Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer
File:                     ae85768adef6d4dde1ca45bae430571e45d9370a.cer (raw, json)
Hash identifier:          MvP19upGysM5gOPabW3HCNtHiRNzx3v+d+ZMB1YzWbA=
Subject key identifier:   19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F28B00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/ae85768adef6d4dde1ca45bae430571e45d9370a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 24 May 2019 14:37:50 +0000
Certificate not after:    Wed 21 Aug 2024 18:49:56 +0000
Subordinate resources:    AS: 27837
                          IP: 186.1.160.0/19
                          IP: 2800:ac0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15895296 (0xf28b00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 24 14:37:50 2019 GMT
            Not After : Aug 21 18:49:56 2024 GMT
        Subject: CN=ae85768adef6d4dde1ca45bae430571e45d9370a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:c7:e4:42:13:fe:43:ef:57:5f:b8:88:45:
                    24:41:af:64:56:24:ee:f9:5d:52:aa:92:ed:1e:84:
                    76:2e:ab:e3:9b:eb:eb:69:1f:e4:d4:9e:6b:e7:9b:
                    2c:80:96:2c:38:ba:79:05:2a:d3:94:89:c9:21:62:
                    96:5d:93:3c:13:de:49:89:8f:81:06:38:53:98:63:
                    68:d7:b9:9f:97:f3:9e:8f:e1:a6:b3:7c:4d:16:93:
                    d0:08:a7:c3:bb:3b:c7:2e:57:53:c3:42:70:17:5b:
                    98:5b:73:6b:da:3e:51:28:40:b5:1e:1c:5e:ce:20:
                    d5:0f:64:70:12:d6:ba:09:c7:46:01:fd:43:c0:93:
                    ea:d9:e5:a4:fa:52:82:8d:5f:a8:9b:66:8c:3b:64:
                    a9:18:19:54:0a:ad:64:4b:33:1f:15:5c:e5:0f:42:
                    1d:95:33:10:8d:e5:ae:e0:39:89:a5:0c:3d:9a:97:
                    c4:a4:35:a5:9a:f5:a7:64:98:c6:73:d3:fe:49:02:
                    36:e6:50:64:07:97:81:b8:3c:52:09:3e:20:1e:b6:
                    e9:d9:67:35:97:5c:cb:cb:2f:78:36:89:83:ba:5a:
                    c5:84:14:ca:ea:98:d7:95:ba:2e:05:2c:08:44:0c:
                    ee:94:fc:28:06:54:e1:06:10:d9:7a:f1:71:ca:2a:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/ae85768adef6d4dde1ca45bae430571e45d9370a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.160.0/19
                IPv6:
                  2800:ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27837

    Signature Algorithm: sha256WithRSAEncryption
         b9:bc:3e:48:df:0a:e3:a2:a2:97:b0:22:e3:e3:83:11:70:47:
         3f:81:75:89:73:69:13:24:5d:79:37:ff:0e:de:ee:22:62:02:
         d5:7e:60:61:bb:31:a7:17:1c:81:08:04:c7:b5:70:e5:d3:94:
         18:87:4e:f3:74:e5:29:d4:36:f1:17:97:ec:7e:ca:ce:cf:2c:
         89:5b:9d:b8:c0:8d:92:6e:4a:88:96:0b:3f:ea:28:a5:a5:d2:
         00:08:5a:75:ce:2b:2c:c8:c9:e3:2e:71:b7:67:d2:93:58:2a:
         3e:af:7b:87:29:6b:91:67:ff:d4:a5:a3:e4:55:4c:88:16:df:
         63:11:65:35:4e:d1:68:34:09:b2:74:ad:a2:b4:3a:0e:01:9b:
         99:50:38:79:71:77:a4:0b:bb:82:30:cd:ba:40:f8:24:fe:a8:
         eb:ef:35:82:25:fc:b1:2f:68:db:47:fe:32:b9:69:de:a7:b1:
         ba:a5:7a:49:2b:b9:79:04:df:c2:1f:0e:d7:2f:f8:c3:49:12:
         22:2f:73:6a:32:c8:b4:cb:8e:49:a3:1e:b0:53:08:97:a4:94:
         57:80:ff:d3:f4:f6:09:f9:6d:48:c6:8d:a6:e4:7e:63:10:66:
         22:a5:a0:66:a7:bf:7a:8c:1e:ab:88:7d:be:55:a1:d4:2d:bd:
         d1:62:8c:1f
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIEAPKLADANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDUyNDE0Mzc1MFoXDTI0MDgyMTE4NDk1
NlowMzExMC8GA1UEAxMoYWU4NTc2OGFkZWY2ZDRkZGUxY2E0NWJhZTQzMDU3MWU0
NWQ5MzcwYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALmdx+RCE/5D
71dfuIhFJEGvZFYk7vldUqqS7R6Edi6r45vr62kf5NSea+ebLICWLDi6eQUq05SJ
ySFill2TPBPeSYmPgQY4U5hjaNe5n5fzno/hprN8TRaT0Ainw7s7xy5XU8NCcBdb
mFtza9o+UShAtR4cXs4g1Q9kcBLWugnHRgH9Q8CT6tnlpPpSgo1fqJtmjDtkqRgZ
VAqtZEszHxVc5Q9CHZUzEI3lruA5iaUMPZqXxKQ1pZr1p2SYxnPT/kkCNuZQZAeX
gbg8Ugk+IB626dlnNZdcy8sveDaJg7paxYQUyuqY15W6LgUsCEQM7pT8KAZU4QYQ
2Xrxccoqe5MCAwEAAaOCAwgwggMEMB0GA1UdDgQWBBQZbAeH+IPfb6SPKUph0DTS
Pe+MNjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iOTc2MzgwZC0yZTkw
LTRlMjgtYjBhNi00YjNkZmUxZDhhZDUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjk3NjM4MGQtMmU5MC00
ZTI4LWIwYTYtNGIzZGZlMWQ4YWQ1L2FlODU3NjhhZGVmNmQ0ZGRlMWNhNDViYWU0
MzA1NzFlNDVkOTM3MGEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBboBoDANBAIAAjAHAwUAKAAKwDAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJsvTANBgkqhkiG9w0BAQsFAAOCAQEAubw+
SN8K46Kil7Ai4+ODEXBHP4F1iXNpEyRdeTf/Dt7uImIC1X5gYbsxpxccgQgEx7Vw
5dOUGIdO83TlKdQ28ReX7H7Kzs8siVuduMCNkm5KiJYLP+oopaXSAAhadc4rLMjJ
4y5xt2fSk1gqPq97hylrkWf/1KWj5FVMiBbfYxFlNU7RaDQJsnStorQ6DgGbmVA4
eXF3pAu7gjDNukD4JP6o6+81giX8sS9o20f+Mrlp3qexuqV6SSu5eQTfwh8O1y/4
w0kSIi9zajLItMuOSaMesFMIl6SUV4D/0/T2CfltSMaNpuR+YxBmIqWgZqe/eowe
q4h9vlWh1C290WKMHw==
-----END CERTIFICATE-----