Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88170bb11130cbc833ab2ee961d2c4e2fd0d31c1.cer
File:                     88170bb11130cbc833ab2ee961d2c4e2fd0d31c1.cer (raw, json)
Hash identifier:          RQiH8OHdBqAFUWeqXE9gs8KZbBFjdbENca6xAcpm+JU=
Subject key identifier:   FB:71:57:62:EF:B0:E4:D3:31:95:ED:76:BB:CE:40:5A:F6:F1:82:68
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E46EA0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/65ce240a-cd5f-43e8-a1c5-516464483183/88170bb11130cbc833ab2ee961d2c4e2fd0d31c1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/65ce240a-cd5f-43e8-a1c5-516464483183/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Sep 2020 18:09:26 +0000
Certificate not after:    Fri 10 May 2024 19:02:07 +0000
Subordinate resources:    AS: 267932
                          IP: 45.180.120.0/22
                          IP: 2803:160::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14970528 (0xe46ea0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 22 18:09:26 2020 GMT
            Not After : May 10 19:02:07 2024 GMT
        Subject: CN=88170bb11130cbc833ab2ee961d2c4e2fd0d31c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:f6:88:7b:83:57:31:d9:99:f8:64:fb:19:
                    01:98:9f:d8:ea:bc:90:0d:4f:1a:11:36:e5:6e:49:
                    c9:85:e0:98:85:b3:e2:7e:04:b3:be:f0:38:e0:82:
                    cf:58:c9:14:32:15:44:1b:b4:6e:6a:df:93:4d:8a:
                    6a:09:09:bc:51:f6:c8:53:77:d7:ed:b7:35:cc:c3:
                    e5:fb:89:e5:dc:29:59:32:2d:2f:ac:b5:7c:11:bf:
                    bc:84:9e:af:e9:a2:ed:06:6b:02:5f:ce:04:46:36:
                    71:81:34:f8:3d:43:29:e1:16:35:3d:d7:19:15:ca:
                    39:2b:e8:da:de:1d:4c:c5:f0:0e:0d:6a:e2:65:12:
                    1b:c8:6e:18:59:2d:ab:2a:d7:70:d7:7b:2c:b3:9b:
                    b3:a9:48:10:59:bd:01:f9:9c:1a:cf:38:9c:20:09:
                    3b:99:c4:dd:1d:4e:81:6b:5f:4c:16:f2:f8:8a:b3:
                    ac:bb:a4:ff:ef:70:04:73:97:ce:46:0c:98:86:7e:
                    57:7c:56:68:78:6b:5b:ca:25:d9:a9:d3:c9:19:5a:
                    fb:3c:4b:ff:df:18:21:49:d3:ac:75:cf:b9:70:3a:
                    f4:4f:d3:2f:dd:e2:8b:a1:81:32:eb:f0:7e:21:90:
                    7f:b4:91:5b:c3:a8:96:bc:ec:54:c9:8e:d6:41:6e:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:71:57:62:EF:B0:E4:D3:31:95:ED:76:BB:CE:40:5A:F6:F1:82:68
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/65ce240a-cd5f-43e8-a1c5-516464483183/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/65ce240a-cd5f-43e8-a1c5-516464483183/88170bb11130cbc833ab2ee961d2c4e2fd0d31c1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.120.0/22
                IPv6:
                  2803:160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267932

    Signature Algorithm: sha256WithRSAEncryption
         3c:87:d8:ec:75:fc:6c:82:14:ba:a8:f7:3a:6c:ee:cf:5c:14:
         37:8c:c3:61:0d:59:1b:32:96:07:67:90:5c:0a:2f:13:8c:62:
         01:85:77:3b:4d:c6:9e:b9:76:24:6a:a7:1b:bd:e0:f6:58:8a:
         cb:48:54:e8:71:3f:fd:2f:59:de:81:dd:12:88:15:1e:11:ce:
         cd:8c:16:7e:56:1d:93:9c:8c:8f:1f:b4:a2:d2:79:5f:2a:45:
         d8:80:1a:23:55:fd:92:7a:2d:2b:6c:ee:55:4c:1e:46:a8:3f:
         ad:42:4d:f4:b3:94:e1:24:16:25:90:1e:35:7c:b9:d0:86:1d:
         39:51:84:5d:6f:d7:19:03:9c:13:fc:c4:34:59:c3:21:b6:2f:
         43:e4:c9:46:d4:30:b4:3d:2f:f3:01:46:20:5d:9e:a0:6c:de:
         5f:26:da:4b:b6:d7:32:5e:73:83:5e:00:a4:16:fb:bc:78:b0:
         14:87:38:34:23:a2:38:6c:13:11:cc:6e:be:be:d2:9a:42:c8:
         52:c5:09:4c:d2:2e:bc:56:29:8c:5b:33:d9:6f:30:d3:34:bb:
         c8:b6:e9:28:99:6c:7d:85:74:da:7c:1f:90:48:de:8b:6d:19:
         25:ef:61:db:a0:b5:f3:50:ad:00:77:e6:f2:69:43:28:91:ac:
         da:e9:d6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----