Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e0570a0eb0a8dba45212b35153e2892214274417.cer
File:                     e0570a0eb0a8dba45212b35153e2892214274417.cer (raw, json)
Hash identifier:          mLdzGmtAlfVzwIC8wt728QcOsabfEmx/sx9grcshhxo=
Subject key identifier:   C3:12:E4:39:E2:A3:64:74:97:AF:33:7C:A7:F7:D9:54:6B:12:3B:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0BAAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/e0570a0eb0a8dba45212b35153e2892214274417.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 23 Jul 2018 15:08:38 +0000
Certificate not after:    Mon 05 Aug 2024 06:00:00 +0000
Subordinate resources:    IP: 192.188.196.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15776428 (0xf0baac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 23 15:08:38 2018 GMT
            Not After : Aug  5 06:00:00 2024 GMT
        Subject: CN=e0570a0eb0a8dba45212b35153e2892214274417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:5e:5c:e3:f0:39:63:ef:0a:7f:97:79:9e:
                    8f:b7:1b:45:57:43:a8:30:a7:72:d0:be:e9:53:5b:
                    88:bd:9d:0c:d3:35:e8:99:25:39:e6:7c:e0:5a:d0:
                    4d:0c:7b:4d:32:ef:cc:1f:67:4e:9b:c1:cf:fe:08:
                    1e:14:89:47:12:34:e8:fb:14:a7:bc:06:27:c5:00:
                    28:c5:02:6a:bb:11:11:8d:32:0b:9b:73:b9:c8:97:
                    76:24:84:85:19:48:f4:94:75:87:fe:46:cd:60:b2:
                    f8:70:95:b6:cc:3e:be:5d:55:13:38:1d:a7:19:35:
                    8a:b8:87:24:cc:3a:31:7b:fb:44:50:1a:87:5c:19:
                    6f:c2:fb:c0:49:d3:f6:6d:71:95:2d:65:da:5a:e2:
                    b0:b2:e1:ac:14:86:04:18:af:0c:5a:e8:a9:b8:cc:
                    ec:72:d6:ba:01:b2:0c:82:64:9b:65:61:a9:b9:1f:
                    73:30:3f:31:e9:fc:21:a8:70:d8:dd:a7:17:3c:93:
                    0a:92:72:e6:8b:04:6a:19:fb:b8:29:6b:15:32:0b:
                    3a:84:7b:bd:3a:e3:94:90:88:6c:15:66:43:4e:4a:
                    e7:6f:95:e4:3e:38:f9:d0:21:ad:62:25:cc:06:72:
                    96:19:67:4d:88:dd:71:b9:7d:a6:42:0b:b7:48:39:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:12:E4:39:E2:A3:64:74:97:AF:33:7C:A7:F7:D9:54:6B:12:3B:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/e0570a0eb0a8dba45212b35153e2892214274417.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:eb:cc:38:19:6b:a1:af:7d:13:c2:3b:1a:49:e1:f4:0e:96:
         fb:ff:d9:94:ed:90:1d:e9:5d:b4:f3:d2:8a:85:63:4c:7a:37:
         04:ec:93:56:01:7d:f9:d3:35:c5:40:2a:60:5d:16:ce:af:25:
         a7:51:60:6d:3f:83:96:0e:ed:10:3f:58:78:1c:aa:64:66:bd:
         12:ce:52:03:6d:86:02:dc:82:85:e7:39:60:a8:70:68:53:a2:
         18:dd:69:16:7a:51:17:20:f2:ff:f9:2b:30:d1:68:8c:10:8c:
         8c:2a:b9:6c:cb:2a:86:2c:c8:b7:10:0d:b5:47:63:19:6d:48:
         cf:90:cf:e5:77:90:ed:e3:99:58:47:41:fd:b9:82:46:80:a8:
         e5:aa:2f:cf:a4:12:47:f5:0e:8b:66:36:c8:70:f3:a2:bf:da:
         7a:80:45:01:c1:28:4b:df:9a:a2:dc:4d:7c:77:6f:42:b7:08:
         20:21:1a:03:ad:b0:59:f1:95:01:a2:0f:fa:68:25:61:85:84:
         0b:f7:93:de:d9:4b:a1:91:48:5e:26:98:fb:e4:ca:6a:5e:83:
         44:23:72:be:bc:0d:5b:68:67:74:c2:f0:a1:49:3b:05:d4:23:
         34:95:70:60:4c:9e:72:ff:e7:ad:62:6a:5a:69:74:e2:4f:7b:
         47:0a:0f:14
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAPC6rDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDcyMzE1MDgzOFoXDTI0MDgwNTA2MDAw
MFowMzExMC8GA1UEAxMoZTA1NzBhMGViMGE4ZGJhNDUyMTJiMzUxNTNlMjg5MjIx
NDI3NDQxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJuXXlzj8Dlj
7wp/l3mej7cbRVdDqDCnctC+6VNbiL2dDNM16JklOeZ84FrQTQx7TTLvzB9nTpvB
z/4IHhSJRxI06PsUp7wGJ8UAKMUCarsREY0yC5tzuciXdiSEhRlI9JR1h/5GzWCy
+HCVtsw+vl1VEzgdpxk1iriHJMw6MXv7RFAah1wZb8L7wEnT9m1xlS1l2lrisLLh
rBSGBBivDFroqbjM7HLWugGyDIJkm2VhqbkfczA/Men8Iahw2N2nFzyTCpJy5osE
ahn7uClrFTILOoR7vTrjlJCIbBVmQ05K52+V5D44+dAhrWIlzAZylhlnTYjdcbl9
pkILt0g5FV0CAwEAAaOCAt4wggLaMB0GA1UdDgQWBBTDEuQ54qNkdJevM3yn99lU
axI7EjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83MDA3MzYzYS0wZjM2
LTRlMzAtYWY4OC0zM2RhZWRjMjM1YTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzAwNzM2M2EtMGYzNi00
ZTMwLWFmODgtMzNkYWVkYzIzNWExL2UwNTcwYTBlYjBhOGRiYTQ1MjEyYjM1MTUz
ZTI4OTIyMTQyNzQ0MTcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMC8xDANBgkqhkiG9w0BAQsFAAOC
AQEAD+vMOBlroa99E8I7Gknh9A6W+//ZlO2QHeldtPPSioVjTHo3BOyTVgF9+dM1
xUAqYF0Wzq8lp1FgbT+Dlg7tED9YeByqZGa9Es5SA22GAtyChec5YKhwaFOiGN1p
FnpRFyDy//krMNFojBCMjCq5bMsqhizItxANtUdjGW1Iz5DP5XeQ7eOZWEdB/bmC
RoCo5aovz6QSR/UOi2Y2yHDzor/aeoBFAcEoS9+aotxNfHdvQrcIICEaA62wWfGV
AaIP+mglYYWEC/eT3tlLoZFIXiaY++TKal6DRCNyvrwNW2hndMLwoUk7BdQjNJVw
YEyecv/nrWJqWml04k97RwoPFA==
-----END CERTIFICATE-----