Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f56abce410e73d51495fecd2f14268781937ace.cer
File:                     1f56abce410e73d51495fecd2f14268781937ace.cer (raw, json)
Hash identifier:          647uS3Xm8PTYFxaVCdGGVMRXphaePg7zXDYyWnGGCtU=
Subject key identifier:   BE:8B:85:75:EC:BC:05:0E:BD:F5:98:12:49:07:BC:62:12:F1:8C:FE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A90CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/1f56abce410e73d51495fecd2f14268781937ace.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 30 Aug 2022 19:56:02 +0000
Certificate not after:    Sun 16 Mar 2025 21:56:44 +0000
Subordinate resources:    AS: 64139
                          IP: 2803:7090::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17469645 (0x10a90cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 30 19:56:02 2022 GMT
            Not After : Mar 16 21:56:44 2025 GMT
        Subject: CN=1f56abce410e73d51495fecd2f14268781937ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:c9:6b:18:48:f6:9a:c2:2c:be:22:10:e3:
                    8b:9c:5a:ed:aa:51:46:aa:60:4e:f7:23:b4:6d:3a:
                    df:0b:67:cf:20:8c:e4:db:4a:65:56:46:33:89:da:
                    85:88:f5:51:d4:05:c0:50:80:fc:07:00:d7:f1:74:
                    7c:a8:21:ac:82:5f:1f:b4:4f:eb:e6:89:ef:11:0a:
                    03:f1:32:a9:ce:f0:ee:58:85:52:42:0c:d3:d0:f0:
                    79:26:e9:98:cc:62:fe:a1:f9:01:40:17:c9:9b:79:
                    3d:7b:16:35:c2:0f:f9:e9:89:a5:ef:3c:d4:8b:cf:
                    8a:eb:e8:85:80:3b:3a:03:2c:53:60:1c:0c:af:76:
                    ae:70:31:fb:3c:7e:31:f9:d5:8a:a6:ed:26:a9:72:
                    0e:a9:25:23:45:dd:13:80:07:c3:0d:11:9f:d9:ef:
                    82:b3:04:d9:34:5d:bc:dc:e8:56:f9:81:62:ea:a2:
                    64:65:06:0d:88:e4:e4:7d:20:7c:89:82:84:4b:2a:
                    85:72:ea:b0:3d:16:80:fe:29:a8:17:41:71:2f:22:
                    a4:0c:3b:75:5a:4b:63:36:00:db:a6:88:6b:d3:9d:
                    7a:28:60:67:de:ed:dc:05:69:f0:0b:ff:d4:55:6e:
                    98:16:6a:3d:7f:c1:6c:9f:7b:38:44:46:e9:3b:4d:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8B:85:75:EC:BC:05:0E:BD:F5:98:12:49:07:BC:62:12:F1:8C:FE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/1f56abce410e73d51495fecd2f14268781937ace.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7090::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64139

    Signature Algorithm: sha256WithRSAEncryption
         3f:25:e4:86:d1:de:7e:1d:ca:af:72:45:10:45:06:e0:29:c3:
         21:f6:40:d4:d3:6c:7a:ac:f7:13:d4:d7:a7:45:03:36:99:f2:
         4c:6e:f6:db:25:38:6d:a6:9e:b3:e5:e6:cd:a4:c3:c0:30:90:
         5a:a3:43:92:45:2f:06:c1:18:0c:7d:8e:ca:9c:be:dd:77:26:
         f8:1f:a5:14:7b:bd:c7:32:4b:06:31:7e:b8:3f:49:82:82:6e:
         c1:e3:c7:06:bb:35:44:bc:9f:09:9f:e7:9b:fe:99:72:1b:c2:
         f3:b0:03:cd:3b:c1:c7:28:6a:df:fd:30:bc:bd:dc:f0:7b:c3:
         62:65:cd:15:6f:41:4e:bf:c2:54:ba:57:23:3f:72:46:3e:a8:
         b8:92:69:f3:de:97:c4:e2:f6:f8:ab:e3:26:bf:7c:18:b0:2f:
         75:51:2b:12:a0:6d:ff:5c:9f:44:12:3f:72:54:49:b1:9c:65:
         da:bf:d6:fe:72:b8:7a:39:1e:7e:57:0e:ce:58:18:7f:1f:72:
         78:1a:c2:19:89:4c:5e:58:0d:82:2a:2f:86:3f:ef:37:70:9e:
         19:d9:3c:58:fa:4f:46:10:60:f1:b0:37:8f:7c:18:1c:a6:b2:
         60:62:74:cd:14:f6:2c:da:c1:32:5d:25:4a:1f:92:3f:87:19:
         07:2d:b0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----