Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/256cb573df0102ba8d8807aa0d9b188a597126c9.cer
File:                     256cb573df0102ba8d8807aa0d9b188a597126c9.cer (raw, json)
Hash identifier:          IFW7/aoG+RW+T3g6W8If++p1aUGwE/qf9Q2YCLHxKBk=
Subject key identifier:   33:A7:7A:5A:1D:4F:65:D2:52:BD:58:08:35:8A:97:05:F4:0C:D3:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0E2FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/40b6d499-053b-496c-a3a5-5a25313b507f/256cb573df0102ba8d8807aa0d9b188a597126c9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/40b6d499-053b-496c-a3a5-5a25313b507f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 01:03:00 +0000
Certificate not after:    Wed 23 Apr 2025 15:18:51 +0000
Subordinate resources:    AS: 272811
                          IP: 2803:7890::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15786747 (0xf0e2fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  6 01:03:00 2023 GMT
            Not After : Apr 23 15:18:51 2025 GMT
        Subject: CN=256cb573df0102ba8d8807aa0d9b188a597126c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:c9:75:85:f1:37:8c:5d:b5:aa:1c:94:1c:
                    c6:bf:3e:c2:62:f7:03:05:41:16:d6:c0:42:2d:cb:
                    45:6f:ea:f3:f1:8d:2e:11:e4:59:47:87:f6:e3:11:
                    53:79:eb:c8:e6:11:f1:f1:13:cd:de:63:67:82:7b:
                    71:6e:59:9c:fa:b5:ca:59:45:6f:9c:30:6a:26:a6:
                    49:96:61:d8:7e:7c:60:fd:f4:67:68:a5:3b:a0:96:
                    83:b9:74:2f:d8:ac:7a:9e:70:9b:5d:21:9e:45:f6:
                    81:ef:f0:0b:8d:7b:0d:7d:04:72:dc:8d:0e:7e:b0:
                    74:48:c0:0e:f4:c7:3c:fd:d9:34:27:0d:fc:b7:6a:
                    29:1c:d3:4d:38:66:9b:e2:3e:ea:d3:a7:62:d2:d4:
                    62:57:da:b4:c5:22:1e:f3:10:58:b9:bb:fd:b1:b2:
                    e9:b0:24:8d:71:12:91:4c:89:31:51:ed:e7:36:20:
                    bd:68:aa:ae:fb:b7:df:21:d7:1e:d8:22:f4:c4:61:
                    aa:95:0a:68:81:19:94:68:8e:dd:6b:6b:75:7f:7e:
                    d1:6f:66:f3:27:8a:be:c3:a6:06:21:e6:b1:d5:c0:
                    48:b1:d1:85:72:32:af:34:b1:8f:f3:8b:1e:87:fa:
                    7c:c2:3f:08:e4:47:d3:0c:76:be:e0:fc:2e:e2:69:
                    d0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A7:7A:5A:1D:4F:65:D2:52:BD:58:08:35:8A:97:05:F4:0C:D3:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/40b6d499-053b-496c-a3a5-5a25313b507f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/40b6d499-053b-496c-a3a5-5a25313b507f/256cb573df0102ba8d8807aa0d9b188a597126c9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272811

    Signature Algorithm: sha256WithRSAEncryption
         92:6b:ac:32:1c:4e:92:44:f6:43:28:03:74:ed:b1:bd:ea:55:
         ad:f4:13:14:b5:ca:b4:b3:35:c8:7b:7a:41:22:9a:0a:94:ea:
         e2:80:3b:0f:67:b1:2c:c4:1d:ca:65:24:dd:62:88:d0:65:0f:
         22:e1:27:7c:fa:55:03:35:a8:86:95:ed:31:8f:a4:b2:cf:2c:
         30:1b:5e:47:24:03:2e:9c:21:4b:68:5c:b8:15:61:77:f5:1d:
         fe:83:99:cd:e4:0c:35:60:7c:87:e6:af:f8:54:4b:51:52:31:
         0c:90:69:42:1c:04:08:f3:15:49:1a:55:25:7b:ba:0b:16:56:
         03:98:eb:33:72:3e:e9:85:d1:03:45:41:78:16:64:b1:f1:ab:
         e3:f8:81:2b:b7:c7:d6:28:92:e2:55:94:da:25:05:75:2c:9e:
         ef:c8:3b:e6:3f:1a:6f:8f:99:db:a6:59:a6:23:37:1b:7a:80:
         3a:7c:80:da:0a:6e:9c:ac:67:5b:32:e5:81:a7:46:c7:d3:da:
         b8:36:f9:9a:fc:96:99:66:8b:9a:b2:cf:42:62:be:5c:75:fe:
         57:09:e2:d9:01:bc:9b:6c:18:07:c0:bd:8a:a7:01:01:37:ce:
         92:98:36:47:42:6a:82:12:4b:c0:b5:60:e8:2e:2f:b6:d6:cf:
         f1:85:6e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----