Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4de2fdbf6fcc2301966d1f6b825964d2021c4550.cer
File:                     4de2fdbf6fcc2301966d1f6b825964d2021c4550.cer (raw, json)
Hash identifier:          ldUuIA6BdRLGBaUYSyQiGldN/Cjzsz63PghP9r1fk10=
Subject key identifier:   C6:21:C1:C5:7C:06:21:B6:CC:AE:25:96:22:8F:91:C9:8E:1B:44:2B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D36C6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/985813ec-edd0-40d2-a97f-76d4e18d3511/4de2fdbf6fcc2301966d1f6b825964d2021c4550.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/985813ec-edd0-40d2-a97f-76d4e18d3511/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Jul 2021 16:32:36 +0000
Certificate not after:    Wed 01 Nov 2023 04:00:00 +0000
Subordinate resources:    IP: 200.1.64.0 -- 200.1.103.255

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13855851 (0xd36c6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  1 16:32:36 2021 GMT
            Not After : Nov  1 04:00:00 2023 GMT
        Subject: CN=4de2fdbf6fcc2301966d1f6b825964d2021c4550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a6:05:9c:df:ed:30:44:15:98:67:ee:8f:17:
                    af:cd:3f:a4:86:ad:6a:b1:e3:16:41:ca:50:8d:b6:
                    68:5e:24:ca:82:88:61:fb:7b:3d:ce:7c:d0:a7:e7:
                    27:f8:56:6e:7c:8d:5f:73:d3:a6:7d:a4:85:f8:ee:
                    15:c5:ca:02:95:37:ac:24:8a:47:3e:65:39:72:b1:
                    97:ce:a6:01:2e:d5:06:ac:e6:fe:3b:66:af:6d:50:
                    66:6b:35:45:4f:1f:f6:b9:97:5f:00:f4:c6:7d:3a:
                    da:b5:0f:6b:8c:ec:a4:08:87:ab:f6:9c:33:a0:aa:
                    31:78:94:35:8b:e2:23:24:34:cf:11:09:06:bd:d0:
                    80:05:4f:0a:4b:f7:88:a0:46:27:b0:0b:b1:bb:b8:
                    e8:72:df:60:28:8b:7b:bc:7f:eb:5c:22:2e:40:24:
                    63:e4:a5:72:64:2c:e4:02:81:43:83:78:61:83:dd:
                    a1:e0:67:49:f3:a9:02:c0:88:e9:66:87:9c:92:45:
                    6a:16:8c:6a:02:aa:96:44:dc:25:cf:46:1f:fc:f9:
                    8b:bf:1b:36:df:5c:dd:f3:fe:b4:30:59:f3:8e:36:
                    4a:ce:e9:03:ab:0c:88:d6:1d:63:fe:26:d4:f6:d9:
                    01:92:20:40:42:d9:1d:e9:55:c9:6d:e5:94:cd:9e:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C6:21:C1:C5:7C:06:21:B6:CC:AE:25:96:22:8F:91:C9:8E:1B:44:2B
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/985813ec-edd0-40d2-a97f-76d4e18d3511/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/985813ec-edd0-40d2-a97f-76d4e18d3511/4de2fdbf6fcc2301966d1f6b825964d2021c4550.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.64.0-200.1.103.255

    Signature Algorithm: sha256WithRSAEncryption
         7a:d6:d7:37:ba:38:be:55:f3:c3:b9:76:d7:b1:9b:75:81:78:
         5f:f5:93:15:ee:ee:d5:0a:46:1a:8a:78:14:4c:f2:7b:19:5a:
         94:8d:30:55:19:d5:48:f7:e4:b8:68:38:85:01:88:b6:02:d5:
         c6:0a:a2:58:df:f6:f1:fe:4f:c3:d7:58:f0:3b:3c:93:0d:a9:
         86:9e:14:c5:d7:6e:c6:8f:b2:8c:ed:36:b1:99:cf:af:1d:ba:
         d1:e3:ba:4e:e9:7f:46:b3:1d:77:7d:ba:cd:8e:a9:e6:57:83:
         71:62:78:89:ef:30:36:cf:88:92:64:8a:da:6f:e9:fb:fc:b3:
         35:21:e5:f0:29:6b:70:30:b7:3b:fe:94:36:17:5e:e7:6d:96:
         a9:08:45:b6:9c:1b:fe:cb:fb:cc:53:81:cb:12:81:da:ee:b2:
         4f:ec:70:af:d6:bf:b5:69:c9:72:51:8f:5a:02:64:9c:95:b0:
         32:95:a6:32:3b:56:a7:45:07:ed:94:b6:8e:cc:dc:3d:05:05:
         63:37:df:b2:c2:cf:60:0e:66:5e:1f:c9:23:6a:00:81:7a:d6:
         51:dc:98:22:d6:68:8d:4c:0e:35:3a:9f:1b:84:1a:b2:ab:fb:
         ca:0d:e1:37:f0:e9:2a:d5:08:93:64:44:21:57:94:d6:af:52:
         83:4d:a9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----