Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47d5f7b68aa301ae431fd999eec69ecfb7c400f.cer
File:                     d47d5f7b68aa301ae431fd999eec69ecfb7c400f.cer (raw, json)
Hash identifier:          wpS0fFVqJLGUl2yz95fxBHjFtEmnnAvPJWxh4bWJ8uY=
Subject key identifier:   1D:9B:7C:98:DA:76:00:9B:13:E0:36:14:41:C6:6A:2D:26:78:BF:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDE161
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1cbf0148-ce10-47d0-bd31-b461366a8db5/d47d5f7b68aa301ae431fd999eec69ecfb7c400f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1cbf0148-ce10-47d0-bd31-b461366a8db5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 16 Jun 2023 13:33:55 +0000
Certificate not after:    Sat 22 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 52258
                          IP: 200.81.56.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15589729 (0xede161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 16 13:33:55 2023 GMT
            Not After : Jun 22 15:00:00 2024 GMT
        Subject: CN=d47d5f7b68aa301ae431fd999eec69ecfb7c400f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e8:c6:be:08:d7:b5:9b:e3:a7:98:5f:ab:66:
                    a0:ad:8f:91:0a:35:f4:59:b3:32:51:fb:47:71:9b:
                    b8:7a:10:4a:9c:e5:2b:fd:f9:6f:9c:95:f5:89:c9:
                    64:57:8f:da:a7:ce:49:26:8a:c4:47:dd:9c:98:44:
                    a4:0e:6a:76:77:47:30:d8:2e:7e:03:60:cb:cd:a9:
                    11:c8:c2:ec:11:34:a7:7e:40:03:e2:20:9b:f1:e7:
                    51:6a:52:fd:95:eb:b1:07:c1:8d:90:02:88:66:86:
                    d7:a1:9f:f0:2a:c7:b1:37:a8:92:3a:51:07:b7:b5:
                    c4:fa:38:b4:44:1b:74:82:ca:32:b6:c5:88:ac:4b:
                    3d:5a:d9:43:bf:29:5d:e5:62:2a:30:be:ce:78:12:
                    c9:fb:ad:0a:a0:02:13:39:35:46:71:56:a9:95:95:
                    92:e5:f1:97:47:94:a9:6a:73:83:6f:5a:88:af:17:
                    3b:8c:6d:f9:81:71:a0:e4:e7:16:37:8d:e9:e1:32:
                    7f:15:4c:99:d2:12:1c:47:8a:53:56:19:1f:fc:a0:
                    41:66:c0:cc:54:0a:d6:58:6d:ba:37:38:85:a8:09:
                    5c:60:05:61:cf:1a:de:9e:49:57:3e:ea:d9:7d:fe:
                    ba:d1:48:70:98:9c:36:d0:95:78:b9:97:b1:e4:ed:
                    00:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9B:7C:98:DA:76:00:9B:13:E0:36:14:41:C6:6A:2D:26:78:BF:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1cbf0148-ce10-47d0-bd31-b461366a8db5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1cbf0148-ce10-47d0-bd31-b461366a8db5/d47d5f7b68aa301ae431fd999eec69ecfb7c400f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.56.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52258

    Signature Algorithm: sha256WithRSAEncryption
         86:4f:1a:16:24:e4:68:38:4f:1e:04:68:33:3f:11:d0:0d:28:
         61:d1:bc:3f:84:8d:1b:94:9b:d6:73:55:9c:07:ff:fc:5b:30:
         b9:7d:ab:f5:f3:38:59:5d:27:9d:80:b8:a3:6c:50:21:29:4f:
         1d:24:ea:4b:63:b4:7b:dc:77:e8:c7:23:4e:0b:c5:29:dd:98:
         dc:b9:86:11:aa:a7:c1:f7:55:65:a1:22:dc:a6:69:81:e9:6c:
         7f:6f:bd:0f:ab:5a:a2:28:ea:79:d9:fb:5a:b8:3b:ac:a0:6a:
         e3:34:9f:e4:98:66:0b:cb:cb:eb:db:b3:d6:ee:eb:01:07:a6:
         a3:97:07:61:e2:0a:66:0b:66:e7:e4:21:bb:19:11:df:5a:04:
         3e:82:7b:86:01:d6:70:4b:08:6f:24:9c:2f:50:9f:bc:fc:9e:
         c7:27:e4:6f:e4:61:58:a8:8a:e4:ac:58:44:72:1c:c5:a1:05:
         50:19:51:ee:79:85:3d:8a:c9:83:5c:a8:49:d1:c8:d4:70:91:
         d6:e1:d9:29:a3:5a:63:3a:fc:44:90:40:68:76:73:45:26:a0:
         c5:76:80:30:3e:d8:92:dd:0a:05:08:c9:43:85:cb:b3:20:93:
         f3:94:09:b6:50:d0:06:85:93:d2:9a:42:fa:d0:3c:7b:1a:79:
         d5:a3:4e:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----