Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a431b12cbb45857ee37540244e236b5fe1793e26.cer
File:                     a431b12cbb45857ee37540244e236b5fe1793e26.cer (raw, json)
Hash identifier:          vFydIN3aeKqwQXNSRDakPVrOeYpvC9FprzWxT3NkkJk=
Subject key identifier:   0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2C9C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/a431b12cbb45857ee37540244e236b5fe1793e26.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 23 Jul 2018 15:11:30 +0000
Certificate not after:    Sun 28 Apr 2024 16:25:33 +0000
Subordinate resources:    IP: 45.238.216.0/22
                          IP: 2801:1c:f000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14862785 (0xe2c9c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 23 15:11:30 2018 GMT
            Not After : Apr 28 16:25:33 2024 GMT
        Subject: CN=a431b12cbb45857ee37540244e236b5fe1793e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:45:76:25:db:2d:e1:e6:fd:dc:2f:b3:28:95:
                    c7:6c:6a:fa:60:32:91:e0:da:d3:d1:d2:49:e2:6b:
                    42:26:c8:cd:a4:c1:68:3d:85:a6:5b:56:7f:06:9f:
                    2a:4f:d8:97:c9:a3:36:0f:f9:65:55:f1:51:df:a6:
                    1f:68:ef:c0:53:10:a5:71:f3:2a:be:82:b0:34:c2:
                    2e:29:41:3f:a7:36:73:c9:0b:05:ae:72:16:5f:85:
                    47:9d:ea:09:a8:b1:79:fb:d3:60:0d:0f:7c:c1:9d:
                    fc:7c:49:15:f1:1c:9c:61:57:18:3c:04:a0:9f:19:
                    96:e7:23:76:7d:74:45:a0:ec:f7:ab:bd:dc:e6:89:
                    8b:2b:1a:01:2d:a9:e9:24:70:04:c3:24:c3:fa:57:
                    aa:c5:26:b7:ff:d8:0d:e4:f9:27:0b:01:30:eb:bd:
                    44:aa:a8:f8:3e:55:39:e5:0f:27:23:2d:90:91:90:
                    96:b0:6b:79:b4:9d:58:e3:62:a7:7e:e7:d6:af:2c:
                    38:a4:ca:3e:89:50:dd:98:1c:ed:a8:41:2e:d1:e0:
                    2e:e4:34:23:91:e0:d3:cf:15:cd:d2:40:99:7c:56:
                    5d:7d:ce:2a:bf:fe:5c:53:b3:bb:db:79:1e:cb:ba:
                    18:63:09:25:46:86:63:d9:94:fc:02:1e:7c:62:94:
                    92:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/a431b12cbb45857ee37540244e236b5fe1793e26.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.216.0/22
                IPv6:
                  2801:1c:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:65:be:0b:da:7d:18:73:c2:e4:76:bb:bd:d1:ba:e5:b9:c3:
         75:b0:00:e6:77:04:8d:52:f7:ac:31:c4:49:b5:33:89:e4:d4:
         65:73:c9:3a:75:77:01:20:5c:16:05:94:dd:e3:0f:0a:03:fa:
         f8:35:d1:24:0c:ba:cb:a6:3e:90:a6:a3:4d:fe:26:bc:0a:2b:
         73:c4:b1:fd:ed:6b:4a:aa:7c:d9:2f:c1:ca:14:e0:c9:f7:87:
         b4:7f:cf:cc:04:33:8f:4e:0e:96:05:cb:7c:1b:4f:1b:75:49:
         3a:45:df:4c:5d:c7:21:e6:96:bb:d4:d0:d6:61:cd:f1:9d:57:
         75:92:0e:eb:97:c6:64:8d:9f:d8:9e:4d:ab:f1:30:4b:f7:b0:
         b0:a9:81:50:40:78:b4:d2:13:f7:97:6a:0a:d1:06:f5:4e:ff:
         17:e1:63:cb:15:a0:5b:94:b4:1e:cf:94:5b:26:e6:10:ac:83:
         9e:bd:c2:3b:8d:4e:91:d9:b0:57:6c:77:25:98:7c:9e:85:16:
         45:b1:9a:e1:6f:ea:7a:ee:16:25:c9:3e:58:bf:48:52:61:05:
         70:3a:7d:31:66:14:ea:fb:d8:89:61:83:92:58:46:be:44:e0:
         fd:92:92:9b:35:c1:05:f8:14:cb:f7:6a:b1:0c:e8:13:e3:89:
         f4:7d:33:c6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIEAOLJwTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDcyMzE1MTEzMFoXDTI0MDQyODE2MjUz
M1owMzExMC8GA1UEAxMoYTQzMWIxMmNiYjQ1ODU3ZWUzNzU0MDI0NGUyMzZiNWZl
MTc5M2UyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJdFdiXbLeHm
/dwvsyiVx2xq+mAykeDa09HSSeJrQibIzaTBaD2FpltWfwafKk/Yl8mjNg/5ZVXx
Ud+mH2jvwFMQpXHzKr6CsDTCLilBP6c2c8kLBa5yFl+FR53qCaixefvTYA0PfMGd
/HxJFfEcnGFXGDwEoJ8Zlucjdn10RaDs96u93OaJiysaAS2p6SRwBMMkw/pXqsUm
t//YDeT5JwsBMOu9RKqo+D5VOeUPJyMtkJGQlrBrebSdWONip37n1q8sOKTKPolQ
3Zgc7ahBLtHgLuQ0I5Hg088VzdJAmXxWXX3OKr/+XFOzu9t5Hsu6GGMJJUaGY9mU
/AIefGKUkmsCAwEAAaOCAu8wggLrMB0GA1UdDgQWBBQNG8yeRRRPRYX/1kfBnY+j
6JDn3DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wYzVjNmFjNy1iZmVi
LTQ4YTktYWQ5My04NjMxMmVmYTFmZDAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMGM1YzZhYzctYmZlYi00
OGE5LWFkOTMtODYzMTJlZmExZmQwL2E0MzFiMTJjYmI0NTg1N2VlMzc1NDAyNDRl
MjM2YjVmZTE3OTNlMjYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAi3u2DAPBAIAAjAJAwcAKAEAHPAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAdZb4L2n0Yc8Lkdru90brlucN1sADmdwSNUves
McRJtTOJ5NRlc8k6dXcBIFwWBZTd4w8KA/r4NdEkDLrLpj6QpqNN/ia8CitzxLH9
7WtKqnzZL8HKFODJ94e0f8/MBDOPTg6WBct8G08bdUk6Rd9MXcch5pa71NDWYc3x
nVd1kg7rl8ZkjZ/Ynk2r8TBL97CwqYFQQHi00hP3l2oK0Qb1Tv8X4WPLFaBblLQe
z5RbJuYQrIOevcI7jU6R2bBXbHclmHyehRZFsZrhb+p67hYlyT5Yv0hSYQVwOn0x
ZhTq+9iJYYOSWEa+ROD9kpKbNcEF+BTL92qxDOgT44n0fTPG
-----END CERTIFICATE-----