Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer
File:                     88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer (raw, json)
Hash identifier:          QluUMlDOMboezNX2BSj78G9aLpxVNDbUe1/jICIMFEM=
Subject key identifier:   6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF91EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 15 Feb 2023 20:00:32 +0000
Certificate not after:    Mon 17 Jun 2024 15:12:13 +0000
Subordinate resources:    AS: 270088
                          IP: 170.0.8.0/22
                          IP: 2803:bbe0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14651886 (0xdf91ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 15 20:00:32 2023 GMT
            Not After : Jun 17 15:12:13 2024 GMT
        Subject: CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:f5:e0:d9:a9:4d:3d:6c:09:a8:68:78:57:
                    f1:45:86:66:7c:b3:94:f5:d0:48:49:9a:69:a2:a2:
                    4d:5d:81:c5:fd:71:ca:d0:8e:ad:4d:45:d5:39:89:
                    ec:a2:5c:60:24:e2:92:ef:e1:68:b7:cd:ba:10:9e:
                    f8:a1:9e:2e:f1:76:04:db:3c:da:73:86:4b:69:46:
                    e2:48:b4:c4:2b:af:5e:9e:86:0f:89:71:31:2d:7b:
                    cd:76:ac:18:b3:e7:4c:78:7c:a8:b3:1d:14:8d:0b:
                    e8:4f:60:62:50:1b:76:42:e9:66:88:e8:c0:45:73:
                    e4:03:40:5b:ae:b0:42:3c:0b:ab:02:a5:e1:79:bb:
                    27:ec:74:61:3e:53:3d:de:61:25:f0:bd:b1:14:c4:
                    00:75:6b:fe:1a:ac:3f:a4:cc:ab:03:70:21:a0:ac:
                    05:1d:6e:8a:72:3c:a7:62:14:fe:03:3a:4c:1e:50:
                    9e:14:37:01:9c:30:a3:2b:e9:e6:92:c5:65:ea:1a:
                    0a:70:f7:42:e7:aa:ae:6f:a7:91:25:8c:ae:a7:f6:
                    8f:d6:32:35:74:98:5e:ee:17:0f:3d:33:76:5f:87:
                    0e:63:81:d5:e5:e1:9c:b6:e1:e9:ee:68:96:04:b6:
                    33:07:4f:59:46:5c:f8:2b:c4:01:e8:ac:ad:d4:12:
                    6f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.8.0/22
                IPv6:
                  2803:bbe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270088

    Signature Algorithm: sha256WithRSAEncryption
         36:91:af:08:aa:8a:6c:ba:4a:f8:98:a7:e8:d2:54:0c:40:e1:
         20:ad:4c:59:76:5b:ba:fd:bf:c4:63:d4:4a:97:52:14:03:24:
         1e:1c:c4:28:d3:86:45:d5:88:c9:94:62:6d:9d:78:be:39:64:
         4c:ec:0d:19:5f:73:f3:27:7b:63:b6:01:04:46:8b:f5:6b:e0:
         5f:7f:66:6e:41:38:96:6f:9a:ec:6b:78:31:0d:65:73:15:bc:
         31:d6:19:98:61:02:f9:31:68:93:76:39:76:fd:2b:c5:7b:7f:
         60:b2:af:c5:a1:7d:79:0e:70:e6:4a:ca:a1:03:11:ff:ee:60:
         da:68:ca:ac:00:dd:f1:a4:0a:18:bf:e1:1a:b9:e7:e2:1c:70:
         91:31:36:4d:93:4a:89:6d:c7:48:3c:11:fa:7c:d0:65:45:ab:
         40:26:d6:bf:f0:7b:fe:21:0a:89:74:47:75:f2:27:66:6a:c6:
         b0:ab:20:80:0e:16:4f:b4:da:df:a1:9e:37:c7:34:42:2f:f5:
         5a:bf:16:54:e0:2d:ef:aa:b0:e5:ae:11:82:f4:f5:c0:ed:ca:
         28:f8:b1:43:4e:54:ef:2e:b1:17:e1:8b:32:51:2b:08:1c:6e:
         e4:90:29:cb:4b:70:a9:a5:68:fe:b7:ea:88:b3:5b:79:8a:79:
         b0:18:2b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----