Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/955d77e286553ae66ca30e8d9c9c76a1916a4be0.cer
File:                     955d77e286553ae66ca30e8d9c9c76a1916a4be0.cer (raw, json)
Hash identifier:          g4o3+Ol7B2hqhtBLOH5WM28KLt9lI8//9MWJeZlpp/s=
Subject key identifier:   5D:D8:DC:68:AF:35:93:E2:94:16:7C:3B:61:A3:6D:26:6F:3A:EC:33
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1CFBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a022d176-4a6e-474f-b959-6d6b43537a1a/955d77e286553ae66ca30e8d9c9c76a1916a4be0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a022d176-4a6e-474f-b959-6d6b43537a1a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2019 04:40:04 +0000
Certificate not after:    Wed 17 Apr 2024 22:53:44 +0000
Subordinate resources:    AS: 267908
                          IP: 45.178.132.0/22
                          IP: 2803:b660::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14798781 (0xe1cfbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  1 04:40:04 2019 GMT
            Not After : Apr 17 22:53:44 2024 GMT
        Subject: CN=955d77e286553ae66ca30e8d9c9c76a1916a4be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9b:ce:dd:93:c4:87:d5:63:66:e2:ff:35:01:
                    79:09:09:b3:0a:09:f8:09:8a:ae:fd:76:9f:35:04:
                    9f:6c:d9:3a:97:d9:28:70:c9:1e:a1:35:2f:b1:e0:
                    86:c7:00:90:66:00:ee:dc:a0:e1:dd:71:12:bb:58:
                    98:30:86:e7:b0:bf:db:e8:50:0e:83:5c:b9:7b:0b:
                    55:e4:b3:b9:34:a0:89:e4:7a:ad:79:98:56:ef:09:
                    f7:49:3a:fc:a8:81:32:6f:da:09:0e:55:73:d9:1b:
                    8c:d4:ed:97:d9:cd:34:a6:d7:52:5f:07:88:ab:fc:
                    c1:fa:aa:c2:d7:6e:85:51:74:c1:7d:27:c9:0e:2b:
                    59:71:15:09:b6:7f:74:85:5b:49:27:a5:29:0a:b6:
                    4b:3e:86:02:2d:86:ca:10:db:e0:15:90:3b:f5:f9:
                    ce:31:ca:ee:de:b9:dc:8a:da:12:fe:6a:b5:a6:be:
                    c0:66:27:48:d3:89:c1:46:b1:54:6e:d3:6b:63:ac:
                    27:e7:1c:86:c9:8a:dd:1e:2e:27:9e:78:45:55:d3:
                    42:6e:28:78:d3:9f:4b:c4:82:64:0d:71:86:52:d9:
                    52:13:0d:ef:c4:07:d5:0b:00:6f:e3:f0:9e:c8:d5:
                    06:cb:62:b1:0e:ca:1e:24:39:2d:7a:42:fd:0b:87:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D8:DC:68:AF:35:93:E2:94:16:7C:3B:61:A3:6D:26:6F:3A:EC:33
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a022d176-4a6e-474f-b959-6d6b43537a1a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a022d176-4a6e-474f-b959-6d6b43537a1a/955d77e286553ae66ca30e8d9c9c76a1916a4be0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.132.0/22
                IPv6:
                  2803:b660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267908

    Signature Algorithm: sha256WithRSAEncryption
         0d:5b:9c:4e:70:2f:cb:a8:a3:6f:0d:fa:b6:bc:a4:6d:29:a1:
         01:c8:f9:41:fb:28:ba:b7:e6:e9:10:ee:5a:57:87:6c:ef:7f:
         bb:b9:9d:47:66:46:6c:56:39:c5:80:99:92:07:54:0b:e5:67:
         0c:87:67:32:44:99:00:a6:9e:24:e0:9a:4c:ad:be:e9:cd:40:
         6f:de:d5:41:a1:0e:a4:a8:f1:ab:c3:ca:cc:e8:1e:8c:ec:3e:
         20:b3:20:dc:49:a9:d3:4b:3c:61:b1:2f:3d:de:ba:c6:a3:af:
         09:cf:55:b6:cd:d5:51:ff:d1:70:7a:c9:38:1e:06:65:f3:ca:
         d9:e7:13:2d:97:13:f6:3f:28:f0:67:0d:b8:86:6c:db:ac:81:
         71:ec:c2:89:b0:40:1b:14:be:34:c7:fb:eb:37:43:ad:13:09:
         d6:fc:f1:f3:ae:c1:f8:e7:9b:fe:ff:59:3d:04:ab:1a:aa:ff:
         40:45:5a:83:f9:6f:5e:6f:20:de:5c:74:11:35:c9:c0:c2:09:
         31:cc:38:3a:2e:27:2b:9e:83:48:e3:c2:4d:c8:ef:09:02:cd:
         87:f8:79:b2:50:17:6b:cd:e8:02:03:ec:29:38:10:2c:10:ee:
         84:d4:68:d4:56:4c:af:6f:95:66:58:25:83:94:e6:66:9f:93:
         cb:74:04:53
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOHPvTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDcwMTA0NDAwNFoXDTI0MDQxNzIyNTM0
NFowMzExMC8GA1UEAxMoOTU1ZDc3ZTI4NjU1M2FlNjZjYTMwZThkOWM5Yzc2YTE5
MTZhNGJlMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAImbzt2TxIfV
Y2bi/zUBeQkJswoJ+AmKrv12nzUEn2zZOpfZKHDJHqE1L7HghscAkGYA7tyg4d1x
ErtYmDCG57C/2+hQDoNcuXsLVeSzuTSgieR6rXmYVu8J90k6/KiBMm/aCQ5Vc9kb
jNTtl9nNNKbXUl8HiKv8wfqqwtduhVF0wX0nyQ4rWXEVCbZ/dIVbSSelKQq2Sz6G
Ai2GyhDb4BWQO/X5zjHK7t653IraEv5qtaa+wGYnSNOJwUaxVG7Ta2OsJ+cchsmK
3R4uJ554RVXTQm4oeNOfS8SCZA1xhlLZUhMN78QH1QsAb+PwnsjVBstisQ7KHiQ5
LXpC/QuHQuUCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRd2NxorzWT4pQWfDtho20m
bzrsMzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMDIyZDE3Ni00YTZl
LTQ3NGYtYjk1OS02ZDZiNDM1MzdhMWEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTAyMmQxNzYtNGE2ZS00
NzRmLWI5NTktNmQ2YjQzNTM3YTFhLzk1NWQ3N2UyODY1NTNhZTY2Y2EzMGU4ZDlj
OWM3NmExOTE2YTRiZTAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2yhDANBAIAAjAHAwUAKAO2YDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFoQwDQYJKoZIhvcNAQELBQADggEBAA1b
nE5wL8uoo28N+ra8pG0poQHI+UH7KLq35ukQ7lpXh2zvf7u5nUdmRmxWOcWAmZIH
VAvlZwyHZzJEmQCmniTgmkytvunNQG/e1UGhDqSo8avDyszoHozsPiCzINxJqdNL
PGGxLz3eusajrwnPVbbN1VH/0XB6yTgeBmXzytnnEy2XE/Y/KPBnDbiGbNusgXHs
womwQBsUvjTH++s3Q60TCdb88fOuwfjnm/7/WT0Eqxqq/0BFWoP5b15vIN5cdBE1
ycDCCTHMODouJyueg0jjwk3I7wkCzYf4ebJQF2vN6AID7Ck4ECwQ7oTUaNRWTK9v
lWZYJYOU5mafk8t0BFM=
-----END CERTIFICATE-----