Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebedcbcfe1c07143badb5838ff5d6bc181610b63.cer
File:                     ebedcbcfe1c07143badb5838ff5d6bc181610b63.cer (raw, json)
Hash identifier:          9SpHur99rkRbzkVhqYIC1MQJ1qR5alB3TCTURc9U4XE=
Subject key identifier:   25:53:59:E0:40:45:3E:61:A0:1A:06:3F:37:00:E5:35:C3:07:D2:13
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1617C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d8a8aa86-e86b-4ffa-92f9-b565404f4659/ebedcbcfe1c07143badb5838ff5d6bc181610b63.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d8a8aa86-e86b-4ffa-92f9-b565404f4659/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 01 Aug 2020 19:55:55 +0000
Certificate not after:    Sun 11 Aug 2024 18:14:32 +0000
Subordinate resources:    AS: 52409
                          IP: 190.120.176.0/20
                          IP: 2803:9100::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15819132 (0xf1617c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  1 19:55:55 2020 GMT
            Not After : Aug 11 18:14:32 2024 GMT
        Subject: CN=ebedcbcfe1c07143badb5838ff5d6bc181610b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:c2:c4:5f:70:8f:7a:50:56:8b:74:89:d2:
                    e5:a1:2a:18:ef:8a:1b:90:57:9d:ef:54:f8:23:56:
                    4d:0f:28:b9:eb:0e:44:91:70:1c:eb:7f:f3:ae:ba:
                    c4:3b:80:93:f1:41:45:8f:2c:c0:74:a5:b4:4c:59:
                    0b:66:a6:05:bb:60:32:af:ca:b1:3a:80:c1:2f:4c:
                    ff:45:95:2a:58:b0:12:1a:b7:57:10:73:e9:1a:9a:
                    cd:4d:5b:9c:7e:92:2d:94:30:87:fa:24:08:1f:fd:
                    22:c7:6e:3e:eb:9f:39:30:28:2e:9a:37:30:80:45:
                    9c:9b:45:c2:eb:54:8f:0d:2a:25:75:eb:e6:92:d6:
                    0c:48:e1:7b:b1:80:1b:4a:0e:da:43:a0:76:71:98:
                    35:02:d1:07:9e:70:53:e6:ef:b9:6b:9f:54:0f:24:
                    54:54:39:15:de:f7:3c:5d:e2:71:34:b2:23:74:9b:
                    78:d8:d2:a4:e6:37:7f:36:67:2d:28:b1:67:e7:8f:
                    78:94:13:19:4f:8b:71:e8:77:b3:cc:c5:a6:a0:d8:
                    f1:c5:cf:c8:e2:d6:1a:7c:1c:01:a0:ab:00:0e:fa:
                    38:26:28:04:c9:17:f5:12:42:13:19:fd:49:91:b3:
                    6a:ec:75:3d:2a:14:e3:2d:87:d1:f1:09:18:f5:ea:
                    03:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:53:59:E0:40:45:3E:61:A0:1A:06:3F:37:00:E5:35:C3:07:D2:13
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d8a8aa86-e86b-4ffa-92f9-b565404f4659/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d8a8aa86-e86b-4ffa-92f9-b565404f4659/ebedcbcfe1c07143badb5838ff5d6bc181610b63.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.176.0/20
                IPv6:
                  2803:9100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52409

    Signature Algorithm: sha256WithRSAEncryption
         8a:1a:54:bb:af:64:91:bd:41:2c:1d:4b:27:ba:f0:28:b1:95:
         33:cf:f3:e4:87:40:54:74:1c:6d:9e:8d:12:0f:02:4c:4d:2b:
         50:07:3e:c9:a1:47:09:ce:28:d8:83:c6:c9:4c:88:f6:ec:c2:
         e2:95:98:dd:aa:6d:20:7d:77:b3:3c:44:0d:47:f6:81:eb:7c:
         79:92:02:dd:51:47:cc:d6:4f:41:bd:3c:07:99:df:1b:12:d5:
         4c:4d:db:ed:0d:9d:fe:18:63:5c:e2:38:e5:5f:7a:c1:a0:ad:
         dc:0c:d0:d1:e9:87:4c:bf:c7:04:e2:cb:34:5d:d5:16:41:95:
         53:d9:58:9b:26:3c:c9:90:56:5e:58:ba:bf:0b:a3:d8:92:3e:
         a5:3d:d3:b0:38:c0:17:4a:ec:aa:32:71:69:b4:5e:2b:1e:31:
         72:36:dd:16:b7:6f:a1:48:98:e0:19:91:8e:20:50:0b:46:5f:
         a7:62:45:2c:72:c4:4a:98:77:05:dd:ef:17:bf:f6:79:29:6a:
         7d:dd:e4:66:7f:cb:1a:85:b7:98:e6:cf:4c:a2:93:43:4d:bc:
         85:83:b2:da:f3:2f:00:06:66:4f:53:a5:7f:a4:51:2c:1d:97:
         66:16:4b:fd:40:b4:da:53:b4:14:b1:11:0a:17:53:78:8e:eb:
         64:1f:91:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----