Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb390b28179c24ec9435f9593f78cfa52f75f119.cer
File:                     eb390b28179c24ec9435f9593f78cfa52f75f119.cer (raw, json)
Hash identifier:          AZYJaD+71ZKMglsPmYixE9wuRAQPPKQNJnqcZ7v5oK8=
Subject key identifier:   04:9A:57:F3:D8:48:B1:46:E4:9B:DF:0B:DE:84:DE:9E:13:91:B8:03
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1EB00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/eb390b28179c24ec9435f9593f78cfa52f75f119.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 26 Oct 2021 13:59:02 +0000
Certificate not after:    Fri 16 Aug 2024 15:00:00 +0000
Subordinate resources:    AS: 27747
                          IP: 168.194.180.0/22
                          IP: 181.44.0.0/14
                          IP: 186.18.0.0/15
                          IP: 186.22.0.0/15
                          IP: 190.55.0.0/16
                          IP: 200.115.192.0/18
                          IP: 200.125.64.0/18
                          IP: 2800:810::/28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15854336 (0xf1eb00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 26 13:59:02 2021 GMT
            Not After : Aug 16 15:00:00 2024 GMT
        Subject: CN=eb390b28179c24ec9435f9593f78cfa52f75f119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:b9:87:a4:8d:e8:71:c6:76:2d:a7:e2:a6:
                    38:8c:57:9b:60:c9:54:dd:43:ea:3e:d9:d6:d6:8f:
                    1a:de:27:88:b1:df:0c:a4:de:78:3d:9c:f6:d2:6c:
                    1b:b0:c3:16:7e:5d:ef:d9:3c:02:64:02:c5:4d:a9:
                    1f:31:df:4d:3f:fd:75:61:f1:8b:a6:a4:72:08:af:
                    03:6b:e7:98:66:96:cf:f3:4e:72:81:da:c3:d0:bf:
                    a4:2c:28:68:46:8c:5a:a7:eb:b4:4a:32:9b:84:92:
                    4b:f9:87:e4:ff:d5:ae:39:6b:a6:b1:c0:60:fc:85:
                    01:bf:98:6f:78:89:93:52:d3:ff:da:c5:01:e7:d0:
                    ad:8a:46:b9:6d:91:17:26:5a:69:33:d7:09:7b:5f:
                    71:a5:13:62:3e:fb:39:63:ff:ab:e8:af:ca:eb:ea:
                    0d:09:a0:8b:8f:f1:b2:4c:fa:23:8b:c8:ca:38:84:
                    52:82:10:20:24:88:65:a1:9d:48:b9:f0:5f:89:f1:
                    5a:0e:d9:8b:c9:3c:64:27:3c:38:48:fb:7e:be:6c:
                    8f:70:b7:68:17:c5:a8:05:26:11:ca:76:b6:c5:67:
                    6e:15:e4:06:0d:2e:77:bf:91:50:7f:71:7c:d5:62:
                    99:cb:ac:a7:29:7f:c7:20:56:3c:2e:1d:a0:9c:e5:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9A:57:F3:D8:48:B1:46:E4:9B:DF:0B:DE:84:DE:9E:13:91:B8:03
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/eb390b28179c24ec9435f9593f78cfa52f75f119.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.180.0/22
                  181.44.0.0/14
                  186.18.0.0/15
                  186.22.0.0/15
                  190.55.0.0/16
                  200.115.192.0/18
                  200.125.64.0/18
                IPv6:
                  2800:810::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27747

    Signature Algorithm: sha256WithRSAEncryption
         7f:c0:f0:00:d5:ee:52:9b:65:cd:59:20:2e:7b:8b:84:68:2a:
         4c:96:4d:2b:b5:1c:a5:da:8d:bd:27:db:12:43:0f:2f:f7:81:
         4e:40:58:c4:1a:f7:f0:7a:68:3b:8c:e1:56:00:75:3e:98:27:
         86:3f:40:2f:fd:44:bf:ec:b2:e7:5d:c2:2a:94:6d:f5:2f:12:
         84:5b:20:89:96:8c:43:01:55:5e:cc:9f:b6:be:87:f6:cc:d9:
         65:fb:dd:6b:d8:e1:f5:3a:05:f2:d8:9d:12:42:00:b9:d9:47:
         76:d7:44:9d:4e:08:7a:e7:97:3b:95:67:31:26:29:4b:cd:14:
         9b:a0:40:44:41:8b:bf:1a:28:88:57:2e:4b:39:10:e0:f3:73:
         08:72:42:3d:bd:80:f5:c9:76:be:ec:79:40:c5:2f:14:87:34:
         a1:3f:d8:5e:c7:4a:4c:eb:88:3d:cc:87:dd:7a:32:88:47:77:
         2b:26:ab:4c:a8:72:2b:07:3b:9b:fc:f5:dd:75:d6:38:f5:cb:
         a0:3d:c4:5b:f0:84:84:bc:c0:24:d2:4f:35:be:7a:39:91:a2:
         60:f4:e3:2c:8e:62:97:d4:46:02:49:88:b9:2d:2f:a9:86:eb:
         69:df:30:f9:d6:7f:13:71:f9:fb:8c:e0:f4:09:46:e7:ee:84:
         a1:9b:b9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----