Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c12854c0688e59705e41e3c1e61e06fe3bdebc3.cer
File:                     9c12854c0688e59705e41e3c1e61e06fe3bdebc3.cer (raw, json)
Hash identifier:          +Ejlacj3ujskNWg7K87PuBjL9G6IcO69D6/xK1e1FdM=
Subject key identifier:   5B:6E:D2:E6:53:ED:49:5A:76:EB:35:CD:73:4A:72:84:C2:91:17:15
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBDF86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9c250dd1-44a3-474f-ab3b-28e84a96c6a9/9c12854c0688e59705e41e3c1e61e06fe3bdebc3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9c250dd1-44a3-474f-ab3b-28e84a96c6a9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 May 2019 15:45:15 +0000
Certificate not after:    Mon 04 Nov 2024 16:59:45 +0000
Subordinate resources:    AS: 28109
                          IP: 190.124.192.0 -- 190.124.215.255
                          IP: 2801:0:90::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16506758 (0xfbdf86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 15:45:15 2019 GMT
            Not After : Nov  4 16:59:45 2024 GMT
        Subject: CN=9c12854c0688e59705e41e3c1e61e06fe3bdebc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a3:80:8c:d6:5d:76:26:30:53:f1:a3:9c:0b:
                    5f:e7:8e:64:c4:82:88:40:33:1b:c0:e0:86:48:d8:
                    62:a3:95:11:f7:cd:2f:a5:19:d7:2c:77:98:51:98:
                    1b:4d:11:ff:41:6a:06:88:14:83:d5:87:ce:30:35:
                    04:b0:e2:1e:25:b8:38:02:82:6e:35:35:6b:b0:12:
                    4e:62:b7:83:aa:1d:61:8e:36:2f:24:4d:c8:e3:6a:
                    ed:70:6a:e4:f4:5e:fe:21:b3:6b:8f:94:6e:08:60:
                    b4:4c:f9:1f:2f:ad:e4:3f:f4:21:02:87:41:07:56:
                    9e:7c:be:67:32:c4:3e:c1:55:34:ef:d9:29:ff:63:
                    36:c8:8c:0c:95:09:a4:08:02:b8:83:75:62:45:82:
                    51:d1:bb:37:41:df:55:80:ed:25:82:20:b0:86:81:
                    67:1d:b5:0e:6f:f6:2e:fa:b5:30:be:6b:21:27:4f:
                    0f:e4:ae:de:c8:46:3c:28:16:c8:7c:19:48:9a:38:
                    c6:44:81:6b:7f:03:1e:63:b2:bd:a0:01:d9:6f:3e:
                    50:f2:36:75:0d:c3:e7:cd:25:6b:d8:4f:00:4d:f1:
                    42:94:23:3a:3f:36:06:41:37:56:32:6c:fe:d1:eb:
                    60:f2:59:9e:f2:ab:1f:4e:bd:35:31:48:b2:40:b9:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6E:D2:E6:53:ED:49:5A:76:EB:35:CD:73:4A:72:84:C2:91:17:15
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9c250dd1-44a3-474f-ab3b-28e84a96c6a9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9c250dd1-44a3-474f-ab3b-28e84a96c6a9/9c12854c0688e59705e41e3c1e61e06fe3bdebc3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.192.0-190.124.215.255
                IPv6:
                  2801:0:90::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28109

    Signature Algorithm: sha256WithRSAEncryption
         89:8d:9f:38:a1:5a:cf:ed:34:0b:7a:0f:9b:96:7a:93:5e:c6:
         0a:95:ba:87:e0:bd:0c:16:37:38:61:19:37:2f:86:94:b2:71:
         4a:70:ce:4a:49:96:54:b8:e8:3e:cf:a1:18:71:4b:ba:37:8d:
         c8:19:0d:52:8d:7f:20:28:78:73:56:a7:97:f9:53:6a:a8:33:
         db:55:c9:de:e6:e2:37:d7:ee:73:67:db:69:94:01:12:68:1f:
         e9:16:12:2b:ff:df:eb:c9:60:58:2b:81:1a:b0:48:2e:4a:00:
         3a:70:41:a9:fe:20:5e:cc:bd:bf:b3:5d:d9:88:8b:8f:1c:e0:
         37:15:b4:a8:b9:d7:de:3d:a3:49:13:32:8a:f9:56:52:c7:89:
         66:bb:47:5e:a0:23:0d:2a:81:f4:7f:f6:47:c1:9f:91:b8:00:
         85:85:22:b5:33:7d:15:19:03:51:fc:51:b4:56:04:02:df:05:
         76:9c:91:9a:a2:e0:4a:74:fb:d3:66:73:88:6d:f6:a0:c7:a3:
         ce:93:26:2a:71:08:cc:c1:ee:37:d2:4a:67:9e:ba:43:f9:f0:
         33:ea:d7:f5:3a:a0:43:5f:78:6c:25:1e:04:6a:cd:1f:3d:a8:
         22:f9:19:f9:04:e2:28:e7:8d:19:b6:37:9d:56:55:b9:1f:1e:
         3e:be:b6:25
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgIEAPvfhjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDUxMDE1NDUxNVoXDTI0MTEwNDE2NTk0
NVowMzExMC8GA1UEAxMoOWMxMjg1NGMwNjg4ZTU5NzA1ZTQxZTNjMWU2MWUwNmZl
M2JkZWJjMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIejgIzWXXYm
MFPxo5wLX+eOZMSCiEAzG8DghkjYYqOVEffNL6UZ1yx3mFGYG00R/0FqBogUg9WH
zjA1BLDiHiW4OAKCbjU1a7ASTmK3g6odYY42LyRNyONq7XBq5PRe/iGza4+Ubghg
tEz5Hy+t5D/0IQKHQQdWnny+ZzLEPsFVNO/ZKf9jNsiMDJUJpAgCuIN1YkWCUdG7
N0HfVYDtJYIgsIaBZx21Dm/2Lvq1ML5rISdPD+Su3shGPCgWyHwZSJo4xkSBa38D
HmOyvaAB2W8+UPI2dQ3D580la9hPAE3xQpQjOj82BkE3VjJs/tHrYPJZnvKrH069
NTFIskC51QECAwEAAaOCAxIwggMOMB0GA1UdDgQWBBRbbtLmU+1JWnbrNc1zSnKE
wpEXFTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85YzI1MGRkMS00NGEz
LTQ3NGYtYWIzYi0yOGU4NGE5NmM2YTkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWMyNTBkZDEtNDRhMy00
NzRmLWFiM2ItMjhlODRhOTZjNmE5LzljMTI4NTRjMDY4OGU1OTcwNWU0MWUzYzFl
NjFlMDZmZTNiZGViYzMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA4
BggrBgEFBQcBBwEB/wQpMCcwFAQCAAEwDjAMAwQGvnzAAwQDvnzQMA8EAgACMAkD
BwAoAQAAAJAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbc0wDQYJKoZIhvcNAQEL
BQADggEBAImNnzihWs/tNAt6D5uWepNexgqVuofgvQwWNzhhGTcvhpSycUpwzkpJ
llS46D7PoRhxS7o3jcgZDVKNfyAoeHNWp5f5U2qoM9tVyd7m4jfX7nNn22mUARJo
H+kWEiv/3+vJYFgrgRqwSC5KADpwQan+IF7Mvb+zXdmIi48c4DcVtKi51949o0kT
Mor5VlLHiWa7R16gIw0qgfR/9kfBn5G4AIWFIrUzfRUZA1H8UbRWBALfBXackZqi
4Ep0+9Nmc4ht9qDHo86TJipxCMzB7jfSSmeeukP58DPq1/U6oENfeGwlHgRqzR89
qCL5GfkE4ijnjRm2N51WVbkfHj6+tiU=
-----END CERTIFICATE-----