Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88ea1454db4dd9f3413cb69076ab16f194590717.cer
File:                     88ea1454db4dd9f3413cb69076ab16f194590717.cer (raw, json)
Hash identifier:          pUQfEFR6e0CZ7FmevPSv4g0EeHBc5ZrSqcRN1bZp6Dw=
Subject key identifier:   DF:BD:24:1D:AC:C8:99:8C:1E:A4:DD:64:32:77:D6:00:1F:48:71:1E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D9B302
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/68f38121-e0df-4b70-9364-5f47b047aeab/88ea1454db4dd9f3413cb69076ab16f194590717.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/68f38121-e0df-4b70-9364-5f47b047aeab/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 23 May 2022 13:35:10 +0000
Certificate not after:    Wed 28 Feb 2024 17:32:44 +0000
Subordinate resources:    AS: 272132
                          IP: 45.225.249.0/24
                          IP: 2803:8090::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14267138 (0xd9b302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 23 13:35:10 2022 GMT
            Not After : Feb 28 17:32:44 2024 GMT
        Subject: CN=88ea1454db4dd9f3413cb69076ab16f194590717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:05:85:eb:0f:63:ea:48:b7:d5:60:67:cb:47:
                    e9:af:9e:7d:28:c5:d9:62:16:bf:f1:44:6f:b2:91:
                    ce:84:82:4a:71:e2:9d:ae:f0:86:cc:28:6e:d7:5c:
                    50:5c:12:78:17:1d:72:da:89:61:cc:b2:bd:e0:2e:
                    a7:83:ef:55:27:3b:2b:64:32:b6:85:ce:38:12:90:
                    3e:12:d6:7a:23:07:3c:78:2b:08:5e:4d:6a:da:c2:
                    24:e2:5a:98:40:f0:e9:2d:57:17:ef:9d:9c:8f:c8:
                    a5:5c:c1:91:58:3e:c4:44:dc:a1:af:bf:d7:3a:51:
                    39:62:1d:19:33:94:b2:7d:9c:16:df:29:25:48:16:
                    18:c9:0b:d0:24:81:3e:66:ee:24:ab:ba:e9:75:a7:
                    65:5b:22:ba:c4:4b:bb:f1:26:93:b2:27:87:95:c8:
                    f0:d0:ff:13:13:f7:12:02:60:cd:ac:84:80:9c:83:
                    db:af:89:50:94:16:d9:e0:5c:fc:99:19:64:64:14:
                    a6:2d:08:10:c6:14:c4:cc:8d:37:b1:ac:d0:8e:fb:
                    a0:f9:8c:13:5d:e2:76:08:6e:20:a3:0a:f1:e1:c1:
                    34:74:37:09:e5:22:fe:d6:33:8a:8d:54:86:f3:60:
                    30:18:ef:d7:cf:ee:8e:04:62:b8:f2:30:5e:4c:84:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BD:24:1D:AC:C8:99:8C:1E:A4:DD:64:32:77:D6:00:1F:48:71:1E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/68f38121-e0df-4b70-9364-5f47b047aeab/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/68f38121-e0df-4b70-9364-5f47b047aeab/88ea1454db4dd9f3413cb69076ab16f194590717.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.249.0/24
                IPv6:
                  2803:8090::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272132

    Signature Algorithm: sha256WithRSAEncryption
         7b:43:dd:3e:12:98:78:95:0a:9c:94:a0:59:d8:3c:72:34:d9:
         db:62:3f:29:7f:c5:d3:0a:2f:2a:58:ee:55:f9:55:0e:44:16:
         2e:8c:2e:26:a3:fa:3f:35:8d:d6:d1:0f:fd:92:8d:94:14:58:
         f6:df:ad:ec:2a:94:49:bd:85:f3:98:76:29:54:74:91:a5:b3:
         25:d8:55:6b:91:a6:fb:75:ea:ff:ba:0b:2c:48:bf:7a:62:52:
         63:f1:f1:c1:73:49:fc:0d:8b:b9:66:bf:63:89:4b:73:05:5c:
         a2:54:ab:af:c6:ab:a7:13:27:91:0f:38:41:8e:9b:51:08:8f:
         71:a2:ab:f9:97:33:1b:8f:a6:26:c7:7b:44:c2:c8:0e:f3:04:
         83:83:db:90:b7:21:d5:c2:1c:99:41:a4:5e:8a:e3:bc:34:f9:
         62:2b:df:52:74:a9:36:ee:7a:0b:12:97:f8:b2:e2:f4:a7:ab:
         87:49:6b:96:e4:32:5a:b7:12:13:5a:22:0f:ff:ab:30:c3:81:
         84:7b:2f:bc:14:53:66:4b:d3:4b:b0:26:50:b6:aa:bb:25:0e:
         f2:3e:37:6e:65:80:11:db:a0:cc:a1:65:89:1a:d3:59:4f:ff:
         44:a5:1c:6d:fe:de:d5:7d:72:38:1e:15:a2:62:4c:4b:3a:b5:
         64:6f:64:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----