Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a45ed9891ebefc1daf2825f1096211931bbf962c.cer
File:                     a45ed9891ebefc1daf2825f1096211931bbf962c.cer (raw, json)
Hash identifier:          t8onA8APsaaXCRbIFtAruYbCC0w5DkcIw94g7QDm+Nc=
Subject key identifier:   68:AB:51:0E:DC:D3:0E:EF:55:3E:96:50:9C:AB:1F:FD:3B:F7:B2:E0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DEA82D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e5df1744-7e84-428a-8686-c8782cc092cc/a45ed9891ebefc1daf2825f1096211931bbf962c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e5df1744-7e84-428a-8686-c8782cc092cc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 09 Oct 2018 16:29:02 +0000
Certificate not after:    Fri 15 Mar 2024 22:02:18 +0000
Subordinate resources:    AS: 266801
                          IP: 45.236.124.0/22
                          IP: 2803:c8a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14592045 (0xdea82d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 16:29:02 2018 GMT
            Not After : Mar 15 22:02:18 2024 GMT
        Subject: CN=a45ed9891ebefc1daf2825f1096211931bbf962c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:cf:53:b8:cc:91:67:cf:b4:70:c3:11:a7:
                    01:34:ad:19:10:17:54:44:de:bc:31:8b:de:82:8f:
                    1d:63:73:52:6d:e2:12:ba:69:64:75:29:77:2f:bc:
                    b6:ed:39:29:c3:b9:9c:14:ae:76:79:26:a7:b0:21:
                    67:e0:bd:1d:9d:e6:c4:91:cc:c6:cd:41:b5:c0:4c:
                    be:ed:f2:56:ef:55:3f:0a:6e:e4:bb:c6:f4:a7:81:
                    d2:ba:a5:35:ae:4e:46:9a:34:8e:94:66:c1:e1:21:
                    0d:7c:75:b0:f3:7a:14:d3:d3:cd:ea:e9:d4:3c:2c:
                    3c:84:4e:00:37:8f:18:02:7c:70:a2:0f:e7:b9:73:
                    cb:82:d7:44:b4:b4:c3:d9:33:7a:a5:3d:a0:24:99:
                    f4:d2:0e:b4:b5:a6:56:82:f2:e7:1f:a6:64:a9:ff:
                    d7:99:cd:b3:4d:2e:9e:3d:66:af:50:0e:b7:f7:db:
                    0b:3b:35:b1:ff:6f:4d:07:f5:e4:75:5a:54:c5:01:
                    2f:6e:ab:0f:52:92:69:cf:94:4b:ef:7e:21:af:ba:
                    8b:7d:ee:b1:89:09:3d:34:c7:89:95:66:47:d7:ac:
                    02:e0:af:4d:b1:3c:3d:06:15:8c:2d:5a:e2:5d:be:
                    a7:fa:65:8f:c6:5b:dd:6b:06:49:e8:f6:9b:1e:dd:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AB:51:0E:DC:D3:0E:EF:55:3E:96:50:9C:AB:1F:FD:3B:F7:B2:E0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e5df1744-7e84-428a-8686-c8782cc092cc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e5df1744-7e84-428a-8686-c8782cc092cc/a45ed9891ebefc1daf2825f1096211931bbf962c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.124.0/22
                IPv6:
                  2803:c8a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266801

    Signature Algorithm: sha256WithRSAEncryption
         4d:fa:72:2a:f0:d5:57:5f:c5:f2:7b:5a:96:9a:b6:ad:9c:be:
         cf:29:9d:cd:f1:fc:49:78:e0:57:bc:f5:b0:af:38:1e:10:05:
         ee:e2:71:5c:ab:e1:84:f8:d7:ed:f7:74:e2:37:d8:d7:22:66:
         1c:08:1a:54:47:da:f5:40:3a:1b:04:cf:3d:c0:0c:d0:76:80:
         32:6e:88:f2:aa:7d:52:d7:6b:26:5c:a1:9f:c2:a6:bf:3f:82:
         ed:a9:7e:b9:75:10:a9:42:87:00:1a:29:20:90:89:24:6e:10:
         65:42:96:fe:f5:1a:fb:0a:93:7e:56:4c:b5:df:18:a8:bd:d9:
         d0:49:d5:9f:a8:cb:7a:52:8d:4a:e8:df:6f:de:44:05:82:c6:
         06:09:02:0e:6c:86:a7:1b:32:92:65:72:28:d6:a0:d9:8e:06:
         9b:c0:ac:a7:c5:48:23:80:f9:cc:31:48:2a:6f:a8:c8:e2:cc:
         d1:a8:2f:eb:5f:37:a5:2d:9c:c4:cd:1c:71:f1:46:7d:46:d6:
         b9:72:88:f7:8a:0c:bf:fe:d6:b7:72:30:e6:87:bf:ab:fc:77:
         42:b0:24:6b:f2:84:0f:34:d2:57:d1:bc:8c:97:ec:80:bc:27:
         f8:b6:1a:9c:79:f2:1e:bf:94:ae:15:23:bd:12:a6:17:c4:8c:
         89:f2:2b:d5
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAN6oLTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MTAwOTE2MjkwMloXDTI0MDMxNTIyMDIx
OFowMzExMC8GA1UEAxMoYTQ1ZWQ5ODkxZWJlZmMxZGFmMjgyNWYxMDk2MjExOTMx
YmJmOTYyYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcmz1O4zJFn
z7RwwxGnATStGRAXVETevDGL3oKPHWNzUm3iErppZHUpdy+8tu05KcO5nBSudnkm
p7AhZ+C9HZ3mxJHMxs1BtcBMvu3yVu9VPwpu5LvG9KeB0rqlNa5ORpo0jpRmweEh
DXx1sPN6FNPTzerp1DwsPIROADePGAJ8cKIP57lzy4LXRLS0w9kzeqU9oCSZ9NIO
tLWmVoLy5x+mZKn/15nNs00unj1mr1AOt/fbCzs1sf9vTQf15HVaVMUBL26rD1KS
ac+US+9+Ia+6i33usYkJPTTHiZVmR9esAuCvTbE8PQYVjC1a4l2+p/plj8Zb3WsG
Sej2mx7d+6sCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRoq1EO3NMO71U+llCcqx/9
O/ey4DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lNWRmMTc0NC03ZTg0
LTQyOGEtODY4Ni1jODc4MmNjMDkyY2MvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTVkZjE3NDQtN2U4NC00
MjhhLTg2ODYtYzg3ODJjYzA5MmNjL2E0NWVkOTg5MWViZWZjMWRhZjI4MjVmMTA5
NjIxMTkzMWJiZjk2MmMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3sfDANBAIAAjAHAwUAKAPIoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEjEwDQYJKoZIhvcNAQELBQADggEBAE36
cirw1VdfxfJ7Wpaatq2cvs8pnc3x/El44Fe89bCvOB4QBe7icVyr4YT41+33dOI3
2NciZhwIGlRH2vVAOhsEzz3ADNB2gDJuiPKqfVLXayZcoZ/Cpr8/gu2pfrl1EKlC
hwAaKSCQiSRuEGVClv71GvsKk35WTLXfGKi92dBJ1Z+oy3pSjUro32/eRAWCxgYJ
Ag5shqcbMpJlcijWoNmOBpvArKfFSCOA+cwxSCpvqMjizNGoL+tfN6UtnMTNHHHx
Rn1G1rlyiPeKDL/+1rdyMOaHv6v8d0KwJGvyhA800lfRvIyX7IC8J/i2Gpx58h6/
lK4VI70SphfEjInyK9U=
-----END CERTIFICATE-----