Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/386b033044549633844a1e355380fa99c6222818.cer
File:                     386b033044549633844a1e355380fa99c6222818.cer (raw, json)
Hash identifier:          9zaxWsra7a9Kn6dBMa2xVvsVJrx+P18JnEaET9i5wYE=
Subject key identifier:   1F:3D:46:D4:6B:9E:81:60:68:EF:D7:23:82:B0:32:C9:DE:7B:2B:1C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D01FB5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/386b033044549633844a1e355380fa99c6222818.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 25 Feb 2020 14:33:24 +0000
Certificate not after:    Fri 22 Sep 2023 19:53:01 +0000
Subordinate resources:    IP: 45.227.152.0/22
                          IP: 2803:be20::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13639605 (0xd01fb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 25 14:33:24 2020 GMT
            Not After : Sep 22 19:53:01 2023 GMT
        Subject: CN=386b033044549633844a1e355380fa99c6222818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:5f:8c:7b:5a:d4:6e:fa:fb:40:08:2a:f3:
                    dd:b9:49:28:aa:f6:c4:ce:09:13:f2:12:5d:b0:dd:
                    c4:73:d8:c4:cd:be:03:9d:e3:5f:65:9d:88:79:49:
                    c6:ef:91:b3:a1:f1:5d:61:c3:15:a6:a4:22:02:15:
                    a9:41:af:bf:6c:36:08:a4:81:c9:ed:2a:dd:a0:f3:
                    af:1b:6a:35:b2:ed:78:58:19:16:88:57:62:50:47:
                    77:3e:11:59:e5:3c:55:e6:0c:97:26:8a:93:57:23:
                    40:f6:75:69:0e:ee:2a:36:b7:c3:62:29:40:fd:18:
                    2f:f8:07:a5:da:04:5d:3d:8e:80:d3:85:dc:f7:6c:
                    bf:d0:72:b6:4d:4e:36:b6:0b:17:49:29:bf:db:43:
                    1e:c7:14:a1:ce:d8:3e:9a:a4:fe:7e:4c:26:7e:00:
                    6a:e1:96:70:0d:a7:de:0e:75:8b:ba:d3:6a:e5:0d:
                    88:31:40:20:3e:31:86:fe:34:ff:86:8a:3f:9a:61:
                    b3:20:8b:6d:f3:de:23:09:c2:a4:68:5b:40:da:14:
                    ca:e7:c6:16:cd:1d:b6:44:a5:1a:a2:af:4d:56:6d:
                    2b:f4:00:f1:d3:9e:6f:c8:b4:a3:13:27:d7:0c:75:
                    6e:69:bc:72:e7:3c:14:3f:ad:cd:15:81:58:5b:f4:
                    88:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1F:3D:46:D4:6B:9E:81:60:68:EF:D7:23:82:B0:32:C9:DE:7B:2B:1C
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/386b033044549633844a1e355380fa99c6222818.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.152.0/22
                IPv6:
                  2803:be20::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:75:a9:55:4a:49:3e:8e:51:8e:a7:3e:88:fd:54:2a:75:bc:
         63:00:d2:16:da:55:51:61:f6:3d:57:2a:a7:90:9d:77:f8:8d:
         3d:ca:08:ac:7c:59:3a:c0:4d:01:f5:20:69:38:48:2b:7b:bb:
         0c:4e:63:76:2a:d5:6f:8d:56:90:0b:97:40:2f:17:a4:88:de:
         fe:cc:a6:86:a0:b5:52:e1:2d:b6:62:be:f2:c9:12:03:48:bb:
         83:c3:48:91:f7:e4:0f:f9:d6:b4:d5:bd:6c:4d:ff:a8:e2:42:
         81:91:54:4d:73:63:0a:81:e7:1e:84:81:0c:12:42:84:c3:28:
         8d:ce:a3:84:21:69:89:b9:0d:7d:97:d8:ff:83:a7:87:28:10:
         bf:72:e9:31:ce:f5:99:45:12:36:91:c9:c6:31:e9:b6:9b:b7:
         58:34:fa:42:f9:43:0f:18:89:f3:37:76:2b:79:40:8c:0c:45:
         86:cc:f8:3e:61:19:41:0b:80:00:90:83:d8:60:4b:9c:11:f0:
         45:18:f0:ca:dd:e1:c9:ce:7e:e2:16:e5:dd:c3:fc:6f:ae:c1:
         4c:87:96:05:c7:63:72:74:fb:d8:6e:6f:cb:2a:4e:14:37:18:
         ab:57:b1:ac:47:c4:73:a1:d3:aa:1e:68:d0:4f:4e:45:4b:59:
         a1:9e:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----