Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e940870648ab99fc7bc72a40c6569a10b901daf2.cer
File:                     e940870648ab99fc7bc72a40c6569a10b901daf2.cer (raw, json)
Hash identifier:          NmmpASDOPvhp1Qfp0J5wxUxYrMzwbzJY/wvNw43cNFU=
Subject key identifier:   1C:B5:3F:E7:1C:F8:FE:3A:72:45:73:F4:00:9F:FD:DD:21:28:C2:34
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0110D2AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e9e9deb3-1a4c-403e-9908-eae96e539593/e940870648ab99fc7bc72a40c6569a10b901daf2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e9e9deb3-1a4c-403e-9908-eae96e539593/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Apr 2024 15:57:40 +0000
Certificate not after:    Sat 01 Nov 2025 14:00:00 +0000
Subordinate resources:    IP: 200.16.72.0 -- 200.16.78.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17879726 (0x110d2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 15:57:40 2024 GMT
            Not After : Nov  1 14:00:00 2025 GMT
        Subject: CN=e940870648ab99fc7bc72a40c6569a10b901daf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3d:2d:1c:cd:50:e9:14:43:c5:8e:14:69:ba:
                    62:99:d2:c3:0d:2f:96:69:41:3c:33:82:e8:36:89:
                    d0:82:e7:5e:76:3e:e1:a6:d5:a9:83:d0:f1:cb:4f:
                    76:1a:09:41:79:ae:56:1c:49:e2:bc:a3:9b:f9:7b:
                    42:ee:ff:12:7a:e2:98:a2:1c:23:0d:0b:ee:7c:4f:
                    45:cf:79:c6:c4:a9:52:ff:d7:c2:70:75:50:0a:66:
                    ea:c0:1d:ff:e7:f6:0b:b4:9d:30:1a:f9:38:8b:92:
                    8f:75:a6:ab:50:9b:09:5c:c9:98:7e:1d:33:ab:10:
                    1a:2d:f3:13:30:49:2c:25:55:a7:40:68:5f:33:ae:
                    04:0b:bf:28:1a:18:de:2f:3e:dd:ac:3b:0b:1b:43:
                    dc:1a:a0:da:8f:bb:0c:1d:a5:69:22:a6:0b:7f:7f:
                    27:a9:8a:4b:22:07:c0:e7:72:a9:9f:a9:4e:85:b0:
                    9d:d6:66:90:39:8c:20:d5:a6:31:06:cf:1e:bb:37:
                    6c:cc:d4:a9:f7:2e:de:77:8a:66:79:f0:b5:fa:a5:
                    c8:ee:f2:1c:be:35:51:a1:7f:a6:37:46:ca:d7:10:
                    15:c4:ad:eb:72:2b:ac:d8:f3:c9:4e:25:58:ae:7c:
                    f4:12:c4:c0:96:63:9c:c3:5c:6b:d4:19:6a:5b:88:
                    b5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B5:3F:E7:1C:F8:FE:3A:72:45:73:F4:00:9F:FD:DD:21:28:C2:34
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e9e9deb3-1a4c-403e-9908-eae96e539593/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e9e9deb3-1a4c-403e-9908-eae96e539593/e940870648ab99fc7bc72a40c6569a10b901daf2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.72.0-200.16.78.255

    Signature Algorithm: sha256WithRSAEncryption
         30:96:b9:1f:70:1b:76:70:53:33:17:33:70:66:22:b8:52:68:
         da:c3:18:93:3d:13:f6:d5:50:9b:b8:e0:17:1f:6d:1d:e3:67:
         cd:40:dc:a6:53:64:d0:0d:76:e6:48:3c:ae:5e:fa:4e:e8:2e:
         45:68:51:7b:f6:2b:ee:82:db:b9:e3:1a:98:de:39:5c:90:90:
         a5:47:8b:bd:da:45:4e:be:00:86:20:7e:3a:66:ac:5a:7f:02:
         2c:a7:55:83:12:14:02:c5:af:0e:81:d1:1b:3e:ad:48:03:d4:
         de:22:4b:5a:04:60:ee:07:cb:59:d7:05:56:81:55:cd:a9:6e:
         25:19:bb:ca:2d:d9:9a:6c:1f:a6:c8:60:9e:87:f5:cf:79:49:
         b4:47:4d:cb:a9:a4:31:0b:78:f2:ba:00:0b:54:04:81:05:14:
         ef:fc:c5:d7:5e:78:9f:d4:55:0a:04:b7:1d:59:40:12:f4:5a:
         69:a8:a7:1d:9a:85:cf:fc:77:d3:1d:46:bd:a3:60:84:92:f6:
         f4:21:6d:bf:2a:f3:31:7d:c7:16:30:e0:a9:ee:3e:3e:ba:3c:
         d7:ce:ce:cf:01:35:57:be:d3:d8:74:24:ad:b7:a6:91:e9:cc:
         34:06:3b:69:ed:9a:10:2e:4a:69:35:26:21:a4:bd:9e:b0:80:
         b7:38:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----