Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1490c11baed518117372b8e4254a7d16c170f2d6.cer
File:                     1490c11baed518117372b8e4254a7d16c170f2d6.cer (raw, json)
Hash identifier:          jnMa6ds1mV4qN5O7mcf/N6lJheXu6e0VJ9+aZzMvt/k=
Subject key identifier:   76:9D:7C:7E:1C:74:1C:E0:EE:0E:CC:B9:8C:5B:BB:DA:1C:C4:23:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0106F434
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e88512b0-3b1e-4341-812b-fbd0c25dcb92/1490c11baed518117372b8e4254a7d16c170f2d6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e88512b0-3b1e-4341-812b-fbd0c25dcb92/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2024 17:07:12 +0000
Certificate not after:    Wed 05 Nov 2025 20:09:44 +0000
Subordinate resources:    IP: 2801:14:7800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17232948 (0x106f434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 16 17:07:12 2024 GMT
            Not After : Nov  5 20:09:44 2025 GMT
        Subject: CN=1490c11baed518117372b8e4254a7d16c170f2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:22:a7:a4:d8:45:04:72:1e:f5:ea:17:f6:ab:
                    c5:23:5d:3a:d1:20:ba:ff:e4:a5:5e:8c:80:78:0c:
                    33:e6:09:50:2e:7a:4f:2b:be:c8:a3:cb:a9:a5:39:
                    c4:24:12:6b:e8:57:7a:65:e0:f1:15:ef:60:38:1b:
                    95:10:cf:58:c6:57:c7:72:54:09:82:04:3e:5a:59:
                    0b:26:bc:12:64:07:5f:6e:73:25:67:79:d6:98:4d:
                    e6:f7:2d:bd:70:2d:f2:78:97:c8:78:40:87:fa:56:
                    2e:86:9b:5f:94:16:a6:37:e0:4e:b2:35:8c:8d:95:
                    3c:09:c5:7d:80:a5:3c:e8:5a:d3:2e:51:7c:03:8f:
                    93:bc:ec:cc:9f:8d:a4:e1:ba:5b:3b:bd:ed:e8:b1:
                    9d:f7:36:05:97:71:d4:53:61:7d:f9:5b:8c:a0:da:
                    ac:39:c4:aa:ba:4a:30:ff:3c:c9:62:40:1e:ab:40:
                    d4:97:7f:41:bf:b0:6d:c0:4c:14:12:e9:3f:97:15:
                    34:9f:6a:d8:56:2c:bf:1f:f7:02:e7:21:2f:48:71:
                    89:c0:9d:a8:55:f7:f4:25:f7:7c:96:26:5e:ec:ec:
                    e4:6a:60:0d:98:fc:d3:a0:c9:ce:b7:2b:4d:c7:44:
                    a1:b1:20:d7:6f:d0:81:f7:02:81:63:64:e2:a2:7c:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9D:7C:7E:1C:74:1C:E0:EE:0E:CC:B9:8C:5B:BB:DA:1C:C4:23:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e88512b0-3b1e-4341-812b-fbd0c25dcb92/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e88512b0-3b1e-4341-812b-fbd0c25dcb92/1490c11baed518117372b8e4254a7d16c170f2d6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:d7:88:00:98:b3:3b:f7:1b:ba:02:98:5a:fc:ca:a6:60:d8:
         3b:b1:a9:b7:15:cb:97:17:16:e8:4b:77:a0:4d:7e:3d:d2:5d:
         89:f0:ba:ea:b9:b9:85:2c:79:ec:84:e4:28:fa:a0:bc:d2:6d:
         cb:27:d4:b3:6d:8a:5b:69:7f:fd:93:33:2f:6a:72:fd:4e:08:
         2d:8f:b2:28:a3:c9:a3:09:f0:7e:80:c0:41:66:ba:ba:64:09:
         18:0d:aa:31:5c:51:61:20:d0:82:72:10:39:af:4d:4b:58:87:
         94:06:cc:b6:29:aa:a3:e8:1c:41:4c:d5:fa:2a:96:ac:23:b6:
         d0:97:ac:52:19:2b:70:b8:d2:ac:d5:26:c1:d0:91:15:20:95:
         48:09:93:da:75:20:21:7a:1a:7d:f5:9b:2c:f3:db:6c:7a:dd:
         fd:02:5e:4a:9c:25:e9:e1:40:30:a5:d4:93:1a:4e:2f:0c:f8:
         fb:cb:d9:c8:4b:79:6a:38:41:f4:0e:17:e6:79:e7:ab:86:4f:
         5b:64:32:81:be:c3:dd:44:d2:25:3c:0e:bd:27:78:b2:70:00:
         91:de:fb:3b:e0:92:80:75:8b:17:e5:90:5d:a5:b7:cd:3b:81:
         09:89:45:04:d8:75:cb:a5:2c:a0:3c:3e:12:55:d9:a9:a7:36:
         4a:57:39:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----