Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38a396561506a8f8ca8e79aaf34b165694b0e3af.cer
File:                     38a396561506a8f8ca8e79aaf34b165694b0e3af.cer (raw, json)
Hash identifier:          QoGFoasaGD7rDw58dniO+i/mcYIcRHvHkcQNkamldmQ=
Subject key identifier:   D6:F3:3D:4F:48:C8:65:74:50:4C:82:4D:95:4C:7F:E7:62:25:4B:99
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E50C4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e1fa85c0-1f53-4e3d-9cea-a10d4444be13/38a396561506a8f8ca8e79aaf34b165694b0e3af.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e1fa85c0-1f53-4e3d-9cea-a10d4444be13/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 11:32:47 +0000
Certificate not after:    Sun 31 Mar 2024 19:46:12 +0000
Subordinate resources:    AS: 272802
                          IP: 2803:a890::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15010895 (0xe50c4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 11:32:47 2023 GMT
            Not After : Mar 31 19:46:12 2024 GMT
        Subject: CN=38a396561506a8f8ca8e79aaf34b165694b0e3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:94:09:c7:67:fe:39:1c:c5:bb:c9:db:37:ac:
                    60:bb:f0:ab:99:f8:a4:ed:9d:b2:a6:9e:14:3d:06:
                    e2:b9:6e:e7:16:48:dd:f5:cf:d7:f9:12:2a:5e:a9:
                    5f:3f:23:f6:e6:02:cb:04:4a:1d:89:16:0c:74:88:
                    7e:b2:9e:ff:d2:5c:7b:d9:3b:5f:d4:b8:65:95:18:
                    98:cc:7b:0b:3f:30:b1:f5:bb:92:5d:f8:2e:0d:3f:
                    0f:a4:c9:d9:02:5d:ba:5e:b3:a9:9a:0e:36:fc:d8:
                    4f:db:79:b6:f4:2f:24:34:9b:c5:bd:67:24:9a:43:
                    81:99:d6:36:4c:2f:98:96:1d:97:41:73:0d:cd:e2:
                    6d:10:39:44:af:15:dc:5f:8e:70:52:ba:fb:ed:12:
                    a9:50:38:bd:f8:b1:4a:78:d6:6b:00:61:61:11:ff:
                    5f:fc:d6:d6:7b:3a:71:35:a9:17:7e:89:57:cd:23:
                    27:af:49:0b:01:15:ef:4d:6e:a5:85:67:a4:9e:b0:
                    36:92:91:f2:b1:fd:95:8d:73:e9:03:9d:9b:0c:d5:
                    cf:41:85:67:83:20:c4:fe:ba:a7:1f:cd:9d:9d:ea:
                    1d:bb:57:3d:d8:e5:64:40:7b:9f:f3:d5:14:21:1e:
                    2e:5f:84:1a:92:01:06:07:e6:2d:8a:e9:61:2f:0a:
                    77:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F3:3D:4F:48:C8:65:74:50:4C:82:4D:95:4C:7F:E7:62:25:4B:99
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e1fa85c0-1f53-4e3d-9cea-a10d4444be13/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e1fa85c0-1f53-4e3d-9cea-a10d4444be13/38a396561506a8f8ca8e79aaf34b165694b0e3af.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272802

    Signature Algorithm: sha256WithRSAEncryption
         a6:d1:ae:63:ae:4a:20:01:b2:86:90:54:67:32:53:f3:05:4f:
         88:d4:b3:fa:9c:80:3e:e4:36:53:09:50:ea:8d:9f:d8:30:bc:
         01:88:a9:85:85:71:6e:be:e8:38:db:c5:3e:78:38:80:e3:5d:
         2b:5c:58:8a:f7:b9:01:48:a0:89:a2:89:15:de:de:73:29:58:
         08:e6:36:a3:c9:de:99:35:f4:99:81:70:bb:d0:e6:b1:25:b1:
         9a:b1:ca:15:32:4e:59:af:af:54:cd:b0:c8:eb:57:2f:4f:22:
         fc:8f:1b:83:12:ac:0e:d5:25:6a:d5:be:64:bf:fd:14:87:73:
         c1:e8:2a:b4:8a:7e:17:3b:9a:56:72:3d:ba:9b:c0:31:1f:d8:
         26:4b:08:70:94:0d:3b:f9:94:3f:aa:10:8c:8b:56:bf:b2:39:
         95:47:10:31:1f:e3:bb:f9:1d:e6:c8:5e:b6:d6:f0:29:0f:52:
         3d:6e:d4:43:69:e1:93:8a:b4:ce:60:22:6c:99:b9:a6:85:d8:
         b4:74:60:a6:59:70:ce:25:0e:81:e4:5a:40:c6:c1:58:eb:1b:
         b3:f8:42:7e:00:20:7b:c0:5d:82:39:c4:18:47:58:5a:40:1b:
         6c:c0:bc:20:89:59:b8:51:41:25:47:69:28:bc:1c:b9:6b:d5:
         bb:24:c0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----