Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a488499ad37d25fe00a349825203942dc05289bb.cer
File:                     a488499ad37d25fe00a349825203942dc05289bb.cer (raw, json)
Hash identifier:          +7TEcHqsDF+bVSBqb2A7uYyTa1Ec7jnX4IRuBVHH0Lk=
Subject key identifier:   15:B5:93:C1:2A:82:6D:FC:6C:69:AC:A4:96:A9:6E:B1:A5:0B:72:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD088F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/24568327-bcc2-442f-a7ea-8488d8b8b98a/a488499ad37d25fe00a349825203942dc05289bb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/24568327-bcc2-442f-a7ea-8488d8b8b98a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 May 2019 00:30:40 +0000
Certificate not after:    Sat 24 Feb 2024 23:02:48 +0000
Subordinate resources:    AS: 267837
                          IP: 45.175.156.0/22
                          IP: 2803:1460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14485647 (0xdd088f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 00:30:40 2019 GMT
            Not After : Feb 24 23:02:48 2024 GMT
        Subject: CN=a488499ad37d25fe00a349825203942dc05289bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:0f:10:42:67:a6:41:77:0b:83:56:ef:6b:
                    d1:a1:b0:bb:9c:33:5a:49:4e:07:38:14:84:32:bf:
                    5d:f6:b7:a2:8e:f2:8d:3f:27:79:17:80:95:44:ca:
                    f0:ad:81:b5:be:2f:e9:d3:a7:60:20:21:20:dd:46:
                    f5:6d:0b:eb:fc:3b:1c:be:a6:d7:ca:e7:86:25:80:
                    59:6b:eb:a5:41:53:cc:43:3a:45:10:a1:a3:57:ce:
                    5a:bf:8e:c4:dc:39:75:50:5d:b6:1a:f4:e0:50:bd:
                    b8:44:2f:06:ca:77:e5:e5:f7:02:1d:f9:33:70:b0:
                    46:fb:11:e4:97:da:0c:ff:65:4c:85:d4:e7:46:b6:
                    4d:83:79:86:b7:de:d9:c3:fe:a5:71:bd:93:87:d7:
                    c3:f1:a3:6c:bf:14:21:8f:c2:9b:2c:f0:30:50:73:
                    e1:58:68:42:19:7e:6b:c9:2b:74:31:a5:06:31:39:
                    c4:97:1c:4d:42:81:73:85:7c:de:0c:a8:25:ee:e6:
                    f5:53:6f:9b:04:5e:ea:11:04:04:05:05:34:3a:12:
                    20:1f:8f:11:ff:9d:76:b9:87:90:3b:78:b1:c8:5e:
                    3f:37:76:2c:1d:ce:d0:50:f9:90:0e:0c:30:61:bc:
                    b2:23:4b:1c:18:86:6f:47:d8:6b:ca:0b:e1:49:33:
                    80:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B5:93:C1:2A:82:6D:FC:6C:69:AC:A4:96:A9:6E:B1:A5:0B:72:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/24568327-bcc2-442f-a7ea-8488d8b8b98a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/24568327-bcc2-442f-a7ea-8488d8b8b98a/a488499ad37d25fe00a349825203942dc05289bb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.156.0/22
                IPv6:
                  2803:1460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267837

    Signature Algorithm: sha256WithRSAEncryption
         19:6c:a7:bd:a4:a0:54:05:3a:95:b5:0c:80:2d:f0:af:67:de:
         10:4b:39:c6:3f:07:bb:72:06:03:70:5c:84:bf:28:22:1e:43:
         15:d2:eb:f0:58:d7:73:01:17:1f:b2:f3:de:06:f0:de:02:bc:
         ba:b2:65:cc:2f:71:8d:c0:4d:8c:3d:71:3f:76:45:e0:32:76:
         54:42:ca:48:fa:89:36:b3:36:f3:7e:13:cf:53:65:6f:bd:08:
         87:7f:6b:d9:9b:65:e2:57:72:07:cc:5b:16:eb:a3:22:e9:af:
         0b:34:57:85:ca:77:d0:d5:c4:e1:2e:85:16:26:f0:f0:e5:f2:
         71:4b:e2:fd:8b:01:db:29:fd:66:57:27:ca:d6:19:72:dc:29:
         22:b1:c6:62:82:d0:de:f4:fc:9a:af:ae:59:a9:5d:5a:83:de:
         30:db:a9:00:9b:e9:8c:a7:89:bd:75:80:ae:e9:f9:0f:02:38:
         5f:3b:3c:3b:92:fd:43:3d:62:4a:94:f0:2f:9e:cd:40:5c:6d:
         f1:c3:b9:4a:ac:38:45:89:b9:d7:8a:59:96:48:ff:72:4d:d9:
         1d:2a:6e:3b:2d:a8:68:81:79:bb:ae:bc:0b:ee:ed:ba:19:ab:
         54:9d:49:48:af:8e:95:62:2d:0d:35:77:af:f7:bb:b6:f0:92:
         0f:4e:e5:d6
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAN0IjzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDUxMDAwMzA0MFoXDTI0MDIyNDIzMDI0
OFowMzExMC8GA1UEAxMoYTQ4ODQ5OWFkMzdkMjVmZTAwYTM0OTgyNTIwMzk0MmRj
MDUyODliYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKfcDxBCZ6ZB
dwuDVu9r0aGwu5wzWklOBzgUhDK/Xfa3oo7yjT8neReAlUTK8K2Btb4v6dOnYCAh
IN1G9W0L6/w7HL6m18rnhiWAWWvrpUFTzEM6RRCho1fOWr+OxNw5dVBdthr04FC9
uEQvBsp35eX3Ah35M3CwRvsR5JfaDP9lTIXU50a2TYN5hrfe2cP+pXG9k4fXw/Gj
bL8UIY/CmyzwMFBz4VhoQhl+a8krdDGlBjE5xJccTUKBc4V83gyoJe7m9VNvmwRe
6hEEBAUFNDoSIB+PEf+ddrmHkDt4schePzd2LB3O0FD5kA4MMGG8siNLHBiGb0fY
a8oL4UkzgEcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQVtZPBKoJt/GxprKSWqW6x
pQtyGzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yNDU2ODMyNy1iY2My
LTQ0MmYtYTdlYS04NDg4ZDhiOGI5OGEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjQ1NjgzMjctYmNjMi00
NDJmLWE3ZWEtODQ4OGQ4YjhiOThhL2E0ODg0OTlhZDM3ZDI1ZmUwMGEzNDk4MjUy
MDM5NDJkYzA1Mjg5YmIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2vnDANBAIAAjAHAwUAKAMUYDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFj0wDQYJKoZIhvcNAQELBQADggEBABls
p72koFQFOpW1DIAt8K9n3hBLOcY/B7tyBgNwXIS/KCIeQxXS6/BY13MBFx+y894G
8N4CvLqyZcwvcY3ATYw9cT92ReAydlRCykj6iTazNvN+E89TZW+9CId/a9mbZeJX
cgfMWxbroyLprws0V4XKd9DVxOEuhRYm8PDl8nFL4v2LAdsp/WZXJ8rWGXLcKSKx
xmKC0N70/JqvrlmpXVqD3jDbqQCb6Yynib11gK7p+Q8COF87PDuS/UM9YkqU8C+e
zUBcbfHDuUqsOEWJudeKWZZI/3JN2R0qbjstqGiBebuuvAvu7boZq1SdSUivjpVi
LQ01d6/3u7bwkg9O5dY=
-----END CERTIFICATE-----