Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9144c0a44649b8dc574f61d431e56ed273ddb9f6.cer
File:                     9144c0a44649b8dc574f61d431e56ed273ddb9f6.cer (raw, json)
Hash identifier:          ETGNX64Jhts+yozkPDdY38zGwzhDX744Bds/8TWVH28=
Subject key identifier:   0A:D2:57:82:E6:5F:1E:8C:1A:97:DE:1E:55:72:B0:30:BE:31:ED:6C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D4011D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/9144c0a44649b8dc574f61d431e56ed273ddb9f6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 19 Aug 2019 10:31:23 +0000
Certificate not after:    Sat 03 Feb 2024 05:00:00 +0000
Subordinate resources:    AS: 265695
                          IP: 45.5.8.0/22
                          IP: 2803:9c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13893917 (0xd4011d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 19 10:31:23 2019 GMT
            Not After : Feb  3 05:00:00 2024 GMT
        Subject: CN=9144c0a44649b8dc574f61d431e56ed273ddb9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:83:a0:7a:fb:7e:2e:2b:e8:63:77:a2:aa:
                    ba:94:71:c6:bd:b4:4e:98:7d:64:4a:7a:11:a3:42:
                    86:5f:2c:04:ea:f8:4e:11:6f:6d:6f:ce:06:33:7d:
                    bd:90:1c:51:85:cb:c3:21:dd:3d:57:5c:1a:d1:cd:
                    2a:04:e9:11:91:e4:7b:13:44:d1:93:d6:32:7c:0e:
                    e8:18:97:3b:e1:38:a1:dd:8b:3e:c1:45:5f:d8:77:
                    d8:6e:89:07:9c:e2:46:7d:3d:37:fd:68:db:14:a8:
                    cb:3f:4b:b7:3e:a7:6a:55:49:40:e0:af:14:c7:97:
                    ec:c0:02:f7:9c:1c:f4:76:be:9c:74:b1:e9:ea:d6:
                    25:7a:7c:7c:41:23:68:e2:37:da:51:98:92:b0:88:
                    2f:10:15:47:b0:ab:73:ac:21:fe:20:05:c8:20:0f:
                    0a:a3:86:92:53:4f:72:9a:0b:12:a9:12:5b:b5:bd:
                    2e:fb:e3:29:7a:b1:85:5f:2d:f7:fc:d6:be:04:80:
                    78:22:c9:2b:29:b0:cc:b8:ed:04:ec:f0:b2:a4:d7:
                    7b:fd:bd:46:9e:bd:d2:c2:80:fd:43:2c:73:6d:de:
                    a2:06:13:87:4f:9c:9f:28:eb:63:1c:8f:ee:19:17:
                    ed:e3:87:13:80:b2:6b:65:58:02:d2:09:6e:d9:03:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D2:57:82:E6:5F:1E:8C:1A:97:DE:1E:55:72:B0:30:BE:31:ED:6C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/9144c0a44649b8dc574f61d431e56ed273ddb9f6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.8.0/22
                IPv6:
                  2803:9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265695

    Signature Algorithm: sha256WithRSAEncryption
         b6:c8:74:61:93:3d:20:ce:ff:9f:0a:5e:02:dd:ec:19:13:76:
         9c:cd:f9:2f:e8:81:1a:42:a8:ab:f9:e0:25:e7:72:e5:8f:a5:
         c6:be:fe:61:91:92:42:32:c2:44:7a:8f:d5:21:4b:f8:56:c5:
         97:59:54:a5:30:a7:5a:e6:a6:6a:33:05:d4:d6:68:be:3d:5c:
         29:95:79:f7:a8:fb:69:2b:f7:3a:9c:ca:2b:b8:d1:06:9c:fa:
         04:08:7c:c4:10:57:2c:ff:ad:3f:8b:95:55:76:9a:5d:32:c5:
         37:50:7d:ad:62:68:5b:3b:80:3b:1c:c3:26:01:ec:e9:8e:cd:
         86:9e:7d:cf:47:b8:b9:d9:19:27:f1:33:e9:03:7d:80:ba:58:
         c5:c0:23:70:c0:59:3f:c9:d2:5e:f8:4f:70:bc:94:bd:ba:21:
         6f:1e:f1:40:98:08:bc:d5:59:1d:f8:c7:fe:0f:25:e7:55:01:
         f5:30:9c:7c:d8:cb:59:9c:b4:93:0d:53:d6:48:ce:de:2b:11:
         a0:79:19:5d:75:bc:75:1b:d7:79:3c:83:a1:83:cd:eb:93:ed:
         cc:0b:94:fa:6b:64:0b:f9:c9:76:ad:d2:99:01:be:7a:cf:27:
         c8:b4:58:ff:25:18:ed:4b:a6:9d:c4:d1:0c:98:3e:4e:ce:f9:
         89:90:00:dc
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANQBHTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDgxOTEwMzEyM1oXDTI0MDIwMzA1MDAw
MFowMzExMC8GA1UEAxMoOTE0NGMwYTQ0NjQ5YjhkYzU3NGY2MWQ0MzFlNTZlZDI3
M2RkYjlmNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKf8g6B6+34u
K+hjd6KqupRxxr20Tph9ZEp6EaNChl8sBOr4ThFvbW/OBjN9vZAcUYXLwyHdPVdc
GtHNKgTpEZHkexNE0ZPWMnwO6BiXO+E4od2LPsFFX9h32G6JB5ziRn09N/1o2xSo
yz9Ltz6nalVJQOCvFMeX7MAC95wc9Ha+nHSx6erWJXp8fEEjaOI32lGYkrCILxAV
R7Crc6wh/iAFyCAPCqOGklNPcpoLEqkSW7W9LvvjKXqxhV8t9/zWvgSAeCLJKymw
zLjtBOzwsqTXe/29Rp690sKA/UMsc23eogYTh0+cnyjrYxyP7hkX7eOHE4Cya2VY
AtIJbtkDHI0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQK0leC5l8ejBqX3h5VcrAw
vjHtbDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jM2I0MDhhYS02ZDVh
LTRhMzktOTJiNC0xMzJmOThlNTE3MjMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzNiNDA4YWEtNmQ1YS00
YTM5LTkyYjQtMTMyZjk4ZTUxNzIzLzkxNDRjMGE0NDY0OWI4ZGM1NzRmNjFkNDMx
ZTU2ZWQyNzNkZGI5ZjYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0FCDANBAIAAjAHAwUAKAMJwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDd8wDQYJKoZIhvcNAQELBQADggEBALbI
dGGTPSDO/58KXgLd7BkTdpzN+S/ogRpCqKv54CXncuWPpca+/mGRkkIywkR6j9Uh
S/hWxZdZVKUwp1rmpmozBdTWaL49XCmVefeo+2kr9zqcyiu40Qac+gQIfMQQVyz/
rT+LlVV2ml0yxTdQfa1iaFs7gDscwyYB7OmOzYaefc9HuLnZGSfxM+kDfYC6WMXA
I3DAWT/J0l74T3C8lL26IW8e8UCYCLzVWR34x/4PJedVAfUwnHzYy1mctJMNU9ZI
zt4rEaB5GV11vHUb13k8g6GDzeuT7cwLlPprZAv5yXat0pkBvnrPJ8i0WP8lGO1L
pp3E0QyYPk7O+YmQANw=
-----END CERTIFICATE-----