Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54a3bca48dfc42afc7c19f9e5e976a803425265b.cer
File:                     54a3bca48dfc42afc7c19f9e5e976a803425265b.cer (raw, json)
Hash identifier:          rLoHMzDxDYO22XtSFNsgOjCPdu9GN113gQrF7PUf06U=
Subject key identifier:   04:61:47:85:51:0C:F6:91:5A:E3:C4:3C:9C:59:CE:1F:E3:92:6C:7D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D3B9F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/54a3bca48dfc42afc7c19f9e5e976a803425265b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 19 Apr 2021 02:20:55 +0000
Certificate not after:    Thu 02 Nov 2023 15:36:29 +0000
Subordinate resources:    AS: 269894
                          IP: 45.191.96.0/22
                          IP: 2803:44e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13875701 (0xd3b9f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 19 02:20:55 2021 GMT
            Not After : Nov  2 15:36:29 2023 GMT
        Subject: CN=54a3bca48dfc42afc7c19f9e5e976a803425265b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:c9:77:13:2e:1e:b4:9b:ad:b3:1a:c4:33:
                    81:1b:8f:15:47:1f:7b:68:c1:d3:e9:72:bc:85:b8:
                    83:b6:f0:f5:11:05:d5:5d:57:69:87:b2:4d:8f:12:
                    55:86:65:fb:9e:c3:47:3a:7f:15:89:01:27:a0:f9:
                    54:93:c4:39:76:44:06:c2:b4:39:91:a3:e6:61:04:
                    6e:1c:e8:fe:eb:d9:33:9a:be:4b:76:64:15:3f:cd:
                    8a:9c:d1:da:d7:95:d8:7f:6c:61:29:49:73:e8:cc:
                    fc:a1:64:f0:1b:82:69:2a:df:bd:f7:6a:29:23:06:
                    0a:b5:d2:1b:8c:e2:59:85:ae:27:91:63:43:a2:e3:
                    6e:79:ba:69:cd:42:12:02:cc:e2:ce:bf:27:5d:12:
                    f5:d7:d6:80:7f:14:1c:ac:24:5e:4d:30:f1:04:2b:
                    3e:8e:58:85:e5:b8:5a:f3:f0:77:51:c8:34:5b:01:
                    25:9b:83:44:da:e7:a1:e3:60:dd:97:c2:00:fc:cf:
                    68:1f:50:fe:37:b5:bf:2e:54:63:ef:13:57:af:fa:
                    23:3d:4d:c8:6b:d5:95:6a:e1:21:64:19:45:1c:77:
                    c5:4f:de:8b:3d:72:8b:cb:ed:c1:1e:af:f0:8c:2d:
                    4e:fe:75:96:f2:c0:bc:b7:70:cf:ec:96:b9:34:41:
                    20:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                04:61:47:85:51:0C:F6:91:5A:E3:C4:3C:9C:59:CE:1F:E3:92:6C:7D
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/54a3bca48dfc42afc7c19f9e5e976a803425265b.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.96.0/22
                IPv6:
                  2803:44e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269894

    Signature Algorithm: sha256WithRSAEncryption
         a0:74:88:18:9b:86:8a:8d:6f:d2:6c:53:ae:50:67:b2:64:7e:
         96:f1:b7:5e:a9:ce:ae:36:40:b8:c9:94:d8:af:92:ff:28:4d:
         17:4f:6e:65:48:ae:86:97:69:99:33:73:7f:e7:05:50:f1:81:
         90:33:d7:31:c7:a0:b0:92:f1:9d:e0:64:f7:59:f6:bc:2c:a2:
         98:a9:30:40:03:f5:f1:14:c8:a1:66:f8:a2:c8:65:5b:e4:db:
         fa:ca:b6:38:ef:65:64:89:54:e6:c3:48:47:62:af:74:88:78:
         b0:d1:e3:a5:c2:7a:8e:86:9e:31:31:2e:8c:92:93:62:07:e9:
         e8:a1:07:90:f8:a9:09:ff:35:d4:4c:10:2c:8e:90:1a:b2:35:
         ba:df:c4:c6:db:92:cc:b2:c3:9a:08:03:de:8a:7e:f4:b9:0c:
         6a:be:ff:3f:a9:c0:ac:f1:ef:cf:82:b8:6e:43:c2:10:04:f1:
         6e:b0:37:87:48:03:22:64:8a:3d:f1:5f:86:5b:91:cc:5f:c4:
         4f:a2:43:1b:b9:5b:08:6d:42:e9:55:f4:7d:2b:7f:9a:05:84:
         79:c2:c8:a8:7b:01:13:93:1d:b1:45:15:ac:8a:5a:ae:34:d1:
         8b:fc:6d:5c:fb:1d:9a:3d:0e:e0:a1:3f:38:42:87:ec:74:1b:
         18:4b:93:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----