Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70f50d1045a246b518ba0542b6fec0e6cf9a097f.cer
File:                     70f50d1045a246b518ba0542b6fec0e6cf9a097f.cer (raw, json)
Hash identifier:          NmdFY+ABmUY3yaU2KfREJvzhoe24JtOk28q6RZsg1ZE=
Subject key identifier:   27:2B:FE:99:EA:C6:B9:DE:9C:71:5D:35:A3:CA:F2:63:99:DE:D7:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E6AFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3ed0804f-a4bc-4242-b44d-24ce06ce381d/70f50d1045a246b518ba0542b6fec0e6cf9a097f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3ed0804f-a4bc-4242-b44d-24ce06ce381d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 11:47:31 +0000
Certificate not after:    Thu 08 Jan 2026 22:51:02 +0000
Subordinate resources:    IP: 200.194.184.0/22
                          IP: 2806:41a::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17722107 (0x10e6afb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 18 11:47:31 2024 GMT
            Not After : Jan  8 22:51:02 2026 GMT
        Subject: CN=70f50d1045a246b518ba0542b6fec0e6cf9a097f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:55:c3:52:e9:fb:70:c3:99:10:66:0d:94:
                    a8:53:9b:8a:38:7b:81:f3:5f:86:87:94:59:ce:71:
                    27:55:65:8f:44:18:49:13:d0:fe:b7:10:4c:7c:08:
                    6d:7c:a6:8e:ad:77:1b:ef:62:e3:59:2f:c6:d3:55:
                    42:cd:d3:d8:8d:9b:b2:19:3c:d6:74:e0:90:c3:f1:
                    0f:89:23:7b:93:b5:37:a3:ff:d7:5a:fa:6e:6c:b1:
                    2a:44:8c:48:d4:c7:70:c6:b9:d1:2f:cb:7e:df:ac:
                    5f:a1:71:09:ba:d3:55:36:7c:64:a2:7a:5f:d7:bd:
                    2b:3d:e7:a4:21:56:69:c8:5b:3b:fb:60:58:7d:5e:
                    18:0a:8b:41:d2:9e:43:2b:05:f4:9f:67:85:4b:98:
                    1e:76:48:eb:90:73:a7:2f:03:f6:5f:4b:80:f3:7e:
                    d3:d5:f6:55:f3:6a:3a:d6:53:ad:8c:2e:58:3c:ae:
                    1b:5f:f0:d4:ce:66:b9:db:b9:4a:c3:02:60:65:89:
                    73:4a:cb:5a:77:51:40:29:4a:81:b3:1b:fc:b6:5e:
                    f7:05:96:4d:e6:72:ff:e9:45:36:85:e0:d2:79:4a:
                    f1:92:80:ac:e7:0d:88:3e:b3:ba:59:94:ac:16:73:
                    dc:b1:54:d1:94:78:e8:ae:15:eb:b5:c1:09:78:6e:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2B:FE:99:EA:C6:B9:DE:9C:71:5D:35:A3:CA:F2:63:99:DE:D7:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3ed0804f-a4bc-4242-b44d-24ce06ce381d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3ed0804f-a4bc-4242-b44d-24ce06ce381d/70f50d1045a246b518ba0542b6fec0e6cf9a097f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.184.0/22
                IPv6:
                  2806:41a::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:a2:18:cd:99:ac:7f:36:6d:d3:33:aa:ad:e4:4d:70:8b:34:
         68:8c:de:a2:04:e4:ed:40:aa:9e:88:61:ed:1c:28:b1:68:83:
         5f:73:eb:b4:54:45:7d:a5:b1:87:09:12:cd:cb:2e:2a:c9:e4:
         71:d0:00:26:87:8c:71:11:80:28:be:20:7e:51:2a:54:a0:0d:
         32:06:04:fb:d7:c0:a8:52:c3:d6:ca:ec:cc:99:51:19:18:a9:
         5c:2c:7e:5f:7f:d3:f0:21:a4:0e:d2:4e:77:c0:5a:73:96:45:
         be:ab:46:d2:c6:58:67:2e:40:c0:2f:9f:1e:87:f7:14:4a:56:
         ed:6e:26:22:86:50:ae:82:55:3f:ff:41:bf:88:84:fb:d6:93:
         da:d8:59:1e:04:81:a4:e6:df:b4:91:7a:be:01:15:03:d8:41:
         ce:3b:2a:00:61:65:2c:b6:97:4a:ae:eb:ad:bb:c0:f4:91:b9:
         b5:bc:72:a2:5a:32:f4:b1:fb:d5:91:b4:fe:e8:4a:99:1c:97:
         ee:15:23:c0:97:cb:f9:12:b3:33:6a:65:06:2a:b3:c2:58:96:
         bd:60:ac:6f:de:23:d4:32:1a:ee:30:73:f7:d5:f1:1f:f4:e6:
         c6:91:9f:9c:81:6b:5f:ee:01:7c:93:49:f6:30:8b:cd:53:c8:
         a1:d6:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----