Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d7538b33050004d9137471190832ad57bc0a7e5b.cer
File:                     d7538b33050004d9137471190832ad57bc0a7e5b.cer (raw, json)
Hash identifier:          Zru7yi+n3hmlAaG9OrG48CTpmpNr8oVLn3eCiaS72Sc=
Subject key identifier:   A0:A4:12:55:FC:38:29:66:21:B7:C3:D0:E4:A8:2B:CF:82:63:E4:AE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E1C18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7cedb8a1-416e-44e1-a203-1e77a80f9359/d7538b33050004d9137471190832ad57bc0a7e5b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7cedb8a1-416e-44e1-a203-1e77a80f9359/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 16 Mar 2024 00:51:15 +0000
Certificate not after:    Tue 09 Sep 2025 18:18:22 +0000
Subordinate resources:    AS: 273128
                          IP: 2803:a450::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17701912 (0x10e1c18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 16 00:51:15 2024 GMT
            Not After : Sep  9 18:18:22 2025 GMT
        Subject: CN=d7538b33050004d9137471190832ad57bc0a7e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:50:0a:0c:e2:ca:9c:26:03:19:d4:72:9e:97:
                    69:e3:4a:fb:ba:78:c0:b1:dc:22:02:fa:ab:9a:5c:
                    35:d8:c1:cd:36:dd:46:c6:c4:52:f9:82:19:cb:61:
                    c8:48:eb:31:fc:5c:56:1d:2f:9e:8f:f3:28:23:c1:
                    d1:b2:ff:f1:c3:f0:6a:17:7a:c8:0d:14:8a:1c:40:
                    a5:26:ea:e8:2f:4a:df:01:dc:8c:21:5f:c8:3f:77:
                    e6:97:50:41:d4:9a:47:03:5d:e2:2b:a7:3f:80:1d:
                    0f:8d:38:ad:38:54:ae:5c:b5:2d:a9:be:1c:01:7e:
                    eb:e9:71:37:60:be:85:3e:7d:e5:d8:59:00:d9:82:
                    f9:6e:a8:e0:b1:6b:72:7b:f6:2b:98:d3:b5:e3:76:
                    43:97:96:62:c4:00:c5:cf:39:19:2a:49:48:f7:11:
                    81:08:07:28:63:49:33:24:4f:49:0a:06:81:f8:a1:
                    eb:89:04:7f:41:d2:52:4e:91:f6:a7:43:21:0f:06:
                    1a:5b:6e:e2:c6:1c:f5:18:63:6c:5b:ff:8c:1f:01:
                    c8:3a:d9:36:6d:12:81:1f:ba:af:1a:8a:13:8f:37:
                    0c:fc:e2:e9:6d:a3:e2:29:22:cc:24:db:1f:58:6e:
                    bf:c0:3b:e0:b5:81:34:09:2a:00:8b:3c:d9:23:b2:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A4:12:55:FC:38:29:66:21:B7:C3:D0:E4:A8:2B:CF:82:63:E4:AE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7cedb8a1-416e-44e1-a203-1e77a80f9359/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7cedb8a1-416e-44e1-a203-1e77a80f9359/d7538b33050004d9137471190832ad57bc0a7e5b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273128

    Signature Algorithm: sha256WithRSAEncryption
         45:a2:c0:3a:00:aa:ce:e9:66:b0:e7:20:af:3d:97:31:e3:b9:
         d1:be:22:d6:4b:da:a2:4b:92:f1:a2:9a:a3:c6:99:8b:22:17:
         e1:0b:42:f5:5c:20:5c:92:bb:cb:d6:e2:7f:b0:47:04:c9:96:
         d9:e7:71:73:79:cd:94:1f:d8:65:59:08:83:14:1d:fe:d8:dd:
         4f:c2:3b:9d:8f:0c:e2:a4:f5:4f:3d:10:87:f1:9b:11:14:bd:
         eb:6b:0d:43:f1:0f:3a:3a:b2:18:e2:48:23:8b:4d:6d:62:f4:
         23:f6:6c:a3:64:e4:2f:97:68:df:83:e6:70:85:ed:c1:1a:31:
         b7:22:15:28:5d:12:19:06:95:d0:63:01:75:ea:4a:33:b8:dc:
         7a:6e:0d:be:42:8b:47:3e:41:4d:6f:2b:4d:28:35:f1:d0:17:
         68:4f:de:e1:0f:72:2d:7d:c3:86:64:6f:f0:6c:50:f3:b6:8f:
         e2:cc:9d:b5:99:f6:47:33:48:88:b9:e5:08:70:83:c2:6f:dc:
         ea:0a:f5:93:55:54:c3:9d:f9:82:f6:3e:eb:d4:ae:11:86:5c:
         76:c7:6b:35:62:ec:ec:16:8b:dc:10:67:67:dd:d7:33:be:ab:
         31:d7:8d:85:22:45:6f:ae:b1:bc:a6:c5:31:1c:b3:32:6e:c5:
         4e:d3:f7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----