Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/900d2a21105a50d34c927a999bf2ac354874ea26.cer
File:                     900d2a21105a50d34c927a999bf2ac354874ea26.cer (raw, json)
Hash identifier:          7bFwT3UdEduwT7ElEPJEeTvucVLiJv4JWhPN+zsg7Ho=
Subject key identifier:   0A:4B:B3:16:D7:C3:57:6E:40:D4:31:2D:23:1C:0D:CA:91:0E:5D:1D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010CFFBF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a0063122-0080-42c9-9d71-05c68cebfec2/900d2a21105a50d34c927a999bf2ac354874ea26.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a0063122-0080-42c9-9d71-05c68cebfec2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 17:40:42 +0000
Certificate not after:    Sat 25 Jan 2025 05:00:00 +0000
Subordinate resources:    IP: 150.161.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17629119 (0x10cffbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  6 17:40:42 2024 GMT
            Not After : Jan 25 05:00:00 2025 GMT
        Subject: CN=900d2a21105a50d34c927a999bf2ac354874ea26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:66:2d:11:42:94:2f:63:00:b1:e0:77:07:e4:
                    b5:75:13:b4:7e:8b:2f:ff:40:11:31:8c:06:19:c1:
                    a1:5b:88:41:4f:ab:4e:c1:f3:bc:e0:17:d6:e0:0b:
                    18:25:f8:fa:1c:b4:de:9c:18:cb:c9:f3:4e:b0:30:
                    26:3b:fb:e2:95:18:cb:dc:4f:3f:e0:1b:02:4f:aa:
                    f3:0d:61:7f:70:34:d6:b6:0b:24:08:62:b9:56:bf:
                    56:f5:de:28:83:27:df:75:c2:14:1e:e8:4d:e7:a8:
                    01:73:6c:ad:b2:8c:f4:b0:27:77:a5:07:70:30:c4:
                    9c:59:7b:86:d2:5a:7d:f0:b5:28:8b:f9:0b:14:42:
                    3e:d9:b4:23:ac:83:dc:97:c8:17:e0:fd:09:10:21:
                    3a:31:fd:62:1e:c2:d8:b6:77:5c:a7:c3:60:b7:da:
                    af:95:f7:0e:98:9e:fd:c0:be:19:81:33:5b:8e:6b:
                    db:93:5f:45:8a:18:7a:ee:cb:fd:32:65:ad:9a:f2:
                    0c:f3:6c:f9:2a:00:e5:5a:d7:92:0b:78:ba:78:25:
                    73:7b:9b:48:f8:99:a1:d5:68:09:e1:04:76:a2:93:
                    ad:80:00:00:d3:64:3c:f6:0c:78:c5:9c:8b:9d:0e:
                    5f:ae:d4:c0:91:88:70:4a:78:46:e7:bd:a3:2f:29:
                    0e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4B:B3:16:D7:C3:57:6E:40:D4:31:2D:23:1C:0D:CA:91:0E:5D:1D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a0063122-0080-42c9-9d71-05c68cebfec2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a0063122-0080-42c9-9d71-05c68cebfec2/900d2a21105a50d34c927a999bf2ac354874ea26.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.161.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:e2:c2:cc:5c:30:c8:f2:01:e5:66:df:1a:7d:16:b1:f8:49:
         52:a5:ae:15:3f:bf:83:01:ac:5a:59:82:cd:0b:ad:91:f3:1e:
         de:09:85:eb:b7:40:47:8e:03:e6:a4:99:f8:07:8d:21:96:c8:
         b2:7b:d6:75:6c:5c:77:0d:e0:73:b2:ef:49:06:45:2c:ee:03:
         ee:ce:e1:2a:f2:e7:cd:9e:f5:dd:ef:17:ff:ce:c6:58:ce:a4:
         c8:b8:a4:f2:70:d4:6e:03:c1:3a:6d:06:4b:78:51:e4:33:69:
         a6:14:a9:7e:28:2b:c1:9d:b6:45:92:95:f2:54:12:79:c0:7c:
         eb:10:89:20:79:76:70:bc:fa:e7:67:34:4c:5e:fd:2b:42:3a:
         2d:b3:e2:f2:00:48:8b:97:07:29:65:53:96:2d:cf:75:07:73:
         37:3e:9a:fa:fd:5b:3f:95:60:32:04:17:62:a2:76:56:ed:fc:
         07:b8:e3:a1:a5:38:aa:77:7a:ad:05:e1:2c:76:63:1c:de:eb:
         5b:9e:c4:91:37:7c:a5:33:02:ea:89:dc:14:39:b7:65:14:9b:
         af:40:6f:59:15:c2:20:47:fb:a1:bf:81:ed:17:c6:6a:68:57:
         14:47:80:1c:9a:5b:a6:90:7c:bd:85:c1:5a:6f:e8:cd:4c:1d:
         b9:1f:ac:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----