Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer
File:                     1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer (raw, json)
Hash identifier:          Kakfc5t8uYVoOXV6tyBtE/z6KY3JRMPgWop8eGoqW/M=
Subject key identifier:   A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6EC26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:02 +0000
Certificate not after:    Sat 25 May 2024 06:00:00 +0000
Subordinate resources:    AS: 61462
                          AS: 262242
                          IP: 186.179.64.0/20
                          IP: 200.229.144.0/22
                          IP: 2803:4580::/32
                          IP: 2803:7a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15133734 (0xe6ec26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:02 2017 GMT
            Not After : May 25 06:00:00 2024 GMT
        Subject: CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e0:20:50:de:f9:67:2a:40:fb:09:80:48:01:
                    bb:e7:39:fc:b1:e7:b6:4a:09:04:64:e3:f0:d1:73:
                    14:d9:4a:93:a6:7d:7c:23:2f:81:de:0f:27:9a:a8:
                    95:61:2c:e8:e2:4c:3b:0b:f7:d1:d7:95:72:72:6a:
                    77:81:6f:c6:61:8b:ae:cc:f9:d1:a7:c1:af:50:a3:
                    27:dd:f8:66:00:8c:7f:34:78:b4:bb:2a:0e:ff:82:
                    36:aa:de:5b:13:c5:0f:dd:3b:7b:06:d9:ed:48:53:
                    fd:07:eb:a4:86:ee:98:a0:25:99:80:df:64:ba:15:
                    91:9d:81:1c:5b:76:50:3b:88:4e:3b:af:66:ef:70:
                    5d:50:f8:bf:b0:46:8c:6a:47:f9:54:af:b0:53:fc:
                    59:46:d6:d3:10:3e:98:5c:e8:50:ed:b0:b2:ab:be:
                    42:19:ed:91:e5:a0:77:68:be:cf:27:0a:a1:94:7e:
                    20:14:52:f0:41:11:dc:6c:41:f7:2c:da:3e:81:92:
                    ce:96:cc:35:45:fe:3d:00:97:5d:0e:9b:76:91:65:
                    c3:53:41:4d:b6:44:14:dc:5a:5f:8e:d8:11:6d:35:
                    f5:66:5d:09:ab:2b:88:2d:50:88:c6:a3:bc:98:2f:
                    e1:27:60:2e:cf:5e:4b:cb:ab:9e:ba:e0:10:a3:d1:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.64.0/20
                  200.229.144.0/22
                IPv6:
                  2803:4580::/32
                  2803:7a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61462
                  262242

    Signature Algorithm: sha256WithRSAEncryption
         55:9a:67:5e:18:86:de:4a:54:42:49:d8:f0:32:10:1f:d4:14:
         6a:66:52:9e:c7:2f:61:c8:e3:2e:38:50:e2:ee:62:4b:67:3b:
         e1:b3:b4:01:f6:c3:9a:34:a6:7d:92:04:90:f5:a9:3b:47:5c:
         f4:9e:9c:22:2d:ba:79:fb:a9:c3:fb:72:d2:6a:45:52:54:ea:
         e4:9f:b0:35:e1:11:13:4d:5c:fc:02:cf:a9:96:03:ef:46:40:
         49:3b:45:5e:5a:8d:67:cb:e7:8a:b9:25:39:f8:78:67:22:17:
         c2:e3:51:df:7e:50:7e:1c:8a:40:b0:b3:19:2f:b8:97:db:a0:
         f1:b6:5d:85:65:3f:e8:8a:fd:32:1a:8f:46:b1:92:f3:96:9b:
         7c:08:10:85:9f:24:5a:d7:34:eb:8e:a8:c1:b9:83:1e:54:98:
         62:b1:aa:4c:49:e7:a5:75:76:0b:a5:23:68:c4:e0:b3:51:a4:
         cc:35:7f:e2:c5:b6:5e:d6:63:24:82:22:61:ff:5c:ab:96:ef:
         e5:df:b0:36:40:21:b7:8f:f3:5d:3d:f0:86:98:64:80:a9:fa:
         b6:7f:5d:93:b5:9f:f7:09:07:a8:33:28:94:e8:db:05:bc:8e:
         8e:96:29:56:45:00:bd:22:d7:a2:76:e7:38:c5:d4:f1:48:89:
         b2:2b:ef:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----