Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffa70be0f2939adf371127478487e627e9dcfa1.cer
File:                     1ffa70be0f2939adf371127478487e627e9dcfa1.cer (raw, json)
Hash identifier:          6TMp+MXVPpUPF658eYaabm6eibYprrLXnKPgVg6GInQ=
Subject key identifier:   22:F8:9D:17:C5:6F:25:00:F9:75:07:61:46:9D:A3:E5:47:51:1A:DB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101A9F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:34 +0000
Certificate not after:    Fri 20 Dec 2024 14:57:39 +0000
Subordinate resources:    AS: 265658
                          IP: 45.4.97.0/24
                          IP: 2801:11:d000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16886263 (0x101a9f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:34 2017 GMT
            Not After : Dec 20 14:57:39 2024 GMT
        Subject: CN=1ffa70be0f2939adf371127478487e627e9dcfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:59:5f:ed:50:e1:47:90:1d:e6:bf:58:9c:
                    70:67:39:14:1a:1e:da:2a:92:c8:c4:02:8c:fe:20:
                    8e:6a:58:aa:15:c8:e4:87:f0:f7:a6:75:be:3f:11:
                    fe:fd:31:3d:5b:09:3d:d4:c0:6e:c5:9f:28:a0:76:
                    a4:57:39:54:3c:b4:98:f6:ff:74:81:08:1d:9b:0c:
                    53:ec:5a:6a:16:25:fd:c8:55:8a:40:a5:62:7e:c6:
                    82:5d:7d:b9:7a:f6:41:4e:9d:6f:d5:90:ef:f2:46:
                    c0:1d:db:90:e2:0b:c1:0d:98:77:5d:ca:6e:12:23:
                    63:cc:30:1e:23:70:c5:c9:4c:51:29:22:b4:33:60:
                    a4:f8:f7:45:42:a1:b1:27:ac:18:db:34:57:77:bd:
                    c6:30:06:8a:e1:9e:a8:1b:4b:c7:67:2e:40:1a:f8:
                    d8:f6:8f:80:4a:90:70:f0:0c:2e:10:05:dc:b2:2d:
                    bc:bb:c1:f8:2c:8e:9f:dc:94:f8:53:55:32:c3:b8:
                    80:71:1c:67:65:b2:8b:f4:07:6d:a4:9f:df:73:f3:
                    3f:83:dc:56:3b:0a:f9:33:72:94:29:44:ff:fc:a7:
                    09:63:a7:9f:6d:b2:01:09:61:4f:78:eb:05:db:17:
                    5d:d9:a1:7d:ed:3d:94:21:27:a3:47:e5:39:ec:0b:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F8:9D:17:C5:6F:25:00:F9:75:07:61:46:9D:A3:E5:47:51:1A:DB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.97.0/24
                IPv6:
                  2801:11:d000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265658

    Signature Algorithm: sha256WithRSAEncryption
         2f:29:76:de:60:d2:23:5e:8e:19:d5:aa:70:4a:5f:70:96:7d:
         58:73:3a:13:a8:9d:dd:61:25:50:45:6c:36:b3:57:9f:d4:d3:
         99:ae:c6:d1:40:bd:47:75:45:b8:0e:9b:83:ad:71:20:0e:45:
         91:81:0e:31:ab:8d:69:5f:ad:87:1a:6c:22:ab:ca:7d:28:13:
         d3:c4:00:9c:e5:8d:bb:0e:1a:fe:b6:c5:db:7b:b8:74:26:e3:
         32:94:34:27:93:db:d6:10:d8:f2:b3:44:4e:a5:36:cd:d9:e8:
         63:5f:07:70:bf:33:16:c1:27:8e:d5:77:12:bc:c6:15:bc:bd:
         b9:7d:9f:84:43:a1:7c:4b:5a:15:5f:5b:20:6e:9f:bb:39:fb:
         f7:69:dd:f6:b6:cf:6b:9f:89:db:e1:ac:dd:20:a9:78:33:93:
         ae:23:7d:aa:78:ee:99:30:99:f0:ac:f8:01:01:fc:88:5c:94:
         25:b4:33:81:3a:af:18:21:1c:00:6e:64:37:4d:20:39:f1:d6:
         c2:b9:f9:14:b7:a5:9f:70:47:5a:e2:c9:bd:50:b7:34:ff:ea:
         81:a5:11:74:eb:7f:f8:09:94:ea:8c:60:d6:9a:4c:43:c9:ab:
         99:30:1e:37:e3:d5:c8:13:31:45:3d:e1:94:cd:8e:62:b8:92:
         cb:a2:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----