Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2edc085c643dfc251027399f88d0a3502685b615.cer
File:                     2edc085c643dfc251027399f88d0a3502685b615.cer (raw, json)
Hash identifier:          PD7KGDUz51zIXJsNnqvnhAvB3cXJ3uzHUBykQs7WTAI=
Subject key identifier:   6D:6D:64:35:95:77:C1:8A:EC:9C:4D:06:6A:C2:C9:60:DA:F0:F6:9B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EAAD9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d2fa77ef-bb99-4f19-8aa0-97a54438d237/2edc085c643dfc251027399f88d0a3502685b615.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d2fa77ef-bb99-4f19-8aa0-97a54438d237/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Oct 2020 21:58:49 +0000
Certificate not after:    Fri 21 Jun 2024 23:58:47 +0000
Subordinate resources:    AS: 270100
                          IP: 190.109.120.0/22
                          IP: 2803:a7e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15379870 (0xeaad9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 30 21:58:49 2020 GMT
            Not After : Jun 21 23:58:47 2024 GMT
        Subject: CN=2edc085c643dfc251027399f88d0a3502685b615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:20:d9:a0:22:d1:04:87:b2:44:e1:92:6e:cc:
                    00:ca:10:da:f0:f6:9a:7d:25:c2:30:be:05:23:42:
                    ff:b9:41:68:bf:84:35:72:fe:f0:1a:2c:cc:c4:c0:
                    a7:2a:96:41:55:0e:2c:09:b1:d9:ff:73:df:28:c9:
                    f7:53:b5:29:1e:33:72:52:6d:08:5b:fb:96:f7:39:
                    ea:e7:bf:b9:bc:a9:c8:f6:ca:0f:0b:fe:6e:27:c9:
                    7d:90:9b:34:36:95:db:a7:a5:cb:cd:05:bb:2c:88:
                    e4:26:7e:03:9f:b8:a9:c7:4d:2b:f5:b6:19:b8:69:
                    1b:c3:d5:03:84:f1:db:9f:b9:b5:70:ef:b5:28:54:
                    d2:75:f1:dd:46:ff:9c:ef:c8:30:63:4f:d9:99:bd:
                    14:33:c5:19:65:41:80:19:c0:52:f4:07:b1:b5:fb:
                    58:e3:f9:11:74:cd:48:61:ae:fe:a4:a5:1f:fe:72:
                    0f:35:30:fb:ec:9d:76:4f:65:f4:64:e1:39:0d:65:
                    7f:32:bd:08:73:f4:48:4a:c8:7e:df:f8:de:74:0f:
                    c6:28:66:9a:d2:22:03:10:ef:4c:4d:ff:1d:38:36:
                    90:69:1f:28:4a:8e:a7:42:5d:6f:96:29:d3:28:3d:
                    aa:4a:44:63:d3:32:bd:20:30:a2:77:d0:8e:40:3b:
                    ad:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6D:64:35:95:77:C1:8A:EC:9C:4D:06:6A:C2:C9:60:DA:F0:F6:9B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d2fa77ef-bb99-4f19-8aa0-97a54438d237/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d2fa77ef-bb99-4f19-8aa0-97a54438d237/2edc085c643dfc251027399f88d0a3502685b615.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.120.0/22
                IPv6:
                  2803:a7e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270100

    Signature Algorithm: sha256WithRSAEncryption
         ae:60:9d:5f:a6:45:6a:c1:45:2a:3d:83:68:89:c5:4c:bc:1b:
         7c:01:0d:e6:a2:f3:c7:8a:3c:5b:49:02:fb:4b:96:c5:a4:30:
         e4:0e:91:80:a0:69:db:85:e2:26:d5:10:cb:8d:9b:bb:c7:c9:
         57:66:a7:43:9b:7d:43:c4:4e:1c:91:a1:b4:46:ec:b6:70:3f:
         a9:bb:d4:6b:a2:52:a7:80:1a:3e:0e:ac:06:e3:29:f9:2c:27:
         aa:b5:3b:0c:86:27:6d:70:c0:d9:79:98:e3:6f:b6:02:e0:4d:
         49:c9:98:8a:59:cf:24:38:31:6e:c1:c7:77:a7:93:57:a1:c1:
         27:28:ec:cc:37:d4:dd:80:f6:19:b6:a3:86:17:ea:9c:08:ac:
         cb:ce:1e:79:11:e0:c7:95:dc:de:ec:53:2c:3d:2b:51:b4:45:
         c8:b6:8c:59:49:22:e8:ab:c3:97:30:93:6d:88:87:ba:14:d8:
         56:26:56:ef:64:6d:3f:32:f3:68:16:2a:5b:96:d3:c4:cc:be:
         c8:c4:bc:c2:cc:20:c4:97:7b:a2:d1:0d:20:24:be:70:a9:94:
         53:96:73:90:9b:13:22:ce:87:f7:42:b3:32:c9:2b:66:2a:73:
         37:21:e4:95:eb:50:53:cd:4f:7f:f6:06:16:c8:a0:cc:df:0a:
         7e:3a:44:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----