Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e88465bafcfd26f89cd35dd3a70213aee86e6f92.cer
File:                     e88465bafcfd26f89cd35dd3a70213aee86e6f92.cer (raw, json)
Hash identifier:          RLqJ2F8zvnfztzBiGkRjWo8fwCrS0eHFAmq4d1rkjRs=
Subject key identifier:   E2:2C:54:EF:E0:0B:26:25:C9:D5:2D:53:EC:6B:75:C1:DA:4B:27:62
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D92733
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2f845fe3-b278-415b-bef0-917dfa02cbae/e88465bafcfd26f89cd35dd3a70213aee86e6f92.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2f845fe3-b278-415b-bef0-917dfa02cbae/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 09 Mar 2021 20:36:53 +0000
Certificate not after:    Mon 08 Jan 2024 21:49:02 +0000
Subordinate resources:    IP: 2801:16e::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14231347 (0xd92733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  9 20:36:53 2021 GMT
            Not After : Jan  8 21:49:02 2024 GMT
        Subject: CN=e88465bafcfd26f89cd35dd3a70213aee86e6f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e5:ac:c8:a4:f6:11:4e:8c:ef:c2:bf:21:8d:
                    41:41:a4:30:ef:11:2d:c6:97:c2:bb:44:6c:08:3b:
                    1e:9b:1d:36:06:0c:8c:f0:8b:e5:a0:74:4a:3c:30:
                    a7:87:04:7e:b3:8d:e6:74:14:0f:c6:1e:cc:98:a4:
                    48:7e:20:55:52:c1:01:3d:c1:9a:8d:c1:da:0d:f6:
                    a5:78:f0:0a:be:3a:7d:cf:19:d6:c3:e6:98:f9:f7:
                    2d:fe:95:76:22:07:64:30:33:92:d2:62:e2:05:c7:
                    57:88:39:e1:54:cb:4c:c6:b8:21:14:f8:64:17:0c:
                    9b:91:3b:78:6b:1e:b9:08:bc:fe:88:eb:32:f5:1f:
                    6e:45:6e:0f:08:a6:30:91:9f:7a:19:1a:22:15:49:
                    5e:d1:4e:ae:2e:b0:56:a4:b3:b2:cb:97:61:e1:6d:
                    1c:fc:75:e2:8a:6d:8a:c0:69:df:a6:3b:9d:cc:55:
                    d7:ed:03:77:94:bf:e4:b8:c0:a8:91:fa:a0:e8:1e:
                    3b:58:31:68:f7:bc:44:07:77:fe:bd:09:6e:72:e6:
                    9a:e0:fc:94:f9:68:76:ed:fe:5a:3f:ab:28:8b:07:
                    7c:e0:20:7e:30:80:58:f3:c1:52:44:86:4c:31:f6:
                    7d:23:b8:92:00:5f:ff:d6:23:67:14:73:1f:ee:8a:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2C:54:EF:E0:0B:26:25:C9:D5:2D:53:EC:6B:75:C1:DA:4B:27:62
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2f845fe3-b278-415b-bef0-917dfa02cbae/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2f845fe3-b278-415b-bef0-917dfa02cbae/e88465bafcfd26f89cd35dd3a70213aee86e6f92.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16e::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:19:6e:24:f6:3f:76:00:f9:c6:4e:8a:f4:0a:06:3d:dd:d0:
         d9:eb:35:e1:c6:69:c4:bc:07:f1:43:ed:b0:9c:40:44:e0:25:
         5c:fa:7c:7c:6d:76:0e:c3:31:f3:8d:b7:6a:ba:a4:3c:02:c8:
         80:45:ae:26:a4:d0:bd:e6:b9:85:bd:60:1a:fc:99:a7:2c:10:
         97:5f:27:c0:6a:cf:26:a4:5c:8f:0e:c6:be:7d:6d:9f:b5:51:
         05:36:96:9a:2e:61:fd:c4:b2:70:5b:59:f0:8d:42:33:b7:28:
         e0:fa:fa:09:e9:e9:2b:3c:07:13:c4:f3:22:a6:91:4e:1a:0e:
         73:5d:76:30:f0:c5:d2:f3:24:9d:f6:0b:4d:7b:44:b4:f1:84:
         13:13:00:39:15:86:69:9e:cc:a7:12:56:c4:87:37:9a:fd:78:
         94:02:c5:7a:a0:c2:10:35:e4:4f:02:c8:cf:26:20:eb:87:59:
         96:b3:7e:a9:0d:81:1d:bb:64:16:e0:7b:ae:b6:96:82:c8:36:
         c7:38:f6:3a:6a:2b:06:03:c6:cd:64:13:73:45:49:d4:df:cd:
         7a:f0:3f:f0:18:33:3a:0a:67:18:6c:dd:96:1e:23:0c:d3:2a:
         9e:37:dd:82:d2:9c:9e:86:1e:0b:09:cc:a5:de:c4:83:6c:c5:
         e3:1b:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----