Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b56a14d22b6672230c805b48453f25f13c7969b.cer
File:                     2b56a14d22b6672230c805b48453f25f13c7969b.cer (raw, json)
Hash identifier:          TiQGFzdi3R6fJxc6v/mDkYfXbVBSgvfpN9FbYAOVSF4=
Subject key identifier:   82:5A:88:49:C0:92:12:BC:07:89:BE:09:7E:18:62:29:D4:73:31:16
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D49D54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a9ace7fe-43a1-42e0-b049-fabd6bcae6ad/2b56a14d22b6672230c805b48453f25f13c7969b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a9ace7fe-43a1-42e0-b049-fabd6bcae6ad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Oct 2022 20:57:02 +0000
Certificate not after:    Tue 21 Nov 2023 22:56:09 +0000
Subordinate resources:    AS: 272076
                          IP: 181.189.16.0/22
                          IP: 2803:2310::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13933908 (0xd49d54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 14 20:57:02 2022 GMT
            Not After : Nov 21 22:56:09 2023 GMT
        Subject: CN=2b56a14d22b6672230c805b48453f25f13c7969b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:33:93:9f:22:70:24:35:d4:a3:09:d2:24:
                    41:ad:7f:43:a8:72:6c:34:0e:16:09:3d:c3:fd:fc:
                    27:3c:47:49:af:36:a3:11:3c:98:47:df:2e:2c:21:
                    db:a1:b1:0f:17:f3:3f:40:4f:0f:1b:57:bd:9d:bd:
                    68:ef:2f:a5:05:2b:86:7d:ec:8d:d5:72:e8:84:04:
                    a1:77:c9:da:50:8d:80:51:7c:e0:c8:ef:98:ee:81:
                    d4:2e:66:48:27:b6:33:b2:f8:3f:60:8a:a4:53:95:
                    fa:d9:67:1d:0e:22:d6:26:8d:58:69:25:47:5c:5f:
                    f7:11:29:b2:0a:d7:a3:ef:1d:cd:65:e4:54:18:56:
                    fd:75:65:93:d1:34:2c:84:98:f0:fc:d7:a5:c2:c0:
                    6d:e7:e9:67:5a:dc:9d:32:4f:83:34:44:47:9b:bd:
                    b0:bf:ea:36:7c:71:f4:65:b6:a4:a0:ec:fc:8d:d0:
                    a5:12:6b:00:9f:00:4e:03:35:39:75:61:4a:d3:05:
                    b2:d7:10:cc:05:65:91:6a:c3:4b:8c:b7:2c:56:c5:
                    d6:ce:47:8a:41:9d:14:64:1e:b6:78:e6:29:66:9e:
                    6c:f4:88:2b:29:4a:49:5f:9b:51:3f:2a:de:77:4e:
                    b0:05:20:3d:a8:36:dd:22:3e:fb:45:f6:f4:72:23:
                    74:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5A:88:49:C0:92:12:BC:07:89:BE:09:7E:18:62:29:D4:73:31:16
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a9ace7fe-43a1-42e0-b049-fabd6bcae6ad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a9ace7fe-43a1-42e0-b049-fabd6bcae6ad/2b56a14d22b6672230c805b48453f25f13c7969b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.16.0/22
                IPv6:
                  2803:2310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272076

    Signature Algorithm: sha256WithRSAEncryption
         bc:ca:5e:3f:97:32:fd:b6:d5:25:0e:7d:f3:bc:78:e2:1a:d5:
         c8:6e:83:7f:22:1a:27:76:64:93:b0:68:c1:a4:53:e1:a4:72:
         78:b9:db:4d:7d:b9:07:f7:e1:ef:b6:0e:33:6a:2d:c9:96:37:
         ba:c8:12:80:ba:7f:bd:0c:47:22:ed:43:70:4e:5e:cb:d2:aa:
         c1:a9:6f:ca:38:41:c8:bf:07:81:ad:18:69:c1:7d:7d:fe:f2:
         90:1a:d3:8d:90:3c:09:89:a7:07:21:12:fc:26:0f:ae:1f:23:
         b2:9d:5e:39:01:17:1c:6e:dc:01:4e:85:03:b8:72:f9:9d:74:
         55:42:c2:e3:b6:5e:67:e8:95:9c:f9:6b:51:a9:6c:c5:37:04:
         76:08:9c:b2:35:1a:02:db:e7:5c:00:b0:13:be:5e:ce:64:58:
         23:76:a0:ba:87:46:81:63:f7:5d:44:49:11:7f:43:ee:3a:6e:
         ba:b6:ca:c4:7c:34:20:1f:8f:62:a8:cc:d7:b9:6c:c6:b2:33:
         9a:3c:c9:81:dc:61:1c:e4:f5:07:6a:05:9f:39:8d:84:7c:88:
         61:2f:7b:85:50:3f:ab:14:f3:22:f0:fa:c9:84:3f:7e:94:34:
         36:04:81:ec:97:a9:82:4d:cb:05:34:2b:58:9e:d2:ad:88:96:
         78:0d:99:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----