Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer
File:                     942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer (raw, json)
Hash identifier:          QJINc4Uass6blxgzV/nlUrJpZxHHtA8/Re7BsJjXBnk=
Subject key identifier:   94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       1422361B88CE6D7619E0DA803B09E7431BC47FD0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Jun 2024 00:45:03 +0000
Certificate not after:    Tue 10 Jun 2025 00:50:03 +0000
Subordinate resources:    IP: 181.114.232.0/21
                          IP: 2803:7500::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:22:36:1b:88:ce:6d:76:19:e0:da:80:3b:09:e7:43:1b:c4:7f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Jun 11 00:45:03 2024 GMT
            Not After : Jun 10 00:50:03 2025 GMT
        Subject: CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:ce:a0:21:8b:25:76:2c:14:97:0f:10:1e:
                    e6:db:d2:d7:5d:76:b0:98:47:6b:f7:d9:42:a7:42:
                    07:7f:cf:da:e5:46:c6:d8:c0:7f:07:14:00:87:ce:
                    bd:31:10:6a:12:f5:99:01:93:aa:20:c0:e8:2e:3c:
                    c2:1e:71:a7:78:b2:63:e9:54:9d:e4:43:02:e5:0b:
                    28:a0:ed:99:c8:d7:c1:ef:a6:cb:54:28:1e:40:72:
                    cd:23:e2:d7:d5:ee:5c:bd:37:3e:10:b3:d7:67:2b:
                    26:ff:11:12:20:d5:0b:80:70:59:92:38:0c:29:4b:
                    97:b7:f1:6d:ed:45:ad:79:6d:ee:da:88:fb:f9:15:
                    58:1b:3c:03:55:de:cd:70:d6:48:67:fd:62:2d:7b:
                    1b:47:d5:b8:76:80:dc:ad:c3:4c:38:19:33:8d:39:
                    2e:ec:de:46:11:fd:42:a8:73:9a:66:d7:74:2f:1b:
                    5c:dc:59:33:27:dc:d1:c7:ae:71:16:18:61:a0:a2:
                    2d:5f:4a:57:6a:33:e7:be:64:f1:56:b4:cb:13:b0:
                    cd:5c:e6:13:e9:82:40:20:32:13:55:32:a6:6c:dd:
                    7f:a8:48:58:ae:b8:a9:a9:07:bb:ee:86:ed:ae:4c:
                    c0:6b:57:bc:3d:bb:5e:37:1e:79:85:0b:04:ff:fe:
                    2b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.232.0/21
                IPv6:
                  2803:7500::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:67:3e:0d:41:68:12:48:54:a5:c9:2f:28:9d:fe:2f:8c:d6:
         ea:55:f9:4b:c2:e1:c8:3d:66:13:48:96:da:06:da:27:8e:79:
         04:0c:bf:59:84:ad:11:21:83:13:c6:85:75:61:ff:82:61:0b:
         8b:aa:3c:a2:d8:5a:b4:fe:ae:86:41:14:be:51:ac:3b:a1:04:
         4e:91:4f:62:e7:f9:ca:3f:1e:60:da:99:27:36:99:37:33:4c:
         a3:10:fd:c9:e7:8d:95:2c:e5:75:65:e5:07:06:a6:ef:8f:27:
         51:78:32:44:75:c6:5f:33:d1:a2:e2:d0:2d:43:88:bb:74:3c:
         5d:80:9c:7b:6a:8d:96:c0:60:c0:df:47:9f:37:be:70:81:df:
         f0:24:58:5f:8c:a7:5b:b6:8a:97:9e:54:1f:d1:e1:39:92:41:
         d4:15:e4:88:c3:a1:a9:bd:0c:b9:1f:a3:cb:7c:1b:64:2f:67:
         2a:d9:f0:7a:ef:89:0a:f2:7e:c8:9e:38:2d:e3:e9:e2:79:07:
         d0:fc:fe:5f:ee:61:ff:71:69:45:78:15:27:85:6c:d3:b3:a3:
         42:85:fc:8f:ad:84:b9:2c:37:8d:d4:4d:df:9a:ba:8a:cb:5f:
         c2:bd:9b:18:fc:81:c1:d7:c8:4a:bc:d1:d7:b3:cd:33:41:82:
         d0:c7:a6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----