Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10cd28c54540dacc8de053ce2831d274ba869999.cer
File:                     10cd28c54540dacc8de053ce2831d274ba869999.cer (raw, json)
Hash identifier:          JRRH40x29ymEIEBiInfRpf4QgL+pd5TYDVbKmwfoqLA=
Subject key identifier:   08:A8:79:32:1A:D1:60:48:97:87:E9:66:B4:2F:AB:2B:95:05:46:64
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F74D35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/15fe93c5-7697-4a1a-ade9-13141639a1b6/10cd28c54540dacc8de053ce2831d274ba869999.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/15fe93c5-7697-4a1a-ade9-13141639a1b6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 16:02:04 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.250.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16207157 (0xf74d35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 16:02:04 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=10cd28c54540dacc8de053ce2831d274ba869999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:0e:ea:1a:20:3e:2a:cf:82:a4:2a:39:7f:
                    10:67:0e:6f:5e:99:9e:ac:a1:1f:ac:68:d4:46:18:
                    35:ff:9c:78:92:14:0d:62:fb:c8:fd:f7:5d:b6:75:
                    bd:51:7a:7c:60:ed:43:89:02:26:f1:04:bb:c8:13:
                    f7:0f:f8:0b:a0:3a:20:c5:58:fb:93:64:f9:37:4e:
                    02:9f:23:5c:45:77:d3:0f:30:04:cf:a3:d8:f8:b6:
                    27:25:c2:f2:e9:53:af:66:cb:64:b8:66:86:74:a2:
                    97:ef:54:4a:1a:d2:f6:28:aa:84:75:60:f3:57:14:
                    e8:49:eb:04:29:61:5c:85:b0:db:70:4c:9d:cc:00:
                    51:a4:e8:5d:23:55:33:73:a9:bf:ca:0b:5f:db:78:
                    ba:14:fa:97:02:82:f7:93:cc:40:56:6d:70:1d:65:
                    2a:cd:40:b7:fd:dd:92:c3:84:18:4d:95:c9:86:dc:
                    d0:66:17:56:d9:6a:ca:9b:a0:69:26:9e:c9:e2:bc:
                    ad:01:e7:be:d1:2e:41:89:74:44:f8:a0:02:f3:1a:
                    6c:2b:83:6b:04:59:43:61:01:68:d4:97:9c:44:a8:
                    30:6e:77:33:f0:fe:64:9c:e3:a5:38:67:01:63:d6:
                    2f:74:6c:fe:b6:3f:ae:b7:a7:b1:cd:b3:3a:42:88:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A8:79:32:1A:D1:60:48:97:87:E9:66:B4:2F:AB:2B:95:05:46:64
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/15fe93c5-7697-4a1a-ade9-13141639a1b6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/15fe93c5-7697-4a1a-ade9-13141639a1b6/10cd28c54540dacc8de053ce2831d274ba869999.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a4:e5:d4:9e:92:1d:d9:5b:f1:b2:3f:81:b8:e9:46:3b:ec:
         91:78:7c:83:cb:27:15:c3:92:92:61:a4:68:6d:47:86:b3:8f:
         62:2d:82:bb:dc:dc:70:e5:e3:cc:d2:3f:2a:2e:f9:dd:ea:ca:
         3a:21:74:48:60:6d:04:6b:a6:fc:7e:f3:2a:dc:09:ec:11:ca:
         92:26:8d:19:22:b7:c8:2c:86:95:a7:70:a0:81:8d:60:ff:d7:
         91:94:25:b4:e7:19:5c:81:51:5a:d2:89:f6:48:99:5b:ea:2f:
         c6:f1:fb:54:c4:d4:5d:ba:09:79:0a:32:d2:9a:9f:3c:c3:a0:
         8c:ae:dc:c8:d4:1b:a4:b5:c7:c7:50:3b:df:a1:97:c7:6f:67:
         09:cd:13:a0:94:2d:1a:84:44:d9:4f:23:4b:ae:ee:de:1b:a0:
         16:d7:7d:e8:91:94:c3:73:25:04:2a:21:6f:68:00:dc:fe:8f:
         90:9e:b4:31:6b:dd:3a:aa:1b:ad:ee:f3:6f:ba:1b:0a:82:43:
         eb:6a:5c:10:87:1a:75:0f:35:90:40:01:11:e4:79:68:ff:7c:
         ad:65:6d:41:f5:7e:b8:5e:db:11:1e:c0:c3:d6:3e:1c:bc:77:
         db:55:c4:45:71:f8:f1:15:28:37:a0:4f:d7:5c:b6:d9:af:0b:
         39:ed:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----