Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/056fdc910f648c2633cb30b1536e54b6329a5adb.cer
File:                     056fdc910f648c2633cb30b1536e54b6329a5adb.cer (raw, json)
Hash identifier:          b/6Py8czNhmOq9Jk5nThV6u8CJ9uALK6KvuAzh0kPMQ=
Subject key identifier:   FB:C8:CE:A6:C2:4C:A2:2E:A5:04:EF:3E:3F:DD:A6:C1:C2:75:06:DE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA5533
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2e1a052c-7505-4682-a3af-4d9690e83623/056fdc910f648c2633cb30b1536e54b6329a5adb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2e1a052c-7505-4682-a3af-4d9690e83623/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 17:09:07 +0000
Certificate not after:    Wed 23 Oct 2024 19:35:37 +0000
Subordinate resources:    AS: 263200
                          IP: 179.0.147.0/24
                          IP: 2801:12:c000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16405811 (0xfa5533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 20 17:09:07 2023 GMT
            Not After : Oct 23 19:35:37 2024 GMT
        Subject: CN=056fdc910f648c2633cb30b1536e54b6329a5adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:2d:f5:60:16:65:a9:54:6f:e4:ff:8c:60:
                    ed:58:35:5b:9e:1c:c7:28:e6:74:73:14:e6:da:23:
                    b9:4c:c5:bc:cf:11:20:8b:ab:7e:be:81:98:a1:98:
                    b8:05:3c:17:4c:0e:69:97:37:c2:90:64:dc:8c:31:
                    40:6e:0a:3d:63:2f:79:00:c2:9d:23:28:cf:42:a7:
                    3c:7e:8a:98:d5:10:00:2b:da:bb:40:bc:e8:c7:01:
                    5d:e6:23:25:c5:5c:25:f5:13:ec:e5:d6:af:85:1f:
                    fe:79:a1:0b:6b:fe:a1:a8:3e:b0:45:fa:7d:72:83:
                    a5:16:37:84:17:61:41:3c:42:8f:33:1e:08:fd:f2:
                    7c:b1:8a:35:36:0c:6f:14:b9:66:27:d2:94:39:80:
                    fa:21:dc:48:16:fb:ae:07:ed:d4:ed:75:fc:bf:98:
                    c9:f3:c1:f2:3c:30:1f:a4:aa:a0:56:91:5a:30:ec:
                    b3:60:d8:5a:59:ab:d3:fe:0c:92:24:53:8e:96:8f:
                    89:a3:1a:63:29:cf:57:47:94:9c:54:bb:39:a7:bc:
                    6d:1d:4b:74:74:46:2b:59:ee:28:9b:ae:a9:b7:53:
                    cb:f5:a8:ee:8f:67:56:f4:4c:0f:a0:8c:5f:9f:3d:
                    23:eb:58:9a:6a:4a:68:88:d7:11:6d:74:3c:90:9f:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C8:CE:A6:C2:4C:A2:2E:A5:04:EF:3E:3F:DD:A6:C1:C2:75:06:DE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2e1a052c-7505-4682-a3af-4d9690e83623/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2e1a052c-7505-4682-a3af-4d9690e83623/056fdc910f648c2633cb30b1536e54b6329a5adb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.147.0/24
                IPv6:
                  2801:12:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263200

    Signature Algorithm: sha256WithRSAEncryption
         32:93:fd:f0:f5:f2:2d:c2:e5:99:8c:f2:f6:0b:e8:47:a6:28:
         a7:b7:a9:03:4a:35:31:07:d1:c2:a2:63:2d:00:0e:9f:aa:61:
         da:bb:8b:28:53:fc:d6:d6:83:18:23:83:e0:12:9d:a6:b2:c6:
         12:5b:c1:a5:30:90:af:40:13:b5:2b:f6:31:8d:c0:a0:1b:e9:
         0d:01:98:e5:72:4b:2c:53:27:87:22:a5:f7:32:ab:f8:6b:39:
         2a:68:f6:b6:59:80:15:b9:80:2d:d4:54:27:71:b7:66:05:20:
         aa:9e:07:9c:6a:14:7d:4e:b2:cf:f1:df:b8:83:74:90:aa:b5:
         e6:ab:60:03:db:ca:31:1d:c9:6e:86:9c:38:dc:7b:86:88:d2:
         8a:f0:b6:eb:f9:85:bf:2f:2a:7c:52:2b:ea:6c:a7:cf:e2:d9:
         6f:c4:07:a7:81:b1:11:a0:67:7f:87:cf:03:cc:4c:24:31:4a:
         13:f8:3f:b6:dc:40:38:ec:c1:19:dc:98:5a:60:6b:93:f2:13:
         e2:b1:89:be:9b:56:c4:41:ce:0b:28:90:7c:2d:19:4f:27:2c:
         24:3c:30:e0:ea:b4:4d:4c:b2:9c:f0:a2:2a:61:e2:e3:62:78:
         eb:7e:c8:6b:f6:ec:5c:10:99:d8:3d:84:b7:0a:bf:c1:58:87:
         1a:c2:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----