Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.cer
File:                     9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.cer (raw, json)
Hash identifier:          vrflnJk9AxXXAia4Aw5ztxwXC5k2MHq35B4Rg6eC8OI=
Subject key identifier:   A9:92:B7:73:46:73:BD:E5:1D:41:E6:96:85:F5:C8:D3:0B:73:32:AC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CBD7C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 01 Sep 2019 13:13:40 +0000
Certificate not after:    Tue 01 Aug 2023 19:45:41 +0000
Subordinate resources:    AS: 267693
                          IP: 45.160.224.0/22
                          IP: 2803:c1a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13359045 (0xcbd7c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  1 13:13:40 2019 GMT
            Not After : Aug  1 19:45:41 2023 GMT
        Subject: CN=9df60dad5cb02fa13e22a03cf7e0f5cace32ceab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:0a:28:48:ab:1d:7b:78:60:45:62:6a:87:
                    32:0c:fe:1d:18:b4:f1:40:aa:15:49:18:47:d2:1c:
                    8d:ec:11:97:d3:48:10:c0:c7:aa:c2:cd:f8:b6:49:
                    10:5e:f2:ec:77:bf:97:cc:e6:cf:65:42:f4:af:2e:
                    f8:45:ba:72:a3:3a:5a:b1:2f:ca:37:55:e9:1e:79:
                    fe:09:11:f8:65:c8:bb:06:dd:28:2b:6d:01:99:d1:
                    3b:fd:f5:40:55:64:14:07:c0:4f:98:fb:0e:82:8d:
                    44:11:07:f3:40:01:33:00:45:69:37:a9:d3:02:50:
                    f6:6a:1c:e5:5a:39:c2:0e:d5:fb:aa:96:26:b0:f5:
                    a8:02:88:d6:10:d6:25:a4:86:64:d1:03:eb:84:32:
                    be:93:94:64:32:1a:84:b6:b0:99:23:8f:a9:5f:51:
                    fe:21:9c:ea:cc:84:29:ae:0c:35:53:18:39:ab:93:
                    a5:2c:19:86:b3:c0:10:58:58:33:7f:d2:82:e3:41:
                    82:31:44:57:ee:70:12:11:b1:02:a3:64:6e:03:9c:
                    f9:15:73:98:a7:45:33:bb:3e:5e:14:17:b0:97:c4:
                    5e:78:ef:50:31:38:db:e5:a7:7b:b2:95:9b:02:45:
                    41:e3:eb:a0:4e:1a:bb:1f:98:c2:49:74:46:1b:96:
                    42:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A9:92:B7:73:46:73:BD:E5:1D:41:E6:96:85:F5:C8:D3:0B:73:32:AC
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.224.0/22
                IPv6:
                  2803:c1a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267693

    Signature Algorithm: sha256WithRSAEncryption
         97:2b:f7:b2:93:e7:8b:39:b0:25:a4:b3:58:24:09:d2:37:a3:
         cb:08:e1:97:2a:f0:3b:b6:b3:6e:b9:fa:d8:78:33:20:bf:35:
         8f:3a:54:00:fc:50:37:52:cc:6d:19:74:4c:1b:52:ff:b5:04:
         89:41:00:56:93:be:2d:e6:7a:d6:51:41:27:d8:73:7e:fe:f5:
         47:83:3c:4f:52:cd:14:a8:37:39:6b:9a:ba:e6:c2:80:d8:ab:
         e7:7c:d7:8d:46:f0:72:8f:65:c9:65:2a:d2:4c:13:50:ef:3b:
         30:ad:98:f8:ff:9e:a3:53:0b:94:31:b8:a2:64:db:c4:d4:03:
         d0:59:56:8d:82:63:35:a6:59:13:63:2e:dd:af:d2:d8:63:79:
         a9:0b:bd:56:a3:f4:15:14:e7:54:1f:0b:eb:c1:3a:90:67:b6:
         03:77:66:a7:aa:56:46:e6:6c:b0:02:f1:1b:7d:cf:b1:0d:49:
         36:1a:2b:0f:8a:d0:73:ae:15:fd:4f:74:f1:7e:eb:8d:6d:81:
         e8:5f:81:e6:3a:3a:c6:2b:96:85:59:4e:f1:9a:e2:07:21:da:
         a6:62:48:2e:f9:6a:f5:62:3a:15:b2:34:b8:9f:f9:4a:bf:ae:
         8c:90:f1:bb:a2:4b:a8:e5:58:64:4f:7e:a4:f3:b8:cf:3f:c1:
         43:0c:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----