Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31209578eceb0ae819110ed32dee1b09ec4df21.cer
File:                     d31209578eceb0ae819110ed32dee1b09ec4df21.cer (raw, json)
Hash identifier:          umwdJtkXB4Vk/FbxI/ew529oiJLLpE2zTwjvEEaPeIY=
Subject key identifier:   F0:85:3A:FA:EE:61:C7:D4:EA:74:FA:14:A3:EC:21:56:40:2A:84:D0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E07E19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0d2c4ecc-0a04-42fe-950b-56ed52501d3e/d31209578eceb0ae819110ed32dee1b09ec4df21.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0d2c4ecc-0a04-42fe-950b-56ed52501d3e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 31 Aug 2019 23:54:04 +0000
Certificate not after:    Thu 04 Apr 2024 22:16:19 +0000
Subordinate resources:    IP: 200.24.12.0/22
                          IP: 2803:b180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14712345 (0xe07e19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 31 23:54:04 2019 GMT
            Not After : Apr  4 22:16:19 2024 GMT
        Subject: CN=d31209578eceb0ae819110ed32dee1b09ec4df21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:f9:4c:b3:91:5e:61:bb:ec:ff:9d:75:6b:
                    24:c6:ad:5c:ee:d3:54:c9:9c:78:6d:4f:ab:56:e4:
                    75:61:5d:6b:62:ae:0c:5e:ee:83:92:77:d1:f5:21:
                    c4:22:fd:71:aa:f6:36:37:fa:17:3c:2c:b3:29:9f:
                    d3:e0:af:63:b9:b1:f2:22:63:a2:3d:28:56:be:aa:
                    b1:68:98:75:93:e2:ef:c9:a3:e1:58:d3:3b:3e:02:
                    b8:fd:a3:75:87:cd:c4:9b:57:f8:80:57:7a:66:86:
                    98:8a:7c:38:6e:88:dd:26:b2:1c:72:cb:c9:76:76:
                    b7:33:08:d3:46:57:d1:6b:58:79:85:31:93:2b:13:
                    4d:26:6a:ab:65:72:77:ab:9f:2b:5b:fa:a3:21:84:
                    3a:01:1d:63:11:d6:2b:97:17:53:f1:64:cc:f6:d1:
                    5f:bd:ac:3f:6b:77:19:48:52:87:a6:c1:f5:7b:30:
                    99:66:1d:57:7e:d6:28:20:24:20:03:3f:fc:93:c2:
                    23:07:32:9a:67:c2:d4:86:44:0a:78:86:29:9a:0d:
                    53:5b:66:91:16:f4:38:a3:71:c3:f1:aa:9f:55:43:
                    fb:b0:c9:a5:0e:70:cf:fa:fa:d8:bf:7e:fd:e6:45:
                    5a:f5:d1:af:ff:9e:e1:fb:53:4d:fe:af:ab:72:9f:
                    b8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:85:3A:FA:EE:61:C7:D4:EA:74:FA:14:A3:EC:21:56:40:2A:84:D0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0d2c4ecc-0a04-42fe-950b-56ed52501d3e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0d2c4ecc-0a04-42fe-950b-56ed52501d3e/d31209578eceb0ae819110ed32dee1b09ec4df21.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.12.0/22
                IPv6:
                  2803:b180::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:74:c9:2d:20:9a:e4:a1:c2:ee:60:f6:7c:26:82:ec:8e:6d:
         62:25:74:54:53:5e:64:e2:1f:7b:e0:38:91:26:27:e6:8a:2d:
         37:7b:85:1b:54:e9:d5:7c:04:72:51:4d:b4:1e:78:57:1f:b5:
         d1:de:d9:f6:7b:c1:f7:04:d3:c5:7e:59:8e:e5:d8:ef:8f:7f:
         65:49:3b:d3:96:7a:5d:0c:3a:18:b3:c3:3d:14:8f:d0:07:dd:
         8a:37:cf:57:00:60:8c:95:59:2f:c4:a3:b6:ac:46:49:7f:5c:
         cd:d4:b0:75:02:76:a6:e5:2e:8a:c8:17:cd:9a:08:8c:0c:e8:
         03:07:14:83:fb:a1:e5:bb:df:48:e2:0d:df:e8:f0:b6:74:30:
         da:1c:cf:88:14:ea:17:7e:ee:01:bb:3d:06:d3:ce:5a:5f:95:
         ed:dc:54:d3:a9:f4:4e:f0:5c:d2:57:68:69:e6:a9:bb:ed:1e:
         86:6a:99:f5:fc:50:dc:67:b0:fb:9e:56:1f:03:9a:e6:6e:20:
         fd:dc:4f:f9:8c:6c:03:fa:3f:98:49:6c:33:85:25:5b:47:46:
         01:c1:ae:a6:3d:4e:e8:c8:82:b1:9c:52:ad:d5:fc:5a:8b:3a:
         ef:fd:b4:bf:cd:38:87:98:8e:73:3f:f1:c1:1e:7d:c4:75:b3:
         b2:19:fe:f7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAOB+GTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDgzMTIzNTQwNFoXDTI0MDQwNDIyMTYx
OVowMzExMC8GA1UEAxMoZDMxMjA5NTc4ZWNlYjBhZTgxOTExMGVkMzJkZWUxYjA5
ZWM0ZGYyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMzs+UyzkV5h
u+z/nXVrJMatXO7TVMmceG1Pq1bkdWFda2KuDF7ug5J30fUhxCL9car2Njf6Fzws
symf0+CvY7mx8iJjoj0oVr6qsWiYdZPi78mj4VjTOz4CuP2jdYfNxJtX+IBXemaG
mIp8OG6I3SayHHLLyXZ2tzMI00ZX0WtYeYUxkysTTSZqq2Vyd6ufK1v6oyGEOgEd
YxHWK5cXU/FkzPbRX72sP2t3GUhSh6bB9XswmWYdV37WKCAkIAM//JPCIwcymmfC
1IZECniGKZoNU1tmkRb0OKNxw/Gqn1VD+7DJpQ5wz/r62L9+/eZFWvXRr/+e4ftT
Tf6vq3KfuDcCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBTwhTr67mHH1Op0+hSj7CFW
QCqE0DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wZDJjNGVjYy0wYTA0
LTQyZmUtOTUwYi01NmVkNTI1MDFkM2UvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMGQyYzRlY2MtMGEwNC00
MmZlLTk1MGItNTZlZDUyNTAxZDNlL2QzMTIwOTU3OGVjZWIwYWU4MTkxMTBlZDMy
ZGVlMWIwOWVjNGRmMjEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsgYDDANBAIAAjAHAwUAKAOxgDAN
BgkqhkiG9w0BAQsFAAOCAQEAb3TJLSCa5KHC7mD2fCaC7I5tYiV0VFNeZOIfe+A4
kSYn5ootN3uFG1Tp1XwEclFNtB54Vx+10d7Z9nvB9wTTxX5ZjuXY749/ZUk705Z6
XQw6GLPDPRSP0AfdijfPVwBgjJVZL8SjtqxGSX9czdSwdQJ2puUuisgXzZoIjAzo
AwcUg/uh5bvfSOIN3+jwtnQw2hzPiBTqF37uAbs9BtPOWl+V7dxU06n0TvBc0ldo
aeapu+0ehmqZ9fxQ3Gew+55WHwOa5m4g/dxP+YxsA/o/mElsM4UlW0dGAcGupj1O
6MiCsZxSrdX8Wos67/20v804h5iOcz/xwR59xHWzshn+9w==
-----END CERTIFICATE-----