Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d7383c300e83d93154f3c84351e1ca3d9bc1cf.cer
File:                     88d7383c300e83d93154f3c84351e1ca3d9bc1cf.cer (raw, json)
Hash identifier:          hpqIyhw/mhLL/7j4TzC7CNZaswRc8svJfxIytpwd4zY=
Subject key identifier:   9B:AA:DD:15:A2:30:8A:D4:E7:B4:F6:39:67:EA:AE:1A:60:25:40:89
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1E181
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/88d7383c300e83d93154f3c84351e1ca3d9bc1cf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Jul 2021 19:44:04 +0000
Certificate not after:    Thu 18 Apr 2024 15:17:43 +0000
Subordinate resources:    AS: 271926
                          IP: 190.113.48.0/22
                          IP: 2803:aa10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14803329 (0xe1e181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 30 19:44:04 2021 GMT
            Not After : Apr 18 15:17:43 2024 GMT
        Subject: CN=88d7383c300e83d93154f3c84351e1ca3d9bc1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:0b:0b:72:93:8d:38:b0:f5:b9:35:65:4e:
                    dc:6c:9f:19:00:4e:fe:21:cb:90:16:b6:60:2e:fb:
                    40:8f:7b:ae:11:e0:6e:98:83:3e:7d:55:36:b1:76:
                    00:24:b3:bd:76:07:d9:5f:18:30:c8:b6:f8:ed:11:
                    cf:e5:70:96:2f:44:27:c6:fc:a3:88:7a:3e:16:05:
                    d9:46:43:00:00:b1:53:f7:8d:37:19:64:29:5c:2e:
                    fd:47:17:d6:1d:1e:1c:8e:ed:7b:c1:bc:a8:1a:5a:
                    8e:8a:10:3d:d6:46:39:8c:cb:76:62:9e:33:7f:6d:
                    ec:bd:eb:46:ee:9e:a1:cc:58:01:00:3c:b0:05:80:
                    49:c1:55:57:01:b5:e0:86:b5:c9:37:f1:75:7f:81:
                    7b:0c:75:b5:d8:16:3b:cf:1c:51:0f:48:bd:60:a8:
                    1e:e4:f1:a3:bd:e7:dc:17:58:ee:1b:ec:a5:db:8b:
                    f7:64:cb:e8:54:84:d8:c2:65:62:c8:54:7a:97:06:
                    d5:ea:7e:cc:51:90:09:11:f4:70:fe:20:e9:2a:e7:
                    7a:a4:35:5d:a3:05:17:ef:41:4e:58:b0:ce:42:dd:
                    77:9d:07:75:97:91:03:c8:7c:07:4d:73:e4:ca:10:
                    c3:3b:16:25:85:bb:06:9e:68:05:99:e9:7f:f2:31:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AA:DD:15:A2:30:8A:D4:E7:B4:F6:39:67:EA:AE:1A:60:25:40:89
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/88d7383c300e83d93154f3c84351e1ca3d9bc1cf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.48.0/22
                IPv6:
                  2803:aa10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271926

    Signature Algorithm: sha256WithRSAEncryption
         bd:79:1e:5a:41:64:c2:6a:77:3f:82:e7:fa:ab:9e:03:15:14:
         ed:ad:da:e7:af:4a:02:77:63:7f:b0:2b:73:11:ad:63:27:4d:
         e2:bd:3d:03:b3:f1:b0:2d:2f:9d:e1:74:33:07:e5:ca:29:c4:
         93:8e:20:be:e0:c0:b5:d8:34:aa:df:22:d0:2c:94:10:5e:54:
         9b:84:7e:b9:e6:9a:cd:ec:cf:13:2f:ce:40:8f:b9:0d:68:82:
         36:06:1e:70:92:fa:72:56:c0:d7:d2:aa:89:f1:4a:a8:8b:27:
         46:75:f2:f3:b8:f7:57:5f:8c:35:c3:93:25:d6:5f:2b:ec:bc:
         75:e3:29:43:ff:68:f4:34:58:ed:ed:b8:06:6b:91:82:9d:f8:
         a1:b8:da:0e:2a:f1:4d:41:01:1d:34:95:3a:d3:22:5b:bb:80:
         02:8d:d2:02:49:92:44:7b:cc:e2:fc:25:b7:1d:3f:6e:34:df:
         df:52:2a:dc:43:2c:63:be:98:b2:69:8f:ca:39:7d:b9:e2:48:
         6d:3e:c3:ba:4b:2e:5b:29:b2:ad:1d:d8:e6:54:80:24:62:71:
         dc:d2:71:6e:95:d3:bc:51:0a:36:1b:40:87:a0:91:22:57:e5:
         b5:91:1f:ce:27:08:7b:ba:c4:af:bd:9e:cf:0d:27:36:08:8e:
         5e:59:9d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----