Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de0d914e3acec8ecbafe212675f0227f286f21e8.cer
File:                     de0d914e3acec8ecbafe212675f0227f286f21e8.cer (raw, json)
Hash identifier:          X1sA72nfk8vrfiJq1tnpEN2d4ikO+xiD4xyUVbiZp24=
Subject key identifier:   E5:FF:64:CE:04:BD:9D:11:03:FA:72:6B:C2:CE:F0:93:C2:73:07:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8F9A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/de0d914e3acec8ecbafe212675f0227f286f21e8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 01 May 2019 21:05:51 +0000
Certificate not after:    Sat 06 Jan 2024 20:23:10 +0000
Subordinate resources:    AS: 267787
                          IP: 45.171.160.0/22
                          IP: 2803:4fa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14219681 (0xd8f9a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  1 21:05:51 2019 GMT
            Not After : Jan  6 20:23:10 2024 GMT
        Subject: CN=de0d914e3acec8ecbafe212675f0227f286f21e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:83:49:c6:f2:99:fe:4e:59:ad:6c:78:34:
                    80:1a:38:9c:d9:69:a2:5b:8f:42:d8:a0:af:03:79:
                    50:92:84:30:77:58:1f:2e:b7:d5:1f:b0:b5:92:af:
                    90:ec:f6:37:8b:25:a7:f8:ef:b6:a7:4c:13:a3:63:
                    db:d9:aa:47:f4:64:05:67:d1:db:3f:1d:ea:94:16:
                    e6:90:24:c1:a3:08:66:2c:d4:17:9d:a5:33:fd:01:
                    2c:2a:ef:50:e9:6c:c0:4f:a7:ca:ae:68:1f:8a:f8:
                    64:12:9c:3d:7a:98:80:88:45:0e:29:f6:48:dc:f5:
                    63:ad:f6:83:4d:ea:55:da:0d:c5:36:0f:3c:78:a0:
                    c0:80:e6:70:0d:8c:80:6a:f1:66:0c:c3:92:a3:2f:
                    e8:b8:89:b6:a6:07:d6:cd:11:84:1e:61:75:47:ea:
                    d5:7f:7f:17:77:b1:93:49:1f:ab:2f:cb:f3:60:ef:
                    3e:85:90:1e:82:99:88:7d:bc:66:70:ae:4b:74:ac:
                    b8:41:e7:b1:61:26:e8:2d:7a:92:38:67:bf:c5:ea:
                    9c:24:c6:01:d1:fe:91:36:a5:9f:b8:dd:97:7a:9f:
                    40:3a:76:0d:06:7a:4e:f4:40:f7:23:02:c0:39:7d:
                    4d:74:5f:87:21:f5:2b:63:a7:d6:79:b4:74:79:10:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FF:64:CE:04:BD:9D:11:03:FA:72:6B:C2:CE:F0:93:C2:73:07:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/de0d914e3acec8ecbafe212675f0227f286f21e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.160.0/22
                IPv6:
                  2803:4fa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267787

    Signature Algorithm: sha256WithRSAEncryption
         46:8d:b0:d4:5c:f1:1f:c0:fa:af:2f:62:c2:02:71:4f:84:84:
         2d:ae:9b:2b:8c:b4:73:46:63:7a:12:0d:de:6b:44:67:77:13:
         a6:3e:4c:8e:66:b4:fd:8f:bd:50:39:40:97:2e:37:c2:0e:50:
         82:61:2d:b0:75:dc:81:9e:b7:51:be:31:18:54:6e:83:bf:3f:
         39:53:84:42:b7:b7:79:ff:45:9b:30:d7:5c:99:13:14:37:87:
         5f:20:1b:f0:13:13:e0:11:4c:c6:da:5b:06:26:7b:b1:0e:e6:
         86:5d:81:aa:6f:f0:d0:1c:b7:0f:ab:22:7b:d0:e8:6a:5c:3b:
         47:74:c7:84:73:8b:5c:e8:50:f7:2a:1d:29:fe:b3:53:2c:0a:
         ff:e2:3e:79:2f:e2:9e:5e:fa:8b:40:ba:a2:87:a9:09:5d:13:
         81:f5:2b:98:f0:90:13:4c:aa:01:68:96:ab:c5:dd:b8:7f:21:
         f1:8a:a8:7c:3a:a6:22:81:51:06:8b:a1:9d:2e:b4:25:54:66:
         db:8f:62:fe:56:33:f2:8d:eb:fc:c7:1c:e3:f6:62:ba:81:ad:
         96:2c:59:81:42:dd:65:58:76:63:96:fa:fd:3d:ef:87:78:76:
         83:28:92:be:a3:08:38:d9:19:f0:fe:dd:c6:53:c5:ab:3c:dd:
         20:10:43:9e
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEANj5oTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDUwMTIxMDU1MVoXDTI0MDEwNjIwMjMx
MFowMzExMC8GA1UEAxMoZGUwZDkxNGUzYWNlYzhlY2JhZmUyMTI2NzVmMDIyN2Yy
ODZmMjFlODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK28g0nG8pn+
TlmtbHg0gBo4nNlpoluPQtigrwN5UJKEMHdYHy631R+wtZKvkOz2N4slp/jvtqdM
E6Nj29mqR/RkBWfR2z8d6pQW5pAkwaMIZizUF52lM/0BLCrvUOlswE+nyq5oH4r4
ZBKcPXqYgIhFDin2SNz1Y632g03qVdoNxTYPPHigwIDmcA2MgGrxZgzDkqMv6LiJ
tqYH1s0RhB5hdUfq1X9/F3exk0kfqy/L82DvPoWQHoKZiH28ZnCuS3SsuEHnsWEm
6C16kjhnv8XqnCTGAdH+kTaln7jdl3qfQDp2DQZ6TvRA9yMCwDl9TXRfhyH1K2On
1nm0dHkQM2sCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTl/2TOBL2dEQP6cmvCzvCT
wnMHSDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lNTMzMGYxNC0wZTFm
LTQxMzQtOTg2OS00YmU5MmRlOGUwNWUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTUzMzBmMTQtMGUxZi00
MTM0LTk4NjktNGJlOTJkZThlMDVlL2RlMGQ5MTRlM2FjZWM4ZWNiYWZlMjEyNjc1
ZjAyMjdmMjg2ZjIxZTgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2roDANBAIAAjAHAwUAKANPoDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFgswDQYJKoZIhvcNAQELBQADggEBAEaN
sNRc8R/A+q8vYsICcU+EhC2umyuMtHNGY3oSDd5rRGd3E6Y+TI5mtP2PvVA5QJcu
N8IOUIJhLbB13IGet1G+MRhUboO/PzlThEK3t3n/RZsw11yZExQ3h18gG/ATE+AR
TMbaWwYme7EO5oZdgapv8NActw+rInvQ6GpcO0d0x4Rzi1zoUPcqHSn+s1MsCv/i
Pnkv4p5e+otAuqKHqQldE4H1K5jwkBNMqgFolqvF3bh/IfGKqHw6piKBUQaLoZ0u
tCVUZtuPYv5WM/KN6/zHHOP2YrqBrZYsWYFC3WVYdmOW+v0974d4doMokr6jCDjZ
GfD+3cZTxas83SAQQ54=
-----END CERTIFICATE-----