Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff1cca9f77f27742b485aae3810060fa869e1fa9.cer
File:                     ff1cca9f77f27742b485aae3810060fa869e1fa9.cer (raw, json)
Hash identifier:          Ss2+HlbpCuxQ9x8CeivtTW5DXyu7V/44S70tF5LxOYk=
Subject key identifier:   F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F92A3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/ff1cca9f77f27742b485aae3810060fa869e1fa9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:57 +0000
Certificate not after:    Sat 12 Oct 2024 19:13:24 +0000
Subordinate resources:    AS: 52330
                          IP: 168.227.104.0/22
                          IP: 190.184.200.0/21
                          IP: 2803:8340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16329278 (0xf92a3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:57 2017 GMT
            Not After : Oct 12 19:13:24 2024 GMT
        Subject: CN=ff1cca9f77f27742b485aae3810060fa869e1fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:64:e7:d6:05:50:f8:d8:ec:79:a3:53:bd:2c:
                    eb:6d:9b:14:6e:58:f0:e1:52:39:2a:df:3c:bb:20:
                    23:c7:9d:f9:1a:64:71:30:d6:f1:97:82:e5:a5:ef:
                    b1:d5:6c:87:9e:25:0e:dd:45:70:64:c0:32:f0:b2:
                    ad:33:81:24:6f:4b:d7:bd:a1:cf:9b:96:86:50:98:
                    b3:06:dd:4e:56:c7:b9:bf:69:e8:7e:41:b2:3c:de:
                    9b:4d:29:1c:06:2d:3b:86:c6:ba:7d:b0:69:80:e5:
                    9b:98:c3:a1:c6:be:bb:41:e4:39:30:a5:c9:58:0a:
                    9c:55:bc:ed:66:11:28:eb:3f:93:f8:86:ad:fc:f8:
                    d3:8b:40:40:8d:94:d0:9a:5f:6c:df:f4:30:a9:d5:
                    57:d0:e8:61:a5:a2:5e:bc:84:03:76:78:5e:12:46:
                    06:cf:29:23:5d:99:b6:fd:62:6f:e8:54:98:d7:43:
                    45:91:23:f9:3b:bb:33:c9:8b:94:36:2b:c5:89:19:
                    ba:ba:da:67:fd:4b:2c:4f:bc:42:5d:22:dd:8a:81:
                    f7:09:e9:4d:e8:8f:c9:7d:eb:fc:5a:db:32:b4:7e:
                    2d:34:ce:8f:7c:da:1f:01:00:77:07:a2:b5:dd:29:
                    0f:c1:6f:44:7f:56:3f:53:e5:1e:b5:80:55:ba:4f:
                    17:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/ff1cca9f77f27742b485aae3810060fa869e1fa9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.104.0/22
                  190.184.200.0/21
                IPv6:
                  2803:8340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52330

    Signature Algorithm: sha256WithRSAEncryption
         48:60:27:be:9c:d8:4a:65:37:57:87:7b:90:c6:9b:a5:2e:4f:
         80:be:0b:73:75:60:fe:b0:e6:09:39:fb:28:c6:97:ac:01:27:
         a6:4d:8d:5a:88:22:9a:7a:6c:21:72:de:e1:26:f5:12:0b:f9:
         78:95:67:e5:d7:42:45:42:af:c7:13:4d:6a:9c:e4:4b:35:b8:
         27:20:96:43:45:be:4e:b5:e0:7d:1f:c2:bf:7a:c4:a0:8c:a4:
         98:5a:fe:ff:73:3e:76:df:cd:f8:43:f9:de:2a:51:da:25:ba:
         ec:b3:05:c9:16:83:2a:41:be:22:85:73:0c:3a:db:1c:5d:fe:
         04:f0:12:d6:89:f0:f3:8f:13:7e:f5:5b:cc:3a:24:76:54:14:
         b0:e2:94:fe:fa:05:71:ed:8f:aa:ae:32:3d:7d:a6:83:ca:3a:
         3d:cc:73:8f:fc:c2:5a:b5:05:56:7e:da:fe:51:82:39:04:5b:
         a1:a1:8c:46:e7:01:da:68:43:5f:ef:51:34:6e:c1:59:59:4a:
         48:1e:5b:d8:b3:5e:db:e5:d4:03:02:a7:68:08:41:8a:72:9e:
         67:95:9a:00:62:8f:d1:2b:b9:a9:ae:74:b3:c8:18:b1:8e:0e:
         fc:67:7c:a9:61:1c:b1:c9:53:ce:2f:16:6e:28:6f:06:f9:8a:
         7c:d1:34:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----