Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer
File:                     71ccf671605b5e725ec595356fba462b15442130.cer (raw, json)
Hash identifier:          dykSKnWlfoZ8cPrY8MY5m0UNq93LwPhhX3yDkTvDgKw=
Subject key identifier:   2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CC75E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/71ccf671605b5e725ec595356fba462b15442130.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 12 Nov 2020 13:24:46 +0000
Certificate not after:    Tue 08 Aug 2023 23:01:07 +0000
Subordinate resources:    AS: 271813
                          IP: 190.123.66.0/23
                          IP: 2803:f010::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13399529 (0xcc75e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 12 13:24:46 2020 GMT
            Not After : Aug  8 23:01:07 2023 GMT
        Subject: CN=71ccf671605b5e725ec595356fba462b15442130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:31:01:92:fb:3f:60:88:88:18:20:c1:9f:12:
                    b7:e0:09:81:9b:d1:3f:de:0b:d4:ba:6d:68:21:12:
                    9a:2b:1f:64:df:92:41:95:c7:d5:4e:e6:a1:8b:15:
                    a5:a8:aa:89:1a:15:c7:8f:72:61:fb:28:26:ed:a1:
                    5f:42:79:0b:69:1e:dc:c3:90:54:b6:01:76:a8:49:
                    36:79:c6:d2:eb:ca:cc:f3:2c:c2:96:b7:59:e0:8d:
                    f1:58:28:c6:a5:fa:e7:a1:c0:00:d7:84:76:51:87:
                    49:49:88:da:67:65:a8:c1:64:a3:39:26:0d:94:76:
                    0d:05:17:3f:7b:5c:88:1a:9e:b3:6a:64:81:ed:af:
                    82:21:be:26:25:5c:38:58:e0:9e:c7:69:70:49:fa:
                    2c:51:c5:2b:33:12:47:da:59:ac:48:16:78:a4:a0:
                    d8:1e:26:fb:20:98:ce:b7:91:c4:db:0e:39:dd:b4:
                    da:83:88:1d:3a:e1:3b:8d:ef:3a:39:8a:17:a5:6e:
                    2a:2b:40:eb:42:c1:d4:a9:70:31:3e:41:43:35:4d:
                    25:dd:29:8f:f6:8d:a2:9c:cb:27:8d:04:ce:b1:fe:
                    31:1e:c8:08:a2:65:80:a9:23:5c:96:a3:0b:57:ea:
                    b2:b8:08:0a:3e:a3:7e:78:40:c6:f2:86:fe:a1:1f:
                    e8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/71ccf671605b5e725ec595356fba462b15442130.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.66.0/23
                IPv6:
                  2803:f010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271813

    Signature Algorithm: sha256WithRSAEncryption
         21:13:07:c4:0b:94:90:2f:52:68:35:3b:a6:71:44:5a:46:86:
         b5:2b:2f:51:da:34:e8:2f:6c:91:a5:80:02:58:58:05:99:c1:
         62:7a:3f:10:19:af:78:4b:8c:af:f0:d3:9b:ba:ff:8f:a4:6a:
         ae:bb:b6:24:26:86:01:52:de:7b:06:6d:69:6d:cc:4c:3c:94:
         02:9e:74:ce:3f:a8:76:e5:2b:b8:40:a9:5b:23:f7:f7:6e:4b:
         b8:7d:f1:fb:0d:52:e1:23:44:39:fe:69:a1:41:a2:dc:dc:28:
         2b:99:36:37:db:80:9f:b7:a1:6e:5b:66:2d:fc:75:e4:b3:c0:
         89:14:0e:d5:c2:0a:7d:cc:d8:34:e3:da:f4:ea:39:8d:a2:19:
         30:ad:45:e0:e5:d6:97:db:12:19:73:2f:eb:b4:97:69:6f:cc:
         58:d0:02:75:60:00:0f:e7:65:bf:38:85:21:8e:d9:d5:d6:03:
         ef:43:4a:d3:2f:1d:85:32:c6:d0:d4:fe:16:99:56:c2:12:0d:
         ea:98:59:4c:6a:e3:bb:76:6f:bf:47:95:34:d2:e6:d9:20:f8:
         32:bc:33:2e:6f:b7:29:5c:5b:9f:40:e8:ed:80:70:bd:72:56:
         f5:1b:a3:f1:df:7c:b2:89:a6:ac:9d:b6:e9:ac:96:d0:05:98:
         0c:3c:2d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----