Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer
File:                     3ac089c221d0dbc870f89217c46c6a8f5a357910.cer (raw, json)
Hash identifier:          S9X2pPxBlg7EQ/MWCnKaAxo36UxTvsTXIRZ9N6uAClM=
Subject key identifier:   7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C08B3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/3ac089c221d0dbc870f89217c46c6a8f5a357910.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 23 Feb 2021 06:24:33 +0000
Certificate not after:    Sun 29 Oct 2023 21:04:01 +0000
Subordinate resources:    AS: 271843
                          IP: 45.162.132.0/22
                          IP: 2803:f810::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12618554 (0xc08b3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 23 06:24:33 2021 GMT
            Not After : Oct 29 21:04:01 2023 GMT
        Subject: CN=3ac089c221d0dbc870f89217c46c6a8f5a357910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:8e:e3:5c:89:92:b4:2f:67:b9:2b:08:de:
                    5d:b1:8b:cb:a3:97:4c:e1:9f:8c:72:6a:ff:a0:39:
                    ed:49:81:d5:8d:9f:09:0d:80:cc:de:ab:ff:f3:53:
                    f0:89:28:33:5c:95:6e:ac:c0:5e:c7:61:39:1d:3a:
                    fc:43:dc:b8:76:92:4d:61:17:e7:9b:84:f9:77:dd:
                    6d:03:36:a0:88:bb:14:18:eb:de:2d:af:1e:24:4e:
                    0a:a4:d3:b9:66:b8:c4:ac:03:58:d2:a0:12:67:d6:
                    5f:bb:d1:2c:a7:f1:de:aa:4d:d0:ae:e9:af:d6:6c:
                    81:b9:b7:b1:8a:21:2b:a2:2e:b4:b8:bb:68:d6:d4:
                    80:b9:da:64:e1:40:79:65:ff:c6:a6:5d:79:a6:bd:
                    6f:f0:11:49:fa:f4:29:a2:83:7d:03:04:b4:bf:ba:
                    72:79:79:28:4d:9a:27:6d:32:3f:9a:8f:d1:b6:ae:
                    c9:d1:da:4e:0d:1a:f0:b7:9b:25:96:9a:d4:c7:45:
                    8c:66:3a:d9:a6:9a:3c:90:67:ee:e2:0d:18:33:57:
                    59:81:c5:c7:0e:a8:85:8f:00:33:f3:0e:61:17:be:
                    44:67:70:a6:6a:2c:af:99:29:8b:b9:a2:a0:e0:58:
                    f2:1c:27:09:80:cb:73:ed:89:d5:dd:21:b1:8d:13:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/3ac089c221d0dbc870f89217c46c6a8f5a357910.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.132.0/22
                IPv6:
                  2803:f810::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271843

    Signature Algorithm: sha256WithRSAEncryption
         28:e5:e5:be:8a:5d:39:13:e6:00:66:43:4e:1f:8f:31:b7:47:
         c8:bd:47:be:cc:ae:6c:d6:b1:4b:34:53:49:38:95:dd:d8:9f:
         f7:26:d6:1d:18:5d:02:94:8c:36:9c:8a:c5:53:7b:b7:b6:fb:
         00:6f:6f:2a:8f:dd:46:33:3a:4a:c5:31:2e:7e:5e:3b:da:43:
         c3:4e:94:0f:09:b7:63:2d:c6:d6:51:2c:30:d1:ec:ab:6d:ca:
         52:e8:c2:40:78:09:a7:31:1c:aa:5c:7c:ab:93:03:c2:06:c2:
         f2:82:fa:67:b9:2c:2e:7b:e5:f5:70:12:ae:a5:d8:1f:5c:10:
         0e:f3:f4:f0:ea:88:0b:83:8c:da:72:b8:e7:34:58:80:13:f4:
         04:00:d8:1a:9b:2c:27:e4:bb:df:c8:e7:22:b5:3d:76:c5:23:
         75:3f:a2:9e:57:79:50:e1:0c:3c:85:e0:47:44:d7:69:c9:da:
         8a:fc:61:a8:c5:23:24:9f:ac:a3:7f:e6:e9:0f:6f:85:9e:dc:
         56:f3:ba:42:04:8d:5a:d7:44:51:2f:01:8b:f7:5f:26:53:a3:
         ec:70:2c:0c:cc:63:78:d3:24:da:82:40:fc:7b:23:bd:b8:fb:
         b7:e6:35:95:58:68:89:cd:50:48:c5:06:c7:59:3c:5c:5e:ce:
         2f:1b:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----