Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/910ca40a6ad327e4966ae9008100e7118245b178.cer
File:                     910ca40a6ad327e4966ae9008100e7118245b178.cer (raw, json)
Hash identifier:          hnmVkjzhSsh11eX2S3lYQyFXK8+VcAf9Awrw42sNz28=
Subject key identifier:   4B:FD:A3:ED:C2:89:7F:48:84:FD:8A:E2:37:EE:9B:7D:91:95:4B:82
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4DB08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fbfce303-9e17-43de-b56a-f8866985fb0a/910ca40a6ad327e4966ae9008100e7118245b178.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fbfce303-9e17-43de-b56a-f8866985fb0a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 14:18:24 +0000
Certificate not after:    Fri 27 Dec 2024 19:46:55 +0000
Subordinate resources:    AS: 52445
                          IP: 201.220.25.0/24
                          IP: 2801:1d::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14998280 (0xe4db08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 14:18:24 2023 GMT
            Not After : Dec 27 19:46:55 2024 GMT
        Subject: CN=910ca40a6ad327e4966ae9008100e7118245b178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8e:70:02:56:0a:3f:07:7c:65:82:c2:e0:46:
                    09:fc:79:01:33:77:40:85:f0:a3:66:82:83:db:d8:
                    c7:cd:2f:84:1d:df:c5:52:03:f6:97:a2:9c:61:f9:
                    a2:92:d3:eb:ea:54:5d:e8:f8:7f:62:2f:a6:93:c3:
                    3d:38:da:ea:4b:60:b3:90:ce:fa:c1:f5:44:14:1e:
                    d7:5c:33:7e:53:05:7a:8e:b3:79:08:55:a1:f5:fd:
                    3a:7a:81:71:9f:47:71:aa:6f:6d:45:df:4f:78:df:
                    df:cf:70:a9:f1:ab:99:e9:ab:2f:9f:da:8d:e5:b7:
                    9f:c5:d3:c0:7f:5f:37:31:12:07:2b:d4:2e:00:bb:
                    fb:69:d8:1b:f2:ea:6e:b2:77:a0:60:86:4b:76:7a:
                    f5:f7:95:b4:8b:4c:2e:2d:58:5e:e8:45:a6:b0:f4:
                    2a:a7:49:b8:4c:cf:0a:41:af:0a:fb:53:c9:89:a8:
                    a6:c7:c1:cb:c6:ba:cb:85:77:d7:e4:6c:0d:d3:b1:
                    6c:e7:09:54:a0:b6:d4:f2:b5:f8:88:46:bf:a1:b5:
                    64:ce:0d:d8:e7:35:8a:84:ff:7e:56:3d:17:41:18:
                    94:cf:c8:10:b4:4e:c8:6d:98:56:b2:cd:6a:fd:89:
                    36:8a:0f:b1:cb:3c:bd:02:86:63:09:16:3e:a6:24:
                    3d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FD:A3:ED:C2:89:7F:48:84:FD:8A:E2:37:EE:9B:7D:91:95:4B:82
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fbfce303-9e17-43de-b56a-f8866985fb0a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fbfce303-9e17-43de-b56a-f8866985fb0a/910ca40a6ad327e4966ae9008100e7118245b178.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.25.0/24
                IPv6:
                  2801:1d::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52445

    Signature Algorithm: sha256WithRSAEncryption
         13:c8:cd:ef:f4:ea:c6:8a:be:60:04:d3:71:f3:44:ae:00:5d:
         b8:d2:f3:ae:fd:9a:b3:9c:f3:97:11:e9:db:d8:a1:0a:a8:88:
         06:f8:5f:a9:8c:95:bb:ce:22:6f:60:06:e8:5f:b0:91:39:00:
         85:33:77:f9:1c:8f:2e:ce:4a:82:2c:f5:da:31:10:a7:3a:1e:
         2e:fb:c1:ea:0c:4a:4e:82:0e:d3:04:f5:de:8b:cc:b5:0d:0a:
         36:e5:ec:95:8b:9e:ed:a7:8d:4a:e8:46:3a:de:02:f1:41:7f:
         92:8e:90:86:12:3d:6c:54:f9:0c:86:52:16:00:56:82:61:c8:
         eb:e0:4d:43:d9:13:e9:09:62:98:7e:9d:5f:4a:69:34:50:89:
         ee:a4:3a:54:70:d5:53:47:85:10:80:70:d0:5b:5a:5f:fc:bb:
         16:40:73:81:4f:5a:e0:9f:97:ef:cd:18:37:b7:b0:0c:93:d1:
         45:7d:ef:9e:4b:43:91:af:6f:83:6d:cd:45:f1:e7:6a:09:3a:
         cc:d4:a3:a9:54:02:80:5a:c3:60:f1:08:6d:35:70:25:9b:ec:
         e9:b2:38:f4:5e:cb:d7:fd:ed:95:f3:e3:71:43:aa:39:9d:3b:
         c0:82:9f:ea:af:76:7a:0f:87:37:c5:44:1e:42:a3:0b:0e:43:
         2c:83:bb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----