Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f59034a47bc7b32a68881b8889be41399703be74.cer
File:                     f59034a47bc7b32a68881b8889be41399703be74.cer (raw, json)
Hash identifier:          nUC8w/EcPgq2C6B7QIKJ9724XcRIC5E3xWACbMYZ8FQ=
Subject key identifier:   28:AE:CB:EB:18:78:8A:F5:68:2B:5C:0B:4E:37:C4:25:52:5D:6E:AC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E226A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6609e06b-e5d7-48c9-b0a0-0013e99ce9d7/f59034a47bc7b32a68881b8889be41399703be74.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6609e06b-e5d7-48c9-b0a0-0013e99ce9d7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Jun 2019 00:21:45 +0000
Certificate not after:    Sun 21 Apr 2024 19:06:09 +0000
Subordinate resources:    AS: 265749
                          IP: 128.201.236.0/22
                          IP: 2803:cbc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14821029 (0xe226a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 19 00:21:45 2019 GMT
            Not After : Apr 21 19:06:09 2024 GMT
        Subject: CN=f59034a47bc7b32a68881b8889be41399703be74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:53:6d:03:b8:cc:73:9c:1b:4b:97:ad:2e:c8:
                    fd:33:8d:88:0f:7e:e5:11:c5:3a:bc:ec:84:36:8e:
                    38:d0:ff:3c:30:bc:c4:31:0e:e1:c5:b7:d6:f7:c7:
                    e6:00:b6:43:bc:9d:5c:b4:74:24:69:76:57:75:a6:
                    e5:da:c4:54:cd:9c:c1:4c:64:cd:ed:2a:51:8a:f9:
                    cc:08:ca:7d:b9:82:d2:cf:75:44:d4:50:8b:a6:51:
                    ec:ec:68:61:41:e9:13:9b:15:86:23:ca:90:25:ee:
                    4b:f9:1d:5c:ff:56:62:68:97:58:7d:2d:76:3c:f9:
                    7e:f3:b5:f7:9d:8f:39:6f:f9:7d:2e:b3:cd:f2:ac:
                    7f:92:4d:82:5d:ef:39:33:32:b0:18:ab:ac:41:2f:
                    c6:d5:c1:e1:9e:06:e0:9b:1e:f9:ab:ab:8d:12:23:
                    3c:ec:8a:88:42:8d:ee:88:fa:f3:67:0a:29:0a:47:
                    61:f1:ea:46:69:c2:ca:4b:2b:c0:e9:22:c4:0f:af:
                    c9:13:dc:4f:b2:9b:ed:ab:5c:f2:fd:4c:a8:da:9c:
                    49:d7:22:c2:cd:10:1e:68:40:d2:e7:87:89:e8:da:
                    2f:83:3a:00:35:fc:35:04:09:2b:1c:f4:93:d7:fa:
                    ca:1a:8a:4f:e5:6f:7f:51:70:c9:08:3b:e7:96:d2:
                    4e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AE:CB:EB:18:78:8A:F5:68:2B:5C:0B:4E:37:C4:25:52:5D:6E:AC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6609e06b-e5d7-48c9-b0a0-0013e99ce9d7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6609e06b-e5d7-48c9-b0a0-0013e99ce9d7/f59034a47bc7b32a68881b8889be41399703be74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.236.0/22
                IPv6:
                  2803:cbc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265749

    Signature Algorithm: sha256WithRSAEncryption
         86:38:82:6f:96:5a:a5:ad:17:f2:54:f1:3e:5a:73:8a:71:9a:
         54:31:ec:43:4f:42:58:93:29:c1:38:3c:24:a4:54:f9:21:a0:
         78:72:a0:42:1c:3f:36:ce:f6:4a:50:d5:94:07:eb:ae:bd:49:
         38:e1:94:2c:8c:76:aa:d1:4c:a9:f8:c3:82:da:97:f1:65:17:
         41:b3:1e:3e:38:8c:ae:69:e0:cb:83:5b:b3:dc:f2:7e:12:b1:
         96:cd:3b:e6:3c:93:9c:cd:65:77:86:54:0a:ce:81:77:ca:59:
         2f:2f:b6:da:09:e1:9a:da:d2:9d:a6:bb:68:90:a1:82:ed:64:
         af:d1:74:69:dc:d6:94:22:26:a6:15:b5:38:4d:c7:e6:72:44:
         c2:fe:fc:ce:d6:19:7e:8f:a2:61:73:81:87:03:22:77:17:a7:
         58:ed:c6:bc:3a:5c:aa:28:03:63:6f:ee:35:3c:bf:81:c2:c6:
         5a:72:23:f2:db:16:8a:41:c4:b4:d2:58:cc:a6:63:2a:a1:5f:
         58:b2:80:a1:92:cb:4d:d9:a3:b9:67:d0:8a:0e:24:02:7b:0f:
         cf:06:04:88:96:77:65:90:f0:4c:32:3d:fe:0b:8b:e5:9a:8a:
         79:2a:77:52:e4:27:9d:3e:6f:de:3a:17:78:19:71:f4:58:6a:
         48:90:96:90
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOImpTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDYxOTAwMjE0NVoXDTI0MDQyMTE5MDYw
OVowMzExMC8GA1UEAxMoZjU5MDM0YTQ3YmM3YjMyYTY4ODgxYjg4ODliZTQxMzk5
NzAzYmU3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM5TbQO4zHOc
G0uXrS7I/TONiA9+5RHFOrzshDaOOND/PDC8xDEO4cW31vfH5gC2Q7ydXLR0JGl2
V3Wm5drEVM2cwUxkze0qUYr5zAjKfbmC0s91RNRQi6ZR7OxoYUHpE5sVhiPKkCXu
S/kdXP9WYmiXWH0tdjz5fvO1952POW/5fS6zzfKsf5JNgl3vOTMysBirrEEvxtXB
4Z4G4Jse+aurjRIjPOyKiEKN7oj682cKKQpHYfHqRmnCyksrwOkixA+vyRPcT7Kb
7atc8v1MqNqcSdciws0QHmhA0ueHiejaL4M6ADX8NQQJKxz0k9f6yhqKT+Vvf1Fw
yQg755bSTgcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQorsvrGHiK9WgrXAtON8Ql
Ul1urDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82NjA5ZTA2Yi1lNWQ3
LTQ4YzktYjBhMC0wMDEzZTk5Y2U5ZDcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjYwOWUwNmItZTVkNy00
OGM5LWIwYTAtMDAxM2U5OWNlOWQ3L2Y1OTAzNGE0N2JjN2IzMmE2ODg4MWI4ODg5
YmU0MTM5OTcwM2JlNzQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoDJ7DANBAIAAjAHAwUAKAPLwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDhUwDQYJKoZIhvcNAQELBQADggEBAIY4
gm+WWqWtF/JU8T5ac4pxmlQx7ENPQliTKcE4PCSkVPkhoHhyoEIcPzbO9kpQ1ZQH
6669STjhlCyMdqrRTKn4w4Lal/FlF0GzHj44jK5p4MuDW7Pc8n4SsZbNO+Y8k5zN
ZXeGVArOgXfKWS8vttoJ4Zra0p2mu2iQoYLtZK/RdGnc1pQiJqYVtThNx+ZyRML+
/M7WGX6PomFzgYcDIncXp1jtxrw6XKooA2Nv7jU8v4HCxlpyI/LbFopBxLTSWMym
YyqhX1iygKGSy03Zo7ln0IoOJAJ7D88GBIiWd2WQ8EwyPf4Li+Wainkqd1LkJ50+
b946F3gZcfRYakiQlpA=
-----END CERTIFICATE-----