XQTEj6pBgT/D1fZo7hNwP9hgdS1WhXcHrgcHNJfT
LTyk6mqb4AsCAwEAAaOCAwswggMHMB0GA1UdDgQWBBSDFilcpt4DEbJ9Dkk1L2BI
42ORvjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85ODUyODVjZC0zYWVj
LTQ0NTItYTBjYS0zODYwOWJhZDY5MWYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTg1Mjg1Y2QtM2FlYy00
NDUyLWEwY2EtMzg2MDliYWQ2OTFmLzdiMGJiMTk0YzBmMmNiOWY3NWNhMGQ2OWM1
ZDZmOGJmYTI2N2I3ZjkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAi2tODAPBAIAAjAJAwcAKAEAFwgA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWVDANBgkqhkiG9w0BAQsFAAOCAQEA
f5lCVDV88FkEcZtqISBmRgd/jdfH/2o4bhgHbh9ufC/SXcCYlNnV2GB297XeGrLA
KBVsA7Yhzd8GQMhXE98wk+sq4VWn7L5O/K5dzaK1LhqMagZ04KEwP0yDdFYiL/mo
GdlJXfiQLkyiQqKIOV+y2vhLj7pNZ5yKMEvoQT/8+qqwO32LPed0WpOt1WnmbGAE
4oYRXEIoNE1H0byh43dZX3Eb90Fg570EDH+tnNiHbWskEXUjY8GPGHk3+kbHcrLL
qICiZL6xpYD15AbfV6MkDmOIaQ0xAc7aoful2v8gCsyOzaXllDPeb9DEZEJNow99
LgU+oqeIlw67DYi5KXctVA==
-----END CERTIFICATE-----