Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/948adce46c8d8268670920c088d3a1921d2b68fa.cer
File:                     948adce46c8d8268670920c088d3a1921d2b68fa.cer (raw, json)
Hash identifier:          wMic6xksmGtZM6GDas6hDMc0Sh6q96RL3BiVzjQjZ2Q=
Subject key identifier:   44:40:DB:8A:FE:7E:9B:30:CF:B0:6E:49:50:E1:5F:D1:D9:30:33:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7FA8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e0b2ec28-cf81-41fe-85fc-4abef4a57d6f/948adce46c8d8268670920c088d3a1921d2b68fa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e0b2ec28-cf81-41fe-85fc-4abef4a57d6f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 13 Aug 2019 21:21:20 +0000
Certificate not after:    Sat 01 Jun 2024 19:51:58 +0000
Subordinate resources:    AS: 269740
                          IP: 45.181.43.0/24
                          IP: 2803:2960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15202958 (0xe7fa8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 13 21:21:20 2019 GMT
            Not After : Jun  1 19:51:58 2024 GMT
        Subject: CN=948adce46c8d8268670920c088d3a1921d2b68fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:0d:75:b3:a3:2f:17:1e:6f:2e:b8:eb:4e:
                    46:82:bd:51:3b:81:8c:2d:29:7d:59:2e:40:eb:49:
                    f5:6b:f3:2e:47:a9:fc:f5:9e:0c:c3:44:e1:28:77:
                    2d:f3:39:6f:07:05:7a:5e:5f:8e:c4:ec:8b:6b:ce:
                    c3:b1:ba:f7:b1:a1:09:b1:c7:2c:b9:29:31:66:a9:
                    65:5b:58:52:e8:27:49:32:4c:43:b8:df:62:29:8d:
                    06:77:a9:36:1b:26:d5:79:79:66:f5:37:71:7b:b2:
                    94:b4:b5:cd:ff:70:dc:62:3d:95:ed:73:a1:3c:5e:
                    c6:87:c2:23:b2:09:ab:59:8f:41:b7:a2:26:fb:da:
                    56:70:5d:89:60:bd:c5:60:d8:0c:ca:b0:d1:a2:50:
                    73:1f:9e:f8:00:b5:90:cc:d5:5e:f5:5c:af:9d:cf:
                    9d:79:99:6f:77:44:17:76:28:32:11:75:1a:7c:47:
                    97:3a:6c:d8:17:7c:df:6f:58:0a:60:17:e2:bd:46:
                    57:3c:b5:a2:21:20:8c:4c:d0:eb:e2:39:1a:b8:3f:
                    90:8d:36:12:da:97:48:c0:4f:e0:8b:5e:44:72:c9:
                    f0:4f:44:4a:78:2a:26:11:7c:64:37:38:79:d8:02:
                    d3:12:be:86:4f:a8:20:f0:73:d4:cb:73:98:9f:d6:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:40:DB:8A:FE:7E:9B:30:CF:B0:6E:49:50:E1:5F:D1:D9:30:33:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e0b2ec28-cf81-41fe-85fc-4abef4a57d6f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e0b2ec28-cf81-41fe-85fc-4abef4a57d6f/948adce46c8d8268670920c088d3a1921d2b68fa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.43.0/24
                IPv6:
                  2803:2960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269740

    Signature Algorithm: sha256WithRSAEncryption
         a5:fb:33:7a:c1:86:eb:d9:c3:52:5d:3e:51:d9:bf:75:7e:cb:
         65:29:cf:53:b3:ae:d0:55:ef:d5:e7:1e:62:24:6e:c9:46:5a:
         51:76:0b:bc:84:68:0e:63:66:85:b0:ff:3f:4c:ee:25:a7:a4:
         7d:b0:6b:05:ef:e4:31:28:a7:5f:b5:f6:32:4f:d7:00:50:36:
         df:0f:23:88:3f:73:36:67:4c:30:25:56:91:96:fb:e4:b2:a3:
         15:de:00:b7:80:2d:df:60:96:1e:e1:72:0e:fd:36:9e:b3:33:
         2f:1a:58:6b:2e:56:05:6f:0c:eb:dc:cd:af:ad:47:5f:fa:1d:
         b5:6e:98:f4:6b:8c:80:0e:4e:3a:03:48:60:a6:3a:1a:7e:a2:
         43:b8:e9:e0:70:43:af:71:2d:0f:a6:7f:93:31:6a:4b:95:16:
         3c:23:b5:86:78:b2:f5:77:9b:0c:7e:5c:cd:33:22:f2:be:3e:
         e3:95:d2:cf:7f:67:da:75:89:6a:35:ae:8e:00:b6:34:3d:52:
         d6:6d:f5:80:9b:0f:5e:d1:99:db:bf:14:31:16:20:b6:56:23:
         28:68:14:3f:21:07:49:39:6e:4e:03:ef:89:ea:43:de:1e:3b:
         8e:09:75:c1:18:e9:2f:36:d4:fe:fb:95:60:08:36:30:1b:a7:
         d8:72:42:02
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOf6jjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDgxMzIxMjEyMFoXDTI0MDYwMTE5NTE1
OFowMzExMC8GA1UEAxMoOTQ4YWRjZTQ2YzhkODI2ODY3MDkyMGMwODhkM2ExOTIx
ZDJiNjhmYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMyHDXWzoy8X
Hm8uuOtORoK9UTuBjC0pfVkuQOtJ9WvzLkep/PWeDMNE4Sh3LfM5bwcFel5fjsTs
i2vOw7G697GhCbHHLLkpMWapZVtYUugnSTJMQ7jfYimNBnepNhsm1Xl5ZvU3cXuy
lLS1zf9w3GI9le1zoTxexofCI7IJq1mPQbeiJvvaVnBdiWC9xWDYDMqw0aJQcx+e
+AC1kMzVXvVcr53PnXmZb3dEF3YoMhF1GnxHlzps2Bd8329YCmAX4r1GVzy1oiEg
jEzQ6+I5Grg/kI02EtqXSMBP4IteRHLJ8E9ESngqJhF8ZDc4edgC0xK+hk+oIPBz
1MtzmJ/WaOECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBREQNuK/n6bMM+wbklQ4V/R
2TAzIzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lMGIyZWMyOC1jZjgx
LTQxZmUtODVmYy00YWJlZjRhNTdkNmYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTBiMmVjMjgtY2Y4MS00
MWZlLTg1ZmMtNGFiZWY0YTU3ZDZmLzk0OGFkY2U0NmM4ZDgyNjg2NzA5MjBjMDg4
ZDNhMTkyMWQyYjY4ZmEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC21KzANBAIAAjAHAwUAKAMpYDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHawwDQYJKoZIhvcNAQELBQADggEBAKX7
M3rBhuvZw1JdPlHZv3V+y2Upz1OzrtBV79XnHmIkbslGWlF2C7yEaA5jZoWw/z9M
7iWnpH2wawXv5DEop1+19jJP1wBQNt8PI4g/czZnTDAlVpGW++SyoxXeALeALd9g
lh7hcg79Np6zMy8aWGsuVgVvDOvcza+tR1/6HbVumPRrjIAOTjoDSGCmOhp+okO4
6eBwQ69xLQ+mf5MxakuVFjwjtYZ4svV3mwx+XM0zIvK+PuOV0s9/Z9p1iWo1ro4A
tjQ9UtZt9YCbD17Rmdu/FDEWILZWIyhoFD8hB0k5bk4D74nqQ94eO44JdcEY6S82
1P77lWAINjAbp9hyQgI=
-----END CERTIFICATE-----