Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1cb9c49815293f5f9842b7199758ddd455e663.cer
File:                     0d1cb9c49815293f5f9842b7199758ddd455e663.cer (raw, json)
Hash identifier:          UTRh6eYHlm8tR0DUZbbMGScUvh4g/oL3J/dC4paX3ek=
Subject key identifier:   43:56:E9:F6:88:6A:E3:9E:F1:8C:27:6E:3F:69:D3:78:86:12:DC:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFAFD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/61ed6fb5-758e-421d-86ad-617641df563e/0d1cb9c49815293f5f9842b7199758ddd455e663.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/61ed6fb5-758e-421d-86ad-617641df563e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Feb 2019 07:04:15 +0000
Certificate not after:    Sat 30 Nov 2024 14:27:59 +0000
Subordinate resources:    IP: 45.170.104.0/22
                          IP: 2803:9ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16756694 (0xffafd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  1 07:04:15 2019 GMT
            Not After : Nov 30 14:27:59 2024 GMT
        Subject: CN=0d1cb9c49815293f5f9842b7199758ddd455e663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:3a:69:7f:4b:1c:2d:43:db:a7:db:98:9b:
                    fe:89:9f:7a:a4:af:29:4c:06:7e:e3:60:ff:48:eb:
                    44:25:4a:09:3d:94:a0:a8:af:39:69:e3:98:65:6d:
                    64:31:c2:83:69:5f:14:a6:aa:c8:1e:23:1f:3a:28:
                    78:7d:21:48:2f:10:95:f4:72:79:d8:34:70:bf:c5:
                    e4:93:22:f3:69:e5:56:2e:d2:fb:b1:8b:98:54:94:
                    a5:29:70:b3:29:64:dc:eb:a2:5d:71:64:b8:e8:7a:
                    cf:55:d8:f7:13:32:a2:4c:a6:7f:4a:48:cb:bf:e3:
                    69:f1:ea:d8:1d:1d:ec:87:49:82:c9:aa:45:a4:40:
                    ba:ec:3f:bc:fa:6b:bf:32:e8:2b:0c:4c:ee:98:aa:
                    8f:3a:4a:7f:76:6d:1d:14:ef:6c:4a:95:84:ca:0d:
                    45:72:9e:40:92:0a:91:bf:6e:2e:6e:8f:6e:69:5f:
                    28:64:c8:ea:b5:9e:12:22:4f:7a:79:8a:11:86:2d:
                    b8:a0:8b:a9:4c:fa:9b:3f:aa:e9:f6:64:25:e4:e1:
                    d8:44:22:94:d6:7b:5e:67:e4:c2:c0:7d:93:c4:9c:
                    3d:fe:63:d7:aa:ec:2a:14:91:ec:ea:b2:87:2f:ba:
                    1b:ac:ef:1b:14:dd:e9:9b:50:85:52:d8:77:4c:f6:
                    57:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:56:E9:F6:88:6A:E3:9E:F1:8C:27:6E:3F:69:D3:78:86:12:DC:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/61ed6fb5-758e-421d-86ad-617641df563e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/61ed6fb5-758e-421d-86ad-617641df563e/0d1cb9c49815293f5f9842b7199758ddd455e663.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.104.0/22
                IPv6:
                  2803:9ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:d1:29:d2:c8:38:53:3d:d3:51:c7:de:91:11:26:3f:fd:00:
         08:9e:98:e0:75:e7:4b:81:43:d6:4e:ba:b4:c3:9b:bc:f7:0a:
         db:21:5e:22:f6:82:aa:a6:d5:ca:d6:48:e8:cf:6d:8a:04:f8:
         a6:33:81:57:d6:44:32:46:c4:a3:49:45:11:75:be:b9:47:b6:
         ee:55:6e:01:ec:c1:9d:a7:b8:2e:6a:9e:90:70:1d:6e:35:9b:
         4f:bb:57:d9:18:24:cd:25:dd:7e:db:88:9e:a4:e8:d8:60:69:
         59:bc:1e:a1:2e:c0:11:b6:80:ea:de:34:17:76:04:05:8e:fd:
         4c:06:f6:b7:a1:18:f5:a2:db:87:09:75:d8:a4:03:3b:96:59:
         8e:46:8a:26:49:2d:76:2e:4e:c1:84:4f:86:33:17:89:a7:4b:
         3a:3b:77:a5:29:8c:59:c5:af:55:84:55:9e:5b:71:8e:d8:82:
         9a:e3:98:12:fb:c8:29:cc:f6:3b:e7:84:cd:1b:c5:28:b1:2f:
         31:ac:2e:0e:38:2a:9c:e0:eb:93:d0:b6:df:e7:e0:6d:82:3b:
         82:45:b2:d0:3e:59:6c:29:40:21:5a:20:c6:ea:a6:9a:bc:4a:
         66:6f:d8:a6:9c:f2:b7:bc:84:17:40:df:e9:b9:0f:93:34:bf:
         4e:db:d7:3a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAP+v1jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDIwMTA3MDQxNVoXDTI0MTEzMDE0Mjc1
OVowMzExMC8GA1UEAxMoMGQxY2I5YzQ5ODE1MjkzZjVmOTg0MmI3MTk5NzU4ZGRk
NDU1ZTY2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKPDOml/Sxwt
Q9un25ib/omfeqSvKUwGfuNg/0jrRCVKCT2UoKivOWnjmGVtZDHCg2lfFKaqyB4j
HzooeH0hSC8QlfRyedg0cL/F5JMi82nlVi7S+7GLmFSUpSlwsylk3OuiXXFkuOh6
z1XY9xMyokymf0pIy7/jafHq2B0d7IdJgsmqRaRAuuw/vPprvzLoKwxM7piqjzpK
f3ZtHRTvbEqVhMoNRXKeQJIKkb9uLm6PbmlfKGTI6rWeEiJPenmKEYYtuKCLqUz6
mz+q6fZkJeTh2EQilNZ7XmfkwsB9k8ScPf5j16rsKhSR7Oqyhy+6G6zvGxTd6ZtQ
hVLYd0z2V40CAwEAAaOCAu0wggLpMB0GA1UdDgQWBBRDVun2iGrjnvGMJ24/adN4
hhLcmDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82MWVkNmZiNS03NThl
LTQyMWQtODZhZC02MTc2NDFkZjU2M2UvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjFlZDZmYjUtNzU4ZS00
MjFkLTg2YWQtNjE3NjQxZGY1NjNlLzBkMWNiOWM0OTgxNTI5M2Y1Zjk4NDJiNzE5
OTc1OGRkZDQ1NWU2NjMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2qaDANBAIAAjAHAwUAKAOboDAN
BgkqhkiG9w0BAQsFAAOCAQEArtEp0sg4Uz3TUcfekREmP/0ACJ6Y4HXnS4FD1k66
tMObvPcK2yFeIvaCqqbVytZI6M9tigT4pjOBV9ZEMkbEo0lFEXW+uUe27lVuAezB
nae4LmqekHAdbjWbT7tX2RgkzSXdftuInqTo2GBpWbweoS7AEbaA6t40F3YEBY79
TAb2t6EY9aLbhwl12KQDO5ZZjkaKJkktdi5OwYRPhjMXiadLOjt3pSmMWcWvVYRV
nltxjtiCmuOYEvvIKcz2O+eEzRvFKLEvMawuDjgqnODrk9C23+fgbYI7gkWy0D5Z
bClAIVogxuqmmrxKZm/Yppzyt7yEF0Df6bkPkzS/TtvXOg==
-----END CERTIFICATE-----