Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d56b861287ddd751d1b0d7fc292f051d35dc78e0.cer
File:                     d56b861287ddd751d1b0d7fc292f051d35dc78e0.cer (raw, json)
Hash identifier:          O3/xMzC9Acuf+xAWDuyRX2wX7SjgfJJT0rf+c8+BFuA=
Subject key identifier:   3C:ED:4E:51:F8:48:F3:B7:39:7C:6D:30:54:8F:6A:0B:00:5B:A9:04
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED3090
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6349d436-8332-4d4a-8c2f-083a6a8e7437/d56b861287ddd751d1b0d7fc292f051d35dc78e0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6349d436-8332-4d4a-8c2f-083a6a8e7437/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 08 Jun 2023 13:38:58 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.10.232.0/24
                          IP: 200.10.251.0 -- 200.10.253.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15544464 (0xed3090)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  8 13:38:58 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=d56b861287ddd751d1b0d7fc292f051d35dc78e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:4f:84:50:8f:1a:95:59:dc:fc:14:17:19:
                    ab:3a:3f:98:f2:b3:78:4f:ff:49:8d:61:72:d7:01:
                    d6:1f:26:9b:db:b8:84:24:8e:11:23:a8:38:50:fc:
                    0f:c7:71:ef:18:e0:74:82:54:b4:52:ef:08:cb:d2:
                    9c:21:8e:bb:de:36:f2:c5:1b:f0:3d:d8:78:3d:63:
                    04:ac:ce:72:3f:0c:ec:15:92:12:81:0a:ea:1b:29:
                    ce:ef:fe:a8:b9:1d:07:f8:d4:7c:b9:68:9e:dc:69:
                    6f:89:62:e7:49:35:4b:b8:ab:cf:46:2d:13:1b:c8:
                    9e:fe:de:75:b2:90:ac:d4:36:aa:a4:8e:ff:8c:5e:
                    fe:93:79:65:e1:7b:ea:3a:13:46:00:4f:17:a8:43:
                    f8:ef:ba:87:9e:b0:0b:e7:bb:aa:8a:12:f7:fb:9a:
                    8d:64:82:ba:97:3f:be:be:5c:cb:79:a4:3d:5c:f1:
                    ba:01:fb:9e:bd:56:aa:a5:ff:63:f0:00:8f:18:28:
                    70:e6:c6:85:7c:cf:c1:4d:c5:6d:cb:f0:c1:d1:6d:
                    a9:2c:23:e9:d4:e8:e1:90:59:b7:df:be:fa:88:31:
                    0d:a1:ef:23:8e:05:39:b8:66:a5:24:02:50:b0:07:
                    79:f7:92:07:14:9f:91:14:db:c0:ce:a4:ba:03:0b:
                    ba:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:ED:4E:51:F8:48:F3:B7:39:7C:6D:30:54:8F:6A:0B:00:5B:A9:04
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6349d436-8332-4d4a-8c2f-083a6a8e7437/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6349d436-8332-4d4a-8c2f-083a6a8e7437/d56b861287ddd751d1b0d7fc292f051d35dc78e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.232.0/24
                  200.10.251.0-200.10.253.255

    Signature Algorithm: sha256WithRSAEncryption
         81:9b:4a:4c:ea:19:da:7b:b8:1c:6d:33:0e:ef:ae:71:6e:ce:
         c9:27:6c:b1:43:99:07:ee:85:cd:6d:fa:9f:82:f6:82:8d:11:
         7c:c7:7a:a8:0d:af:2e:2a:bf:5f:83:13:94:f2:11:7b:3b:df:
         92:d9:e0:23:b2:c2:28:f5:ac:22:83:b1:83:6e:f1:d3:c4:b2:
         b4:e9:ae:6f:c6:46:81:0b:0d:2f:56:60:8b:e3:4a:cf:cd:d0:
         26:34:be:1a:4c:5f:da:9e:3e:29:08:6c:b2:d1:a1:82:21:fb:
         7d:ac:5b:a0:a1:51:94:bb:ce:f8:fe:0e:67:68:db:e7:95:e7:
         3a:b8:91:81:b2:1e:b8:c8:a2:35:f6:3f:ab:b4:0a:d7:2d:08:
         f3:fd:c5:ee:98:63:35:bd:6d:d1:49:fe:97:08:e4:21:56:5c:
         46:b4:9a:b3:b6:f7:75:ad:3c:bc:bf:46:9a:82:ea:d0:97:68:
         f1:17:a4:07:f3:53:fd:a5:f1:37:f1:e2:e2:3b:b0:f4:80:58:
         12:ec:ab:3a:48:b5:75:1b:6f:39:3f:26:5e:fb:75:57:24:8e:
         6f:c8:d3:e6:2e:17:14:cd:78:21:3c:4d:a5:74:eb:22:88:19:
         a2:7e:1b:f1:f3:e9:66:f3:34:ca:e0:08:77:5e:49:1d:ac:f3:
         17:91:73:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----