Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d354ab3ca270655543d3c9e528b14ca0f1d48576.cer
File:                     d354ab3ca270655543d3c9e528b14ca0f1d48576.cer (raw, json)
Hash identifier:          gKiN+UZaQF2Z9UuXy5FhONj2xOEkTo3sQKyY5ru/2ew=
Subject key identifier:   B9:87:6C:E0:39:AB:85:DE:96:EF:41:48:87:B9:B1:66:6C:D6:6E:35
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0109D7F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2c833fa1-5df3-420f-b31d-a5290499d8d5/d354ab3ca270655543d3c9e528b14ca0f1d48576.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2c833fa1-5df3-420f-b31d-a5290499d8d5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 08 Feb 2024 17:32:32 +0000
Certificate not after:    Sat 01 Nov 2025 14:00:00 +0000
Subordinate resources:    IP: 200.3.160.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17422325 (0x109d7f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  8 17:32:32 2024 GMT
            Not After : Nov  1 14:00:00 2025 GMT
        Subject: CN=d354ab3ca270655543d3c9e528b14ca0f1d48576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:6e:67:d1:f8:84:63:44:b4:49:cb:a5:bb:
                    e3:82:33:8b:47:83:f3:85:81:2b:54:20:0c:37:24:
                    93:04:d5:de:60:7c:8b:c0:82:cc:6c:bb:59:7b:4c:
                    97:c3:2f:94:47:f8:a5:e1:e1:49:cf:78:5b:97:fa:
                    76:d0:b5:ce:ee:22:23:c9:12:fe:07:1f:89:f1:52:
                    71:35:d6:31:07:fd:5e:3e:5f:75:74:f8:8a:14:cd:
                    1c:e7:b7:18:31:ab:e8:8a:d7:69:e6:3c:d7:ec:f0:
                    d3:32:03:12:df:3e:53:5e:78:f3:fc:71:10:2d:26:
                    70:15:ba:9b:b9:0b:84:c9:83:6e:b9:c6:fd:02:34:
                    ee:5c:13:73:1d:fc:9d:23:1a:61:2d:82:e4:a8:7c:
                    56:56:b6:75:37:54:26:3f:f7:b0:3e:5f:5d:7a:4d:
                    5e:23:7b:93:d5:ca:76:bd:fa:71:5e:6a:76:b5:78:
                    c4:b8:a5:35:49:e5:c2:bf:7a:47:f4:ba:0f:8b:d2:
                    da:e7:6d:56:e8:3b:7b:71:1e:e0:f3:93:7a:e6:a3:
                    de:04:c6:c7:90:d4:a4:b5:6f:d5:43:96:66:80:88:
                    9f:56:cb:bd:c8:e6:cd:2e:80:f3:de:69:a5:8d:2d:
                    2c:7a:0c:24:b8:97:fd:7e:2e:46:71:ad:0d:d3:95:
                    9c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:87:6C:E0:39:AB:85:DE:96:EF:41:48:87:B9:B1:66:6C:D6:6E:35
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2c833fa1-5df3-420f-b31d-a5290499d8d5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2c833fa1-5df3-420f-b31d-a5290499d8d5/d354ab3ca270655543d3c9e528b14ca0f1d48576.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:09:91:97:be:b9:f3:42:2f:45:ab:b9:cc:03:71:6a:85:a9:
         47:69:9e:bc:3f:a1:32:b0:dc:b6:65:71:80:a9:d1:f3:a6:79:
         f8:51:52:37:dd:e0:6f:65:7f:ef:32:69:c9:a0:33:7c:1f:13:
         1c:94:23:3c:50:f9:f4:e5:26:82:af:5f:8a:de:0e:b5:a4:ab:
         a7:b3:a6:a5:01:18:d4:a1:b9:84:ae:cd:da:15:e3:8f:90:ab:
         28:bd:ca:cb:61:da:ac:dc:f9:70:07:dc:45:c6:9f:64:b8:7c:
         ef:fd:8f:67:8a:78:43:d0:47:30:f2:00:9e:5a:dd:4e:86:0c:
         59:d7:2d:65:55:c9:55:cc:01:35:79:8f:c5:10:6c:b3:71:20:
         38:27:7a:c8:85:4a:ac:6b:f6:d8:df:46:2d:48:3b:88:b4:4c:
         af:ab:23:74:b6:60:95:bb:eb:bb:e1:98:63:08:cc:df:60:d3:
         85:b3:46:52:04:26:76:5b:79:9a:ab:08:e5:35:1a:7f:5f:2f:
         8d:37:8c:49:c7:32:31:18:16:3b:95:fe:5e:21:c6:35:ce:b6:
         e0:a2:e3:89:94:f6:60:af:31:af:1a:fa:b3:8f:dc:eb:62:ba:
         6e:81:52:b0:50:09:c3:0b:49:ee:cc:06:79:79:5d:01:0a:2e:
         e4:3d:b6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----