Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38320a1ffa67a353f634b54a6c7bd75916ff3dcd.cer
File:                     38320a1ffa67a353f634b54a6c7bd75916ff3dcd.cer (raw, json)
Hash identifier:          3f2O2gLroq5IQQ6jfM7LwPKYPlhWeLRwjECGGbPXiCI=
Subject key identifier:   C6:A3:B9:00:B1:22:A5:F5:76:D6:25:D3:60:99:47:FE:36:61:D8:9C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5637D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/38320a1ffa67a353f634b54a6c7bd75916ff3dcd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16081789 (0xf5637d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=38320a1ffa67a353f634b54a6c7bd75916ff3dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:40:57:45:60:92:7e:80:fb:39:98:ef:ca:
                    8d:63:dd:cb:f2:41:ad:b2:fb:a1:18:b4:fc:97:e5:
                    16:09:3b:c8:2d:3c:e5:5d:5f:9c:f0:84:85:2a:6d:
                    0e:74:43:ec:cd:a4:24:23:f5:bf:81:97:90:b1:92:
                    c5:73:7b:b9:43:ed:36:63:ef:e7:a3:25:e7:31:95:
                    c0:46:d6:a7:17:2b:60:5c:6d:49:b2:31:fb:8c:63:
                    52:0c:fa:3b:c8:c4:1c:99:d8:62:29:ab:d7:3b:5f:
                    aa:06:85:cf:49:84:88:fb:38:c8:0e:93:78:6f:f3:
                    53:5d:27:bb:97:4b:b0:2c:47:80:ad:d8:88:97:84:
                    90:0a:af:6d:44:a9:f7:19:80:87:e7:70:4d:44:97:
                    8b:42:74:b4:06:5a:1d:fd:3c:0f:7a:06:36:6d:e7:
                    33:f1:8d:c5:07:7a:7a:1a:eb:01:fc:05:f0:ad:c0:
                    2a:9d:1c:5d:fe:3e:2b:25:4a:fd:7b:5e:88:98:27:
                    99:54:69:37:1a:f9:75:1c:7d:fe:3f:c7:09:ea:76:
                    1a:98:8b:e4:b5:20:5e:0a:92:25:37:15:5f:b9:db:
                    36:69:81:53:cf:10:dd:bf:6d:d7:b2:90:1d:12:b1:
                    8e:e6:40:93:33:a6:c3:f3:d7:93:f4:3f:2f:43:5a:
                    6b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A3:B9:00:B1:22:A5:F5:76:D6:25:D3:60:99:47:FE:36:61:D8:9C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/38320a1ffa67a353f634b54a6c7bd75916ff3dcd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:f8:a0:6a:7e:29:42:b5:e0:79:f0:bc:8c:6c:72:b0:21:
         c6:78:b1:c9:06:82:2b:d8:40:f7:a9:8a:01:d5:51:4f:6e:08:
         a6:33:b4:24:ac:64:a6:c4:af:a4:d3:a6:1d:91:ae:7f:7d:54:
         db:ef:7e:08:70:44:ce:a8:16:a8:2f:b6:b8:fe:21:33:dd:d9:
         17:7d:1e:ef:d8:f1:92:15:1c:d3:1d:5e:1c:55:85:fa:2d:08:
         b3:2e:1c:95:cf:be:8d:7d:43:f1:fe:88:9f:51:6b:e7:9f:ba:
         b0:67:1c:fc:77:ff:ff:c2:52:5e:e3:b1:f5:45:e8:d7:d5:ff:
         f2:c0:db:6a:28:2a:bb:e3:3d:0c:e7:ac:a8:22:e9:e9:09:49:
         16:91:9d:44:bf:41:52:77:fe:14:25:e6:3c:70:25:c6:61:58:
         c9:2c:6d:14:25:92:54:cd:48:21:c4:2f:00:13:d8:c2:80:03:
         4b:02:cb:44:7c:e1:8a:32:39:02:a5:db:76:ff:7c:67:f0:5d:
         af:18:0a:88:ae:25:2b:c9:c9:2c:b1:55:22:57:52:36:d3:ac:
         c7:d5:db:63:11:4e:18:29:8a:04:ba:66:01:96:f4:8b:74:d9:
         72:3b:6d:00:ec:0f:65:76:52:df:fd:09:2b:44:77:96:be:61:
         e3:19:d9:5f
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgIEAPVjfTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDcyODE4MTA0OFoXDTI1MDUyNzE1MTYz
NVowMzExMC8GA1UEAxMoMzgzMjBhMWZmYTY3YTM1M2Y2MzRiNTRhNmM3YmQ3NTkx
NmZmM2RjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ39QFdFYJJ+
gPs5mO/KjWPdy/JBrbL7oRi0/JflFgk7yC085V1fnPCEhSptDnRD7M2kJCP1v4GX
kLGSxXN7uUPtNmPv56Ml5zGVwEbWpxcrYFxtSbIx+4xjUgz6O8jEHJnYYimr1ztf
qgaFz0mEiPs4yA6TeG/zU10nu5dLsCxHgK3YiJeEkAqvbUSp9xmAh+dwTUSXi0J0
tAZaHf08D3oGNm3nM/GNxQd6ehrrAfwF8K3AKp0cXf4+KyVK/XteiJgnmVRpNxr5
dRx9/j/HCep2GpiL5LUgXgqSJTcVX7nbNmmBU88Q3b9t17KQHRKxjuZAkzOmw/PX
k/Q/L0Naa8cCAwEAAaOCAv0wggL5MB0GA1UdDgQWBBTGo7kAsSKl9XbWJdNgmUf+
NmHYnDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wYzc4YTY4Yi0yNjgy
LTQzMDgtYjc2ZS0wYTVjMzU2ZDAwMjUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMGM3OGE2OGItMjY4Mi00
MzA4LWI3NmUtMGE1YzM1NmQwMDI1LzM4MzIwYTFmZmE2N2EzNTNmNjM0YjU0YTZj
N2JkNzU5MTZmZjNkY2QubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgBAWUAADAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEKpcwDQYJKoZIhvcNAQELBQADggEBAC0E+KBqfilCteB58LyM
bHKwIcZ4sckGgivYQPepigHVUU9uCKYztCSsZKbEr6TTph2Rrn99VNvvfghwRM6o
Fqgvtrj+ITPd2Rd9Hu/Y8ZIVHNMdXhxVhfotCLMuHJXPvo19Q/H+iJ9Ra+efurBn
HPx3///CUl7jsfVF6NfV//LA22ooKrvjPQznrKgi6ekJSRaRnUS/QVJ3/hQl5jxw
JcZhWMksbRQlklTNSCHELwAT2MKAA0sCy0R84YoyOQKl23b/fGfwXa8YCoiuJSvJ
ySyxVSJXUjbTrMfV22MRThgpigS6ZgGW9It02XI7bQDsD2V2Ut/9CStEd5a+YeMZ
2V8=
-----END CERTIFICATE-----