Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b38ddde33016064ddf35bf8cd4f2b0b87569f64.cer
File:                     7b38ddde33016064ddf35bf8cd4f2b0b87569f64.cer (raw, json)
Hash identifier:          WliZsfyJN1LQAhgzTFBUb32DMyL/DXG/avS8XlbFRAQ=
Subject key identifier:   F8:50:3A:56:C7:4A:2A:40:35:43:F1:A8:9D:D8:91:02:EC:46:CD:AA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC3820
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d3d4571b-394b-4c03-8fda-4e1fca97bd3d/7b38ddde33016064ddf35bf8cd4f2b0b87569f64.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d3d4571b-394b-4c03-8fda-4e1fca97bd3d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 02 Jun 2023 13:49:09 +0000
Certificate not after:    Thu 26 Sep 2024 14:45:41 +0000
Subordinate resources:    AS: 272016
                          IP: 2803:510::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15480864 (0xec3820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  2 13:49:09 2023 GMT
            Not After : Sep 26 14:45:41 2024 GMT
        Subject: CN=7b38ddde33016064ddf35bf8cd4f2b0b87569f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:14:14:1f:b9:4d:85:44:4d:5a:b2:c9:8a:f4:
                    00:c0:fa:73:a1:0a:20:46:45:10:1e:47:24:25:8c:
                    46:7f:d3:87:67:cc:12:43:cd:1f:82:c7:40:7d:23:
                    14:b5:90:2e:21:c6:98:c8:69:53:21:2f:fe:31:26:
                    23:26:b7:40:c9:b1:de:0a:be:6b:83:b5:8b:b3:57:
                    f6:19:96:bc:4d:b0:a1:e3:7d:47:c6:18:fb:b9:b3:
                    16:7d:67:00:31:a8:6e:b2:00:86:a0:72:da:3d:a7:
                    e2:0d:75:44:a1:1e:2e:41:2e:09:2f:66:cc:cf:18:
                    72:35:93:1e:71:8a:7f:e1:ff:68:3b:e4:76:9f:cb:
                    da:c3:03:99:24:ce:ed:a5:91:ba:2f:19:dc:db:16:
                    f3:da:2b:75:80:c7:b9:89:4b:66:c8:0c:ef:3e:dc:
                    48:6e:9e:21:3c:03:97:15:67:98:2c:a6:81:9b:25:
                    b4:6a:f4:49:09:ac:de:13:a0:c1:86:74:45:e1:b5:
                    ee:8a:b7:0c:70:f0:7c:b2:aa:57:da:b9:f3:a8:9a:
                    4a:1b:a2:41:d5:11:ae:d7:d2:f9:f6:7b:82:82:bb:
                    8e:0f:f1:5a:72:3f:f0:2c:63:07:0d:a6:7e:3f:b0:
                    26:9e:ac:79:98:cf:4d:0d:dd:c2:8f:00:d9:a2:fb:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:50:3A:56:C7:4A:2A:40:35:43:F1:A8:9D:D8:91:02:EC:46:CD:AA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d3d4571b-394b-4c03-8fda-4e1fca97bd3d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d3d4571b-394b-4c03-8fda-4e1fca97bd3d/7b38ddde33016064ddf35bf8cd4f2b0b87569f64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272016

    Signature Algorithm: sha256WithRSAEncryption
         79:94:16:13:bd:a4:55:e8:ad:8a:01:81:ce:e6:62:84:12:75:
         0a:d6:3e:88:f7:cb:fc:b1:a1:b9:da:6a:3b:ed:81:cf:3f:47:
         73:c7:12:4b:8e:a6:d4:a3:b3:24:5e:b0:79:51:73:0c:b2:95:
         2c:64:59:40:bf:b7:af:d2:25:c7:b7:67:f4:16:9c:bc:40:79:
         0b:18:9c:78:35:ce:7d:c6:d9:a1:8b:33:2e:e5:28:5a:79:2d:
         db:7f:68:24:a4:01:ed:f5:5c:32:ef:0e:72:a2:2f:81:f2:df:
         13:be:45:26:b5:86:92:6a:41:b0:cd:fe:a7:ca:9c:65:a6:5f:
         b1:2b:fb:31:b3:19:5a:76:c4:de:bc:04:2b:66:f3:d1:61:50:
         7b:8a:80:d5:df:86:07:63:a6:2a:80:10:8c:1e:25:db:83:2f:
         69:c0:5a:4c:74:d1:d1:49:25:77:58:43:01:f0:81:41:f1:7c:
         65:87:5d:44:53:8a:30:44:81:ec:f1:79:ab:33:e1:80:bb:95:
         b8:a4:a4:cf:3c:45:38:37:07:c6:02:e0:2f:ed:d4:b9:3d:cb:
         e4:00:3a:e6:91:64:9b:a9:b7:d4:00:df:42:bc:6a:66:d1:dc:
         d5:92:8d:91:95:11:2f:16:67:81:56:be:49:a9:69:97:5a:19:
         dc:69:dd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----