Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3ee958557d9fde5dde89b420e2e9fd8b429156e.cer
File:                     e3ee958557d9fde5dde89b420e2e9fd8b429156e.cer (raw, json)
Hash identifier:          /m8Pdfy74HCPzBtMP1/ThetJSehGF1TtMJFAOnz0/xA=
Subject key identifier:   B3:DE:AC:50:CD:BB:0A:A5:54:35:16:4D:90:F7:9C:8D:2B:28:EF:B5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E20EA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6773f2c7-a58e-4c5a-847a-f78cf4ace1f9/e3ee958557d9fde5dde89b420e2e9fd8b429156e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6773f2c7-a58e-4c5a-847a-f78cf4ace1f9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 22 Mar 2019 18:34:28 +0000
Certificate not after:    Sat 20 Apr 2024 22:30:21 +0000
Subordinate resources:    AS: 267853
                          IP: 190.211.176.0/20
                          IP: 2803:3700::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14814884 (0xe20ea4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 22 18:34:28 2019 GMT
            Not After : Apr 20 22:30:21 2024 GMT
        Subject: CN=e3ee958557d9fde5dde89b420e2e9fd8b429156e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:6a:1f:f4:9c:61:71:3d:60:97:f7:94:3d:
                    1b:c9:f6:23:ac:1d:2d:14:3e:7b:ed:14:09:84:09:
                    56:d2:a8:e5:cc:f8:b9:33:5e:ca:5c:0e:90:9c:5f:
                    ac:57:fd:48:7b:f1:30:51:62:a7:8a:13:dc:86:8a:
                    d7:c3:82:f4:f7:da:b4:89:db:ef:c4:a9:5d:cc:f4:
                    88:85:00:f1:12:42:b9:61:1c:7c:fd:e3:eb:01:74:
                    07:c5:12:d0:d2:1a:58:d1:1b:3b:7a:86:fe:31:33:
                    65:fe:08:01:fa:83:ef:39:af:5a:de:76:21:c3:91:
                    cd:b7:01:97:70:e5:91:c8:7a:17:12:84:9a:da:d7:
                    d1:44:4f:27:c5:64:f0:5a:7f:45:cf:c0:df:7c:9f:
                    27:15:82:a7:d0:8d:6b:5a:ff:6d:59:54:23:71:ab:
                    a4:7a:78:3f:27:da:b2:1c:3c:71:e4:fd:c8:ed:2c:
                    31:61:8b:64:6b:e9:37:3f:7b:89:a7:54:ce:8a:26:
                    00:01:26:2b:41:3e:63:f5:a3:05:22:fa:e1:36:ce:
                    2e:9e:94:8f:75:13:e6:8c:42:8a:f4:3f:cd:7b:57:
                    fe:38:ef:2e:74:9d:f6:48:b9:dc:74:4d:3e:3a:8f:
                    15:ca:b4:57:99:ff:15:0d:c5:1b:ef:6a:ac:36:56:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DE:AC:50:CD:BB:0A:A5:54:35:16:4D:90:F7:9C:8D:2B:28:EF:B5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6773f2c7-a58e-4c5a-847a-f78cf4ace1f9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6773f2c7-a58e-4c5a-847a-f78cf4ace1f9/e3ee958557d9fde5dde89b420e2e9fd8b429156e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.176.0/20
                IPv6:
                  2803:3700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267853

    Signature Algorithm: sha256WithRSAEncryption
         9d:9b:cb:ed:51:08:29:6a:27:cf:b2:a8:c3:e8:fb:d4:a2:57:
         6f:d5:9f:ba:7d:0c:d0:16:12:80:32:e3:ce:06:cd:66:81:3c:
         07:78:10:5e:e7:30:c7:34:b4:a7:f1:a7:3a:d3:ec:9a:e5:36:
         b7:d6:26:62:0d:8a:70:5e:c3:80:f1:89:e3:8c:98:48:ab:68:
         a2:93:dd:21:78:67:12:8f:4f:e8:53:2b:4b:ff:a1:3b:2f:63:
         3a:6f:c2:fd:a7:39:52:b9:a6:bc:9e:ea:43:5c:15:8f:d4:57:
         7c:4c:06:e6:9e:33:45:ac:a5:09:39:fd:9a:31:e0:27:3e:34:
         94:f7:09:e7:9a:25:75:55:4d:57:58:57:ef:25:59:7f:6c:d7:
         20:27:a4:8c:61:e7:e2:12:1d:a9:e6:d5:80:50:69:41:09:28:
         85:f0:85:51:a0:65:6a:18:40:10:0b:c3:83:2f:bf:45:4c:a1:
         d5:39:e9:c8:13:d6:36:97:82:e5:ba:0c:bb:cb:e2:df:a0:f1:
         32:3c:8d:18:71:21:a4:e1:6e:1f:62:e8:61:bd:e8:14:e3:ba:
         f4:aa:0a:fe:63:ac:32:02:80:a4:4f:5e:72:65:be:34:22:75:
         9d:7f:c8:64:ca:c9:78:7f:06:b4:11:aa:8a:01:d4:81:3a:72:
         ad:7f:83:a4
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOIOpDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDMyMjE4MzQyOFoXDTI0MDQyMDIyMzAy
MVowMzExMC8GA1UEAxMoZTNlZTk1ODU1N2Q5ZmRlNWRkZTg5YjQyMGUyZTlmZDhi
NDI5MTU2ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJYVah/0nGFx
PWCX95Q9G8n2I6wdLRQ+e+0UCYQJVtKo5cz4uTNeylwOkJxfrFf9SHvxMFFip4oT
3IaK18OC9PfatInb78SpXcz0iIUA8RJCuWEcfP3j6wF0B8US0NIaWNEbO3qG/jEz
Zf4IAfqD7zmvWt52IcORzbcBl3Dlkch6FxKEmtrX0URPJ8Vk8Fp/Rc/A33yfJxWC
p9CNa1r/bVlUI3GrpHp4Pyfashw8ceT9yO0sMWGLZGvpNz97iadUzoomAAEmK0E+
Y/WjBSL64TbOLp6Uj3UT5oxCivQ/zXtX/jjvLnSd9ki53HRNPjqPFcq0V5n/FQ3F
G+9qrDZWnsMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSz3qxQzbsKpVQ1Fk2Q95yN
KyjvtTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82NzczZjJjNy1hNThl
LTRjNWEtODQ3YS1mNzhjZjRhY2UxZjkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjc3M2YyYzctYTU4ZS00
YzVhLTg0N2EtZjc4Y2Y0YWNlMWY5L2UzZWU5NTg1NTdkOWZkZTVkZGU4OWI0MjBl
MmU5ZmQ4YjQyOTE1NmUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBL7TsDANBAIAAjAHAwUAKAM3ADAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFk0wDQYJKoZIhvcNAQELBQADggEBAJ2b
y+1RCClqJ8+yqMPo+9SiV2/Vn7p9DNAWEoAy484GzWaBPAd4EF7nMMc0tKfxpzrT
7JrlNrfWJmINinBew4DxieOMmEiraKKT3SF4ZxKPT+hTK0v/oTsvYzpvwv2nOVK5
prye6kNcFY/UV3xMBuaeM0WspQk5/Zox4Cc+NJT3CeeaJXVVTVdYV+8lWX9s1yAn
pIxh5+ISHanm1YBQaUEJKIXwhVGgZWoYQBALw4Mvv0VModU56cgT1jaXguW6DLvL
4t+g8TI8jRhxIaThbh9i6GG96BTjuvSqCv5jrDICgKRPXnJlvjQidZ1/yGTKyXh/
BrQRqooB1IE6cq1/g6Q=
-----END CERTIFICATE-----