Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d8c434cc44cf16f26c76018ba79af93a8da530.cer
File:                     88d8c434cc44cf16f26c76018ba79af93a8da530.cer (raw, json)
Hash identifier:          /ZSiO1GnuP+Cq5TZVSN6Vom8n4WXnhECtW1dGn+LSkw=
Subject key identifier:   63:96:B9:2E:7B:A4:EB:E5:AC:36:7A:67:68:20:51:E8:CF:18:1A:2C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF794F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6407c409-6595-4beb-974a-f5df93d82b78/88d8c434cc44cf16f26c76018ba79af93a8da530.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6407c409-6595-4beb-974a-f5df93d82b78/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 19 Oct 2020 19:16:01 +0000
Certificate not after:    Fri 26 Jul 2024 20:25:43 +0000
Subordinate resources:    IP: 45.185.20.0/22
                          IP: 2803:9360::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15694159 (0xef794f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 19 19:16:01 2020 GMT
            Not After : Jul 26 20:25:43 2024 GMT
        Subject: CN=88d8c434cc44cf16f26c76018ba79af93a8da530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:ce:bc:72:d5:7a:ea:75:d7:3c:2d:c5:00:
                    aa:d5:6c:46:42:d8:2a:fd:74:1d:83:f8:14:fa:48:
                    b5:0f:74:b7:f6:79:c8:5c:7e:63:1a:4c:5a:88:f6:
                    48:01:21:45:d8:ca:f7:f1:f4:08:31:86:48:1a:c9:
                    4a:c5:dc:52:ca:b5:b3:9b:90:59:ce:a6:d4:ad:e7:
                    ab:5f:77:93:79:bb:fa:25:b3:e0:49:33:f1:d7:34:
                    1c:d1:1e:91:ea:12:1d:99:ee:67:92:1f:4a:b5:13:
                    99:8f:b3:f9:59:90:6c:7c:0c:fe:88:3f:f1:46:37:
                    78:47:2f:5a:57:ff:ef:30:43:28:7e:eb:d2:96:1c:
                    f9:e7:c6:bc:20:c3:b6:6f:e4:7f:f3:be:05:70:41:
                    64:01:ee:de:4b:ae:7e:e8:ce:8a:f7:63:76:ed:19:
                    30:f8:2a:a2:4f:0a:eb:b0:cc:1b:5b:c3:b1:21:e3:
                    9f:eb:bc:3b:54:2d:21:6a:88:a4:67:6e:a2:cc:29:
                    62:70:87:8e:5d:f7:fd:96:a2:76:b0:30:47:79:4e:
                    97:b3:8c:df:ce:ca:b9:52:81:26:01:29:f1:e2:cc:
                    ef:7f:44:6e:6d:f2:b7:26:c4:4c:6a:ac:39:75:31:
                    9f:60:22:f4:22:f3:32:25:f0:26:33:63:d5:bc:1f:
                    21:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:96:B9:2E:7B:A4:EB:E5:AC:36:7A:67:68:20:51:E8:CF:18:1A:2C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6407c409-6595-4beb-974a-f5df93d82b78/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6407c409-6595-4beb-974a-f5df93d82b78/88d8c434cc44cf16f26c76018ba79af93a8da530.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.20.0/22
                IPv6:
                  2803:9360::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:3a:1a:a5:36:97:80:10:10:90:3f:29:82:f9:0a:78:2c:3c:
         87:67:82:f4:f6:b7:dc:c0:35:4c:93:4d:52:7c:60:b5:a9:8d:
         81:a4:f6:f0:1a:c7:8e:1e:ab:92:05:6d:07:24:f0:88:d7:f6:
         2e:44:d5:5c:f0:19:58:43:1c:99:eb:40:d5:ca:9e:6a:93:77:
         a7:80:29:3d:90:62:bc:5e:b1:74:50:d8:43:d5:6e:37:e9:f9:
         5b:b6:59:37:77:3e:9e:ae:7c:72:88:85:3a:4b:75:1e:2a:5c:
         3b:87:b7:74:ac:7c:b4:82:c4:9a:e9:a5:e6:aa:03:85:18:63:
         6b:e1:d5:a5:63:ed:08:02:24:00:e1:da:22:28:64:44:db:9a:
         84:a3:9e:16:82:16:3f:08:46:0b:98:a4:36:9c:cd:d2:9d:2f:
         26:6b:34:c8:7c:04:94:3a:4c:44:e2:39:13:11:6c:3b:ea:fe:
         43:60:39:c8:ef:c3:1d:8f:55:5a:ff:29:a8:0e:5a:1d:ef:ad:
         42:bd:b8:6e:7d:40:93:54:4d:f0:19:33:f5:09:4e:8b:56:d0:
         9d:56:c9:aa:84:f2:fa:82:9e:6c:df:dc:15:bd:70:30:25:f6:
         82:b9:1f:ba:27:f8:2d:f7:3a:ab:d4:76:f6:94:71:7a:6b:37:
         4d:a9:fc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----