Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer
File:                     9882ed47a7ebae944c46595d3bea57e07895467a.cer (raw, json)
Hash identifier:          8VmtZlovBuFltx/V8lDMNwDR686eACNy7ytJD1WhIdM=
Subject key identifier:   A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CFCDA0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/9882ed47a7ebae944c46595d3bea57e07895467a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 02 Jan 2019 21:40:48 +0000
Certificate not after:    Fri 25 Aug 2023 05:00:00 +0000
Subordinate resources:    AS: 265853
                          IP: 45.225.216.0/22
                          IP: 2803:1a20::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13618592 (0xcfcda0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  2 21:40:48 2019 GMT
            Not After : Aug 25 05:00:00 2023 GMT
        Subject: CN=9882ed47a7ebae944c46595d3bea57e07895467a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:8c:8d:b5:66:f2:a7:1f:c2:c8:32:af:bf:
                    38:05:da:b0:1c:34:28:2b:9f:5d:9b:45:d7:ea:d8:
                    8e:49:e6:bd:0d:86:a1:9d:a9:e7:a2:33:c2:4e:40:
                    62:34:2f:7e:24:86:fd:d2:13:30:a0:8b:5f:0b:2b:
                    8f:e0:ec:e7:f3:14:59:df:25:c1:4e:61:aa:78:77:
                    a2:9d:5d:8a:3d:58:e4:6b:0d:e6:28:d7:01:7c:a3:
                    1c:72:78:52:ba:3c:69:0c:96:e9:2a:ed:fe:25:ec:
                    8b:73:2b:1c:8d:58:ae:cb:41:6d:0c:ad:a6:bb:51:
                    6e:f6:03:42:28:cf:d3:50:d4:92:d6:76:a0:35:3b:
                    ac:67:fb:2e:32:45:b0:5b:4f:9b:8d:60:53:e8:87:
                    0d:73:9f:0a:d2:2f:e3:0c:f3:ba:7f:7f:4f:fa:21:
                    83:b3:80:f8:a3:eb:0c:07:e7:53:81:59:70:40:41:
                    f7:23:2d:68:0a:ae:3d:87:bf:a4:ba:5b:ab:4c:e3:
                    1e:20:9d:51:ac:73:27:7f:d9:22:d7:c1:d1:ab:02:
                    63:6c:01:4f:dc:a0:75:f9:71:c2:a2:98:fe:90:0c:
                    80:e7:c8:49:be:e0:a3:b4:9d:98:3b:68:d8:61:d7:
                    e5:55:19:c5:c7:71:ec:2e:96:af:a8:ff:20:76:41:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/9882ed47a7ebae944c46595d3bea57e07895467a.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.216.0/22
                IPv6:
                  2803:1a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265853

    Signature Algorithm: sha256WithRSAEncryption
         58:cc:a5:f7:6e:c2:55:68:bf:70:1a:80:5c:b3:ba:ca:71:6c:
         76:66:e0:1d:a5:c9:f2:1f:35:62:61:88:72:3a:34:99:ab:f2:
         c0:31:b1:95:35:0e:42:15:21:7a:da:65:2b:ba:7b:03:cf:81:
         76:41:78:aa:28:be:7d:00:fd:cc:83:7e:66:36:a9:45:94:64:
         a3:95:21:7b:61:56:6a:70:9f:88:8a:72:36:c3:10:a6:9e:45:
         9f:fb:58:33:7f:72:7a:a7:4e:6e:ac:4e:37:36:77:71:2b:3b:
         e2:86:9e:63:b6:fb:a5:72:c4:fa:c5:38:e2:d2:a8:1e:dc:e0:
         d2:7f:a8:35:1c:e6:e6:da:6c:b9:07:4c:be:c9:58:00:33:13:
         54:bc:1a:01:ca:bf:d8:c9:c4:b1:35:76:38:6f:4a:ad:83:1d:
         71:3b:e8:b2:e2:b0:ac:dc:44:1b:44:60:06:cd:a2:c0:45:34:
         73:cd:ad:10:56:d2:6c:68:77:4d:c4:09:62:36:b1:0e:74:60:
         0b:4c:e3:44:78:b0:69:be:c0:ac:15:02:f0:2a:0c:0b:09:b3:
         38:fd:06:03:6f:7a:95:05:92:94:39:cb:64:af:4e:2d:02:29:
         35:51:c0:be:c8:11:20:ca:fe:50:ff:ae:32:7f:8f:9c:51:b7:
         bc:e6:29:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----