Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d81bd8ca59c312b7e8c2cdd771d3f758b26afc.cer
File:                     88d81bd8ca59c312b7e8c2cdd771d3f758b26afc.cer (raw, json)
Hash identifier:          136AB2gbp93ovt2aS+hl00/ZhiL8PkL/YXUkwygqz50=
Subject key identifier:   CD:40:BC:E5:81:E8:E9:84:8A:AD:83:4E:C3:FE:34:DA:9C:FB:3A:94
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBB926
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cac003fa-b18e-4e8c-a118-675e296b9626/88d81bd8ca59c312b7e8c2cdd771d3f758b26afc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cac003fa-b18e-4e8c-a118-675e296b9626/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 02 Oct 2023 19:08:29 +0000
Certificate not after:    Sun 20 Jul 2025 04:15:02 +0000
Subordinate resources:    AS: 272297
                          IP: 2801:c4:218::/45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16496934 (0xfbb926)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  2 19:08:29 2023 GMT
            Not After : Jul 20 04:15:02 2025 GMT
        Subject: CN=88d81bd8ca59c312b7e8c2cdd771d3f758b26afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e0:39:9a:e7:36:c9:09:8a:f5:f1:ab:d9:a0:
                    c3:38:05:8e:d6:7e:f2:5f:7d:cf:ee:43:b3:f9:bf:
                    39:9a:c6:a3:41:d8:60:42:c6:c3:13:46:7d:fe:58:
                    d5:30:97:a5:f8:81:ef:6a:18:59:fc:36:58:56:2e:
                    77:05:f7:f9:b1:37:c9:ca:3f:29:7e:12:cf:74:9f:
                    19:7f:29:55:08:14:ec:e9:8a:69:13:c0:a4:e0:00:
                    20:5b:74:39:85:3e:e5:ce:15:43:fb:3f:90:d5:c1:
                    73:63:fe:c9:50:2a:ce:ec:5e:a0:5d:5c:73:a0:a7:
                    20:cd:de:c8:37:4e:34:5e:ff:a5:fe:6e:d2:38:2f:
                    31:5b:30:7d:11:35:9e:74:fe:ee:9b:2b:2d:73:49:
                    b2:54:7f:6d:0c:28:bd:6b:08:d7:59:df:e1:69:83:
                    ce:6d:5a:82:39:f2:94:c1:3d:54:51:cd:4b:7d:79:
                    d7:e9:80:20:69:65:26:3f:7e:13:b8:66:8d:99:7c:
                    ed:80:18:1b:65:8c:c0:76:c3:5f:72:56:72:50:01:
                    4f:2f:1c:0a:9b:ec:af:2f:60:de:95:76:d7:f1:83:
                    48:d0:00:2f:d2:05:0b:77:b7:b2:bd:80:da:64:21:
                    7f:af:a9:39:df:f3:a5:15:fd:ac:f7:13:12:70:c8:
                    e3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:40:BC:E5:81:E8:E9:84:8A:AD:83:4E:C3:FE:34:DA:9C:FB:3A:94
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cac003fa-b18e-4e8c-a118-675e296b9626/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cac003fa-b18e-4e8c-a118-675e296b9626/88d81bd8ca59c312b7e8c2cdd771d3f758b26afc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:218::/45

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272297

    Signature Algorithm: sha256WithRSAEncryption
         66:d5:ea:20:41:24:b2:10:4d:26:4f:6a:2a:75:1d:8d:d5:ce:
         41:ca:a8:65:4b:10:e7:b4:dd:43:2e:c2:81:63:0a:8e:f8:1f:
         1d:d5:08:b4:43:8d:6c:00:c4:57:ef:0c:93:2b:4d:86:0d:7c:
         43:e7:4e:6a:fb:9b:d7:d4:90:e5:f6:74:49:ed:18:9b:7e:41:
         cc:5d:b2:80:03:dd:28:51:ff:8d:22:04:50:10:76:2f:65:c9:
         a0:d4:dd:2e:d5:e7:46:ae:c6:25:dd:27:3e:f4:8e:68:4f:6f:
         9a:6a:aa:d3:c2:04:aa:31:44:d8:b6:92:29:ec:3c:34:64:09:
         39:82:f2:6b:5b:44:56:87:f0:5d:2f:86:47:e0:5a:6e:8c:96:
         75:bb:d8:0f:2e:ac:7d:8c:3b:04:d8:63:e6:f8:bd:aa:1c:5c:
         cf:a1:1a:93:f0:f9:32:8e:2d:b0:33:25:e8:e2:40:8c:b7:c6:
         6f:c2:46:43:78:f3:e1:47:58:fe:3f:ce:7c:5a:b1:31:e3:9e:
         47:1f:95:b7:6b:2a:35:09:c8:a9:9b:3f:1d:5e:06:cd:59:ac:
         03:85:06:90:48:00:46:14:f3:13:23:ee:fe:b2:02:07:10:82:
         e3:e6:36:39:9e:93:e1:74:17:cb:a4:14:99:59:fb:05:e3:43:
         65:ed:00:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----