Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38334f8d07fe436fc81b406ca2ea334f2b11cbb3.cer
File:                     38334f8d07fe436fc81b406ca2ea334f2b11cbb3.cer (raw, json)
Hash identifier:          KN9eamLktLVGR5Ufdbr0oFbVtD94MjjjOltvBE+UeaY=
Subject key identifier:   54:B0:C9:E1:1B:12:ED:7D:CA:8B:AA:79:66:37:F2:62:01:24:7E:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E80DF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1d06341d-a822-4b41-a191-94dd0e66ad9d/38334f8d07fe436fc81b406ca2ea334f2b11cbb3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1d06341d-a822-4b41-a191-94dd0e66ad9d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 May 2023 13:34:03 +0000
Certificate not after:    Mon 07 Oct 2024 18:36:04 +0000
Subordinate resources:    AS: 272020
                          IP: 2801:15:1800::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15207927 (0xe80df7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  2 13:34:03 2023 GMT
            Not After : Oct  7 18:36:04 2024 GMT
        Subject: CN=38334f8d07fe436fc81b406ca2ea334f2b11cbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ea:9d:a8:03:d3:f6:99:e3:b2:e3:16:ac:cb:
                    eb:06:be:ff:f7:6a:12:8c:86:69:c7:f3:d3:69:06:
                    92:b4:17:c6:7e:6b:d0:b6:32:5e:c3:4f:40:50:fe:
                    a2:df:34:a7:c2:7f:50:b0:81:74:a0:05:0e:92:53:
                    2b:0b:2a:26:dc:b3:31:e9:6e:62:0a:20:5f:0e:73:
                    e4:22:48:10:04:ae:f8:8a:da:b4:5e:30:05:d7:4b:
                    48:9f:3c:e9:12:49:ba:48:c3:69:ec:1a:32:fa:fa:
                    f0:d6:4c:bb:92:bb:f4:76:94:e2:e0:66:87:0b:88:
                    b6:14:91:31:44:ea:8d:04:2d:4b:08:f1:0e:9e:e7:
                    b7:6b:7e:d4:f8:1e:25:db:ed:8d:87:16:83:99:61:
                    cf:c6:de:7f:ca:69:62:c7:da:b5:70:4f:d9:bd:38:
                    fb:f5:0e:a1:0a:40:a7:36:57:93:ec:4a:33:86:53:
                    28:08:98:98:07:a7:a9:59:e1:96:3c:63:5b:b6:4e:
                    08:6f:a6:7e:70:14:6d:8c:4c:31:f9:a4:85:ff:2b:
                    92:f3:5c:2b:a4:b2:a1:a2:e8:83:34:a0:e9:b1:ec:
                    1d:c3:e1:d2:7d:52:c0:55:f0:c3:c7:e1:6a:db:a8:
                    80:73:b7:d1:22:c0:66:5e:1e:fd:fd:e9:08:89:e4:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B0:C9:E1:1B:12:ED:7D:CA:8B:AA:79:66:37:F2:62:01:24:7E:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1d06341d-a822-4b41-a191-94dd0e66ad9d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1d06341d-a822-4b41-a191-94dd0e66ad9d/38334f8d07fe436fc81b406ca2ea334f2b11cbb3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:1800::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272020

    Signature Algorithm: sha256WithRSAEncryption
         94:fe:f0:30:06:11:ec:6f:9f:8c:08:f0:36:a0:58:5d:50:2d:
         b5:43:da:f1:c9:1a:80:bb:21:40:5f:fd:0a:88:1c:9b:ac:82:
         63:32:be:4d:14:e4:62:74:a0:43:7d:90:28:40:fc:5c:3f:56:
         13:b8:53:37:2b:f0:26:8e:80:87:1a:f8:55:93:08:46:1f:58:
         c6:d6:e1:74:d4:52:ec:d1:6c:f2:3c:6a:aa:eb:c1:a5:56:68:
         17:13:05:a8:28:af:36:9b:59:c8:6e:68:bf:91:7a:59:0c:5a:
         bd:e7:0a:23:ba:0d:f4:34:c9:28:c5:81:7d:30:43:15:7a:04:
         6c:a2:d4:23:bd:4e:66:58:f3:46:a9:f9:ac:74:7c:15:3f:02:
         2a:ec:99:22:00:7f:ff:1c:95:67:19:36:1c:29:a2:84:86:97:
         ab:ed:c1:2a:67:ce:d4:72:9c:c6:76:85:bf:5d:f6:da:9f:60:
         50:37:6f:37:bf:cf:b4:50:dd:1f:c2:ea:23:c2:60:ed:fd:fc:
         0f:20:7c:b2:aa:7a:b2:2a:9a:9f:62:9b:8d:f2:69:74:10:cd:
         47:c7:55:67:08:90:91:2a:62:cd:35:61:ca:55:ea:61:f3:27:
         c0:dc:5c:5f:6b:15:e1:14:7a:0b:10:ff:62:1e:2a:f4:53:a5:
         40:45:55:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----