Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36b10bc44a32bc95053829056f3cce43ed317445.cer
File:                     36b10bc44a32bc95053829056f3cce43ed317445.cer (raw, json)
Hash identifier:          4lhrmjwM2eRd/9O5CJOYdXhj47XBzGQiSKbhLrS9/8M=
Subject key identifier:   DA:54:EC:5E:D6:BC:1D:86:7A:78:10:97:3E:EB:7A:73:84:02:63:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CC9C44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1893802a-9a7c-4d06-a8f0-7495f66f3c0d/36b10bc44a32bc95053829056f3cce43ed317445.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1893802a-9a7c-4d06-a8f0-7495f66f3c0d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 11 Apr 2020 23:37:11 +0000
Certificate not after:    Thu 10 Aug 2023 23:42:36 +0000
Subordinate resources:    AS: 267703
                          IP: 45.164.204.0/23
                          IP: 2801:1b:f000::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13409348 (0xcc9c44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 23:37:11 2020 GMT
            Not After : Aug 10 23:42:36 2023 GMT
        Subject: CN=36b10bc44a32bc95053829056f3cce43ed317445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:9f:89:23:59:4b:79:64:66:99:82:78:1d:
                    a2:56:27:90:52:d9:28:9f:90:a9:98:3b:9e:9e:92:
                    f9:6a:08:c4:14:69:bd:02:04:fc:df:08:49:c9:74:
                    b1:b2:76:f1:e8:bb:65:fe:fd:15:54:73:97:0f:22:
                    14:7d:89:10:cf:17:7c:59:b5:f0:63:5d:86:ff:c1:
                    f2:d0:0e:c7:ef:a2:ea:dd:64:95:aa:82:3e:fc:73:
                    25:d8:ba:34:cf:4e:38:15:1d:eb:c1:02:23:89:a0:
                    a5:1d:52:b4:bf:59:8a:38:d3:1a:cc:35:f8:5c:65:
                    8b:c6:9a:1c:9c:40:bb:cc:4b:29:3c:1d:68:3f:0c:
                    58:04:5a:ac:88:71:62:bd:cd:fb:df:30:42:fc:e7:
                    f2:e7:bf:42:d2:57:5c:bf:f7:a4:cf:08:d2:3a:91:
                    1a:ff:e7:5e:c8:b7:52:fe:c8:bc:c5:ef:63:0c:ab:
                    d0:ba:61:7b:43:3d:d3:8e:30:1a:a1:60:4e:ee:8e:
                    d9:99:76:7c:27:69:50:1d:c8:4b:23:4a:7f:b6:27:
                    0f:45:71:9a:0f:e2:f6:6b:38:ad:5e:b6:ef:e3:07:
                    2b:32:2c:da:9f:d2:d9:ca:4a:9e:dd:55:0a:ed:1e:
                    d9:f6:66:a7:1b:84:0f:3f:8b:5b:fb:5f:cd:cc:f4:
                    29:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DA:54:EC:5E:D6:BC:1D:86:7A:78:10:97:3E:EB:7A:73:84:02:63:27
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1893802a-9a7c-4d06-a8f0-7495f66f3c0d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1893802a-9a7c-4d06-a8f0-7495f66f3c0d/36b10bc44a32bc95053829056f3cce43ed317445.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.204.0/23
                IPv6:
                  2801:1b:f000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267703

    Signature Algorithm: sha256WithRSAEncryption
         b7:69:b3:20:1a:41:83:4d:05:dd:f1:98:8e:e2:23:f3:d4:f2:
         5b:a6:4d:4b:0b:89:c2:d6:0b:11:48:cf:1b:d5:b8:1c:34:e8:
         6a:10:42:27:0d:76:bb:4e:ec:fa:86:bb:d5:2e:7e:02:0c:23:
         07:55:3e:ef:3c:ca:54:e8:f2:f4:a2:48:35:c0:09:26:28:fa:
         b4:d0:bf:01:a7:64:15:c5:e1:fc:6f:d2:54:62:a2:55:97:cd:
         1f:e4:0b:32:ff:5a:4a:f9:c2:88:ae:14:be:e3:8c:52:bf:c5:
         59:cc:0f:f9:63:9b:3b:82:a7:e8:13:c1:d5:e0:bf:cd:be:05:
         c1:8c:3a:48:21:55:dc:af:7c:34:9e:9e:e6:67:9e:d1:9d:ad:
         bc:ab:ad:1b:6b:28:66:1a:7e:45:b5:20:b0:93:8c:f1:bc:68:
         82:6a:f5:36:82:c5:f8:b6:26:a1:a2:47:81:19:ba:6e:fb:15:
         f5:72:57:d8:b6:5f:1f:c7:9c:18:c7:e7:db:88:91:85:85:a3:
         4c:f5:3c:94:51:87:d6:d9:e0:40:27:77:1c:9d:dc:c0:b8:50:
         b6:dc:5e:98:fc:65:15:d6:32:33:71:cf:d8:5f:6f:79:d0:59:
         32:80:f7:59:56:85:da:7a:fb:7c:f7:12:01:36:62:57:0e:08:
         7b:f1:ea:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----