Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.cer
File:                     1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.cer (raw, json)
Hash identifier:          dxwLkn0dvphvo+/NRcOz22PDJ/wuiMqo6nL+VUD5R0c=
Subject key identifier:   7B:3D:40:27:F3:FE:53:8D:78:88:41:31:A1:DE:5D:90:05:07:9C:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9FAAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:52 +0000
Certificate not after:    Sat 19 Oct 2024 16:53:28 +0000
Subordinate resources:    AS: 263199
                          IP: 179.0.146.0/24
                          IP: 2801:1a:c000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16382635 (0xf9faab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:52 2017 GMT
            Not After : Oct 19 16:53:28 2024 GMT
        Subject: CN=1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:33:ab:57:98:be:7a:32:3d:d4:22:77:03:
                    21:02:6f:f3:03:9b:8d:11:80:87:af:c2:d5:99:db:
                    89:c3:d2:e6:f3:59:23:1f:fb:d3:7a:92:6a:76:17:
                    5a:d6:87:c7:90:db:85:ad:ce:a1:b4:ff:0f:d7:b5:
                    3c:70:8a:33:58:bb:df:06:56:34:d4:fe:f8:df:49:
                    27:17:42:63:66:28:49:a6:8f:a9:39:19:34:e9:fb:
                    00:64:ec:b6:07:80:9f:c6:2c:ed:03:f8:45:5e:2e:
                    c7:a6:a2:d1:d2:e6:1c:fc:83:f6:b2:74:8c:97:5e:
                    19:49:49:77:9d:e6:36:6b:bb:71:9d:63:74:5b:22:
                    6d:8f:68:95:27:86:3e:dd:6d:3f:0b:43:91:2e:3e:
                    69:c3:e0:00:23:41:cf:be:ea:ae:e9:fb:da:d6:6a:
                    2a:47:4f:11:c4:79:e5:ff:42:18:fd:6a:da:7f:93:
                    77:18:74:ec:ca:0f:9c:d0:df:58:61:1d:2a:b7:bc:
                    42:8e:4a:c8:c8:eb:ce:b2:10:c2:17:4e:2a:6a:b7:
                    5c:e6:28:c9:51:77:85:ab:ad:5b:79:28:07:11:bb:
                    42:e9:07:4e:d0:d3:25:c6:3d:37:23:97:a8:a2:dd:
                    9e:5d:84:bf:de:10:55:0c:86:dd:79:a8:34:33:ad:
                    f2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3D:40:27:F3:FE:53:8D:78:88:41:31:A1:DE:5D:90:05:07:9C:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.146.0/24
                IPv6:
                  2801:1a:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263199

    Signature Algorithm: sha256WithRSAEncryption
         9f:80:f7:ed:c1:c9:41:32:53:19:f5:09:af:f1:f1:97:8a:e5:
         0c:89:04:3d:2d:1a:d9:3c:45:52:77:86:11:65:7b:ba:32:f7:
         d0:c8:8c:d9:f7:40:6d:c4:00:03:fb:fb:72:79:66:42:99:d8:
         fb:a3:4d:af:04:39:22:aa:70:9f:57:8b:89:2e:24:1d:4a:f7:
         1f:6c:e8:34:6f:13:56:33:81:6c:11:28:b0:2f:1f:bc:82:03:
         3c:4c:4b:2c:f5:53:30:25:fd:8a:77:c6:9c:38:30:04:5b:15:
         56:f4:d6:6d:72:c5:12:77:33:3a:78:e6:c4:3d:2d:5f:42:dc:
         43:b8:56:62:44:fe:d6:5d:55:f7:18:35:58:f6:ca:b4:00:43:
         c1:19:62:47:70:0f:d7:f3:46:ff:88:b6:b8:40:a4:66:c1:fc:
         cc:09:c5:c8:b4:88:45:99:6e:13:d9:51:7c:39:51:d7:3f:ca:
         9e:84:c7:47:b9:07:6d:1d:71:dd:0b:41:2f:13:b0:39:e0:1c:
         ac:ba:45:92:7c:be:d8:d6:85:42:bc:e3:93:b8:a3:74:5a:1f:
         55:3a:da:d4:a3:bb:c1:6e:e2:c6:76:9b:f4:49:14:8b:01:32:
         8f:59:9c:86:6a:ec:35:fb:fb:cc:7a:69:7a:7e:ec:37:26:8b:
         0a:bb:e0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----