Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
File:                     ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer (raw, json)
Hash identifier:          N8SveJTPSgBvMqFbN+8fmsobBW6CIGI3Zei82SS4RNM=
Subject key identifier:   E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED52C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 Jul 2020 17:34:19 +0000
Certificate not after:    Wed 10 Jul 2024 23:46:31 +0000
Subordinate resources:    AS: 52398
                          IP: 168.121.84.0/22
                          IP: 200.7.148.0/22
                          IP: 2803:6e00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15553217 (0xed52c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 23 17:34:19 2020 GMT
            Not After : Jul 10 23:46:31 2024 GMT
        Subject: CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:6b:8b:34:24:5a:df:b9:d0:bc:a6:60:88:
                    5a:1c:31:c5:3c:80:30:94:f9:a8:af:72:49:39:d5:
                    7d:85:03:d0:71:c0:f4:7a:5c:7c:07:e0:04:8a:8a:
                    37:a9:a8:66:b8:29:08:9d:92:92:5b:50:91:7d:ce:
                    d3:81:0f:18:4e:2b:32:d0:c0:79:41:37:58:e7:4f:
                    3d:5d:d4:b3:c9:fa:7e:4e:be:45:95:a3:26:1d:4e:
                    ef:f4:10:4f:a5:b6:ec:c6:96:9a:32:82:b7:8c:9b:
                    c0:02:ec:fb:43:cf:81:d3:c2:88:0f:db:b7:c4:d4:
                    aa:c8:b0:e4:4f:fc:69:bc:ae:ab:f2:ee:df:26:d1:
                    82:a0:39:c2:1f:37:41:af:7e:8a:fd:51:90:3b:89:
                    cf:d8:ae:07:c1:1c:c1:cd:13:86:b9:81:cf:18:d6:
                    39:2d:49:0a:3f:5d:ec:df:b2:81:c1:55:e5:b7:db:
                    de:d3:5f:21:d6:d3:ab:5c:10:cc:30:ba:49:39:0c:
                    11:53:49:b0:75:74:fd:c3:4c:99:e9:a4:02:83:c5:
                    52:9f:a1:63:2e:41:e6:46:ed:bb:21:19:e4:52:d1:
                    eb:6b:b7:5d:3e:9d:77:b0:26:c0:04:01:c1:8c:1d:
                    a3:69:5a:e2:68:7b:78:db:f7:a8:9c:c4:82:70:15:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.84.0/22
                  200.7.148.0/22
                IPv6:
                  2803:6e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52398

    Signature Algorithm: sha256WithRSAEncryption
         74:ed:31:c5:48:01:ce:93:3b:73:27:78:76:95:1e:c9:64:4f:
         83:bc:1b:24:1d:7e:e0:4a:e4:e9:ef:84:ab:c9:7b:a3:2e:4b:
         39:ec:11:21:41:2f:2e:9c:42:90:d9:64:d8:88:a9:e6:77:0f:
         76:73:ba:a6:1e:eb:dd:45:5b:43:79:b6:a9:b1:a6:7d:6a:ee:
         fd:b4:05:e8:3b:f8:8d:64:7f:d5:02:1d:13:9c:cc:c6:92:f1:
         0f:fa:4e:f7:c8:d8:b8:54:4d:25:72:72:b3:8a:d1:7d:66:e1:
         9a:29:44:22:34:0a:33:4b:64:61:00:a8:5f:4f:58:d6:47:50:
         08:2d:67:4c:22:8f:be:2f:bb:f7:c9:c8:7a:fe:c0:91:d8:c5:
         26:e2:e4:28:c2:85:5f:69:6e:21:f0:40:ba:d9:b9:c1:c9:90:
         05:30:8a:64:40:90:23:df:8f:fa:84:3a:be:ef:15:06:9e:83:
         2e:99:d6:98:0d:d0:34:92:bd:7e:a5:37:60:70:0b:92:db:20:
         7e:2d:db:31:6d:59:11:c1:9b:08:28:8b:f2:d3:c4:6d:6e:1b:
         73:55:1e:d3:9f:0b:fc:66:79:72:55:62:1b:bf:9f:dd:31:a3:
         60:4f:3d:37:65:b8:e5:d9:61:9b:9a:7d:ca:55:93:7a:a3:72:
         c8:fa:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----