Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffa70be0f2939adf371127478487e627e9dcfa1.cer
File:                     1ffa70be0f2939adf371127478487e627e9dcfa1.cer (raw, json)
Hash identifier:          ZlYsOobhpx49BiQ+dvoF84IECIqNQdJtDljfm0w4ohc=
Subject key identifier:   22:F8:9D:17:C5:6F:25:00:F9:75:07:61:46:9D:A3:E5:47:51:1A:DB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7A36F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:34 +0000
Certificate not after:    Wed 20 Dec 2023 14:57:39 +0000
Subordinate resources:    AS: 265658
                          IP: 45.4.97.0/24
                          IP: 2801:11:d000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14132079 (0xd7a36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:34 2017 GMT
            Not After : Dec 20 14:57:39 2023 GMT
        Subject: CN=1ffa70be0f2939adf371127478487e627e9dcfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:59:5f:ed:50:e1:47:90:1d:e6:bf:58:9c:
                    70:67:39:14:1a:1e:da:2a:92:c8:c4:02:8c:fe:20:
                    8e:6a:58:aa:15:c8:e4:87:f0:f7:a6:75:be:3f:11:
                    fe:fd:31:3d:5b:09:3d:d4:c0:6e:c5:9f:28:a0:76:
                    a4:57:39:54:3c:b4:98:f6:ff:74:81:08:1d:9b:0c:
                    53:ec:5a:6a:16:25:fd:c8:55:8a:40:a5:62:7e:c6:
                    82:5d:7d:b9:7a:f6:41:4e:9d:6f:d5:90:ef:f2:46:
                    c0:1d:db:90:e2:0b:c1:0d:98:77:5d:ca:6e:12:23:
                    63:cc:30:1e:23:70:c5:c9:4c:51:29:22:b4:33:60:
                    a4:f8:f7:45:42:a1:b1:27:ac:18:db:34:57:77:bd:
                    c6:30:06:8a:e1:9e:a8:1b:4b:c7:67:2e:40:1a:f8:
                    d8:f6:8f:80:4a:90:70:f0:0c:2e:10:05:dc:b2:2d:
                    bc:bb:c1:f8:2c:8e:9f:dc:94:f8:53:55:32:c3:b8:
                    80:71:1c:67:65:b2:8b:f4:07:6d:a4:9f:df:73:f3:
                    3f:83:dc:56:3b:0a:f9:33:72:94:29:44:ff:fc:a7:
                    09:63:a7:9f:6d:b2:01:09:61:4f:78:eb:05:db:17:
                    5d:d9:a1:7d:ed:3d:94:21:27:a3:47:e5:39:ec:0b:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F8:9D:17:C5:6F:25:00:F9:75:07:61:46:9D:A3:E5:47:51:1A:DB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.97.0/24
                IPv6:
                  2801:11:d000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265658

    Signature Algorithm: sha256WithRSAEncryption
         86:7a:33:1d:11:ea:f8:d6:41:50:24:fb:2c:03:2c:22:dd:5e:
         63:20:68:ae:38:c5:ff:db:1d:a4:d4:61:f0:d5:5e:26:e0:a5:
         65:06:8f:37:60:2b:b4:d8:82:55:a4:20:31:92:0c:5f:c0:cd:
         96:26:62:4a:26:19:07:78:89:9a:52:de:ad:8d:8d:ed:b6:e7:
         a0:98:e0:8b:40:6e:dd:95:e4:d5:8c:41:ce:be:0f:50:dd:cd:
         a2:47:03:b1:f9:b5:45:21:7b:a5:a0:e1:75:28:4e:9b:8b:ac:
         2f:62:f2:d1:bb:2f:ff:f3:f9:b5:f0:c9:86:63:35:69:18:e7:
         e6:b7:ed:c9:24:2b:96:2d:f5:d9:c9:67:e9:4b:0d:cc:63:67:
         61:eb:54:73:b5:e9:46:64:17:31:05:a2:4c:38:86:1d:1a:59:
         df:a3:75:bf:32:97:f0:51:ad:63:4a:47:50:42:fe:ef:45:52:
         bf:bf:e6:3d:56:26:d2:f9:ad:a8:fa:6e:b9:83:d2:b1:52:ed:
         2b:65:dd:c3:c1:0c:05:44:dc:1b:8d:47:b2:db:7f:42:eb:15:
         22:fb:04:29:69:0f:d7:d0:aa:db:9b:ee:30:7c:a0:0a:0a:35:
         ea:73:33:0e:d1:e4:a5:6e:6e:e6:5e:f9:a4:5e:11:ba:3c:48:
         82:c3:83:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----