Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/0AC8C77DC43B1900E5BFB28C7D50064C80B25CA2.cer
File:                     0AC8C77DC43B1900E5BFB28C7D50064C80B25CA2.cer (raw, json)
Hash identifier:          Iv9XX1RmdGtObLFIWdf+gNR1KFK76PGDZxZ074/Lgrc=
Subject key identifier:   0A:C8:C7:7D:C4:3B:19:00:E5:BF:B2:8C:7D:50:06:4C:80:B2:5C:A2
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       0976384D6AA304298FE7CAC509B0E48CA16DD1D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Manifest:                 rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/2/0AC8C77DC43B1900E5BFB28C7D50064C80B25CA2.mft
caRepository:             rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/2
Notify URL:               https://rpki.pedjoeang.group/rrdp/notification.xml
Certificate not before:   Sun 11 Dec 2022 01:30:02 +0000
Certificate not after:    Sun 10 Dec 2023 01:35:02 +0000
Subordinate resources:    IP: 2602:fcd3:130::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:76:38:4d:6a:a3:04:29:8f:e7:ca:c5:09:b0:e4:8c:a1:6d:d1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec 11 01:30:02 2022 GMT
            Not After : Dec 10 01:35:02 2023 GMT
        Subject: CN=0AC8C77DC43B1900E5BFB28C7D50064C80B25CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:05:bd:40:63:ac:21:06:b0:cc:36:c1:4a:
                    3a:0a:09:8f:fb:2a:35:5a:65:38:72:f5:65:de:73:
                    d1:f9:b4:5c:3b:cd:ec:f6:19:46:25:c2:db:08:8e:
                    aa:bc:d9:84:66:57:6b:23:96:a1:14:4e:e6:82:ba:
                    b1:af:13:4e:f1:11:69:fb:6c:9a:1d:b7:17:6f:fa:
                    26:e0:58:cf:a3:a6:21:dc:41:17:7e:c7:36:f8:2a:
                    13:b2:5b:86:47:44:f0:a1:33:5b:eb:1c:0d:b7:07:
                    df:2f:86:06:41:c8:52:e1:dd:e8:b1:49:7c:7d:d9:
                    11:a8:46:25:56:c7:e8:99:95:5b:5f:a0:8f:c8:d3:
                    a7:4b:31:78:03:9d:89:fc:c1:fd:7a:c2:21:1b:8e:
                    68:30:da:35:8e:61:fd:b8:50:82:48:c2:e0:3f:1f:
                    b1:f4:dd:fb:40:36:46:36:f5:c3:eb:52:3c:67:60:
                    d0:cf:01:86:81:37:18:ef:81:25:d7:ca:49:10:db:
                    66:10:d1:fc:39:e4:83:c9:c2:c8:e1:fd:f6:94:94:
                    92:3c:c0:76:5f:6f:98:cb:14:39:80:d8:31:a2:66:
                    a0:1d:b6:49:be:1a:18:e9:4d:30:6d:08:51:74:47:
                    fb:70:97:74:fe:4a:04:83:6a:e2:8e:1c:16:f3:84:
                    15:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:C8:C7:7D:C4:3B:19:00:E5:BF:B2:8C:7D:50:06:4C:80:B2:5C:A2
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/2
                RPKI Manifest - URI:rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/2/0AC8C77DC43B1900E5BFB28C7D50064C80B25CA2.mft
                RPKI Notify - URI:https://rpki.pedjoeang.group/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:130::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:90:22:7b:6d:ad:20:30:b2:24:36:5d:df:13:35:ae:2f:fd:
         62:d4:68:8b:74:c2:3a:7f:2e:94:ca:86:89:ee:22:50:c2:f3:
         48:df:c3:ba:ec:05:b6:d8:e4:6a:b3:6b:1c:0f:d1:73:05:8d:
         eb:00:e2:02:2f:70:30:a6:46:c4:47:fc:62:19:39:42:90:60:
         8d:05:f3:52:5e:33:9b:22:14:52:a4:47:98:c2:62:2e:cc:21:
         6f:9e:61:ad:9f:61:cb:66:fd:db:25:61:a3:b9:9b:b8:8c:6c:
         57:53:45:2c:2d:f9:90:e0:e6:6f:86:9d:7e:54:7a:b7:ed:27:
         74:5f:94:8a:e8:ac:46:57:a6:85:02:e2:55:3c:ea:44:cc:a2:
         44:e5:e3:e2:8e:58:4f:99:75:f5:04:78:ed:89:87:69:7f:ce:
         d3:ed:c2:5f:60:de:37:c2:10:23:8a:84:ea:8e:d1:c3:ea:0b:
         cb:fe:69:1a:27:c3:35:56:c9:ef:7e:40:9c:a6:1e:74:e4:d3:
         1a:0e:5e:84:1c:6e:ce:af:c0:c5:ac:ae:8f:ff:6a:2d:35:0e:
         93:68:03:d7:04:3c:29:8b:4d:cf:bd:43:ce:c9:df:c3:96:bc:
         6a:bd:ab:0c:9b:95:33:c3:36:08:55:2e:22:a5:36:0f:3f:87:
         30:5d:f8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----