Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b7f4781ac3db65e6100955a969c54c494191e2b.cer
File:                     7b7f4781ac3db65e6100955a969c54c494191e2b.cer (raw, json)
Hash identifier:          BU34c5HcbPi6vfRZzZLQOvwYPMO4ogv9smeQcnK+ZDw=
Subject key identifier:   97:C7:25:DB:A1:D5:6E:49:14:4F:FC:59:E4:95:3D:43:65:92:A9:CF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4A55F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4e8e554f-0425-4894-bace-9c83339b84e7/7b7f4781ac3db65e6100955a969c54c494191e2b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4e8e554f-0425-4894-bace-9c83339b84e7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 08 Jul 2020 20:05:41 +0000
Certificate not after:    Sat 11 May 2024 16:51:07 +0000
Subordinate resources:    IP: 164.163.88.0/22
                          IP: 2803:17c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14984543 (0xe4a55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  8 20:05:41 2020 GMT
            Not After : May 11 16:51:07 2024 GMT
        Subject: CN=7b7f4781ac3db65e6100955a969c54c494191e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:ee:e6:59:d2:b4:a4:65:18:9f:77:5d:17:
                    24:c6:1a:f9:18:28:fc:7a:ac:ac:e6:7e:25:13:f3:
                    16:37:bf:29:84:71:b2:3a:eb:ea:50:08:1e:05:f6:
                    be:27:2d:88:7b:5e:b6:61:fa:03:63:3d:10:c2:d4:
                    bf:4a:70:de:73:9d:35:9d:03:75:80:8f:9d:b0:33:
                    9f:ef:c4:61:a1:82:c6:65:5f:00:34:1b:0e:06:65:
                    e8:b9:82:50:e5:cd:f9:91:4b:62:4e:3b:98:47:17:
                    99:0a:32:4d:5b:17:4e:3d:2b:f8:0e:52:af:5c:62:
                    50:ac:00:81:d4:b0:28:2f:a3:2f:84:fe:77:bf:b7:
                    c9:3b:4d:13:3f:d4:bf:e9:6f:55:1d:d8:61:46:29:
                    d6:7b:12:49:c1:a9:85:78:0f:67:5f:99:96:06:d8:
                    b3:5f:43:37:ec:f9:81:a2:87:bc:ff:2e:0a:cb:ca:
                    90:ad:a6:c2:20:18:f7:0e:cc:02:5d:14:3e:e4:36:
                    cf:e0:94:d9:4c:d9:11:42:c9:db:c0:4f:57:91:01:
                    4d:b2:66:c1:cf:0a:92:f8:9d:da:5a:4d:56:e7:92:
                    48:d9:de:b4:90:f3:2d:de:0a:43:af:1f:54:69:b0:
                    cb:10:ff:bf:1c:5a:9d:46:60:a8:60:2e:07:d9:b9:
                    68:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C7:25:DB:A1:D5:6E:49:14:4F:FC:59:E4:95:3D:43:65:92:A9:CF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4e8e554f-0425-4894-bace-9c83339b84e7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4e8e554f-0425-4894-bace-9c83339b84e7/7b7f4781ac3db65e6100955a969c54c494191e2b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.88.0/22
                IPv6:
                  2803:17c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:e3:21:76:7a:39:e1:e6:57:8e:84:e7:f9:f7:db:cb:ea:64:
         87:3e:05:1f:e4:95:60:34:1a:c8:3e:73:52:e9:c0:ef:e0:2c:
         76:6e:a9:bf:39:55:91:fb:38:78:f5:2d:37:04:50:b5:13:0d:
         41:4f:5e:65:4b:17:d1:8c:36:95:40:b9:6b:8d:85:15:48:68:
         c9:2e:f7:a5:21:bb:9c:1e:99:0f:36:d8:da:1c:b5:10:c3:ee:
         69:9a:49:c6:eb:c3:32:b6:98:62:d3:8f:fc:e4:22:6d:09:45:
         3b:62:36:5e:f5:61:39:a2:9b:b3:96:9d:bf:46:3b:46:2d:6d:
         ec:c6:b5:c3:1e:13:bb:d4:8b:f6:f7:8e:25:23:f8:02:a9:0e:
         71:f6:ba:44:7a:5b:fe:6a:9c:cc:01:eb:b6:39:27:76:3f:d9:
         da:8e:cb:dd:d7:bb:3c:a7:0a:28:d2:86:18:e7:97:57:80:65:
         e8:af:aa:59:13:91:02:d7:1c:f4:97:cb:e5:b9:4a:b6:c3:d3:
         cf:15:c5:08:40:58:7f:d5:96:3b:c6:26:22:e6:e1:f5:2f:cd:
         f0:f1:07:15:3c:fb:91:f5:a7:16:a0:45:be:aa:6c:4f:42:a1:
         8a:cc:48:e8:82:c7:fb:a9:cd:fb:8b:2d:53:d4:79:5b:85:4f:
         7a:b7:fb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----