Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
File:                     eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer (raw, json)
Hash identifier:          Yd4/KZMeWpLNsqZtqfrf4KF56Ju8FWVs3ApOUpA1OG4=
Subject key identifier:   08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D36A76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 09 Oct 2019 20:17:01 +0000
Certificate not after:    Wed 01 Nov 2023 04:00:00 +0000
Subordinate resources:    AS: 4270
                          IP: 170.210.0.0/16
                          IP: 2800:110::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13855350 (0xd36a76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 20:17:01 2019 GMT
            Not After : Nov  1 04:00:00 2023 GMT
        Subject: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:7d:b2:e2:17:b0:fa:26:d6:f7:a4:b2:34:
                    f0:87:e6:eb:b6:f8:1a:98:e2:61:11:b7:ef:f3:ae:
                    70:4c:31:b8:19:60:a0:85:70:dd:94:9c:b5:dd:e5:
                    83:6a:3c:83:94:f4:6d:73:25:73:22:38:82:f2:e2:
                    61:e4:77:a9:76:8a:fa:5d:d2:ac:da:7b:8f:f8:28:
                    a9:7f:b1:be:40:50:70:4d:54:77:b9:ea:5c:35:a7:
                    82:cc:ec:00:93:e7:26:c4:e3:32:5f:53:5b:29:6f:
                    1e:b6:ba:5c:8b:7c:43:23:2a:a8:97:d9:3d:07:1a:
                    8a:22:c0:96:bb:78:d0:5d:40:45:b9:4d:9c:c3:06:
                    0b:e8:4f:51:07:29:57:2d:1a:8b:95:62:42:e5:dd:
                    46:4a:38:6d:a3:c5:5d:68:a3:9b:ff:b7:6c:3a:a6:
                    c9:3c:82:5a:2e:69:2f:64:3a:9b:4b:5b:3a:ff:04:
                    7f:de:79:45:b7:68:8d:71:1c:ae:d9:b7:84:a6:60:
                    b8:41:09:0c:98:f0:02:9c:69:96:23:9b:ec:59:9b:
                    18:80:41:ad:94:af:c3:d0:fe:ad:a6:26:4f:3c:ce:
                    42:a8:52:24:48:45:aa:81:6a:56:a5:83:5e:23:78:
                    1e:fe:5e:2d:89:0c:98:88:e2:55:c4:72:74:d9:80:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.0.0/16
                IPv6:
                  2800:110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4270

    Signature Algorithm: sha256WithRSAEncryption
         04:00:82:9b:f0:91:d8:bf:04:d0:b8:a8:80:e2:1f:2b:d6:c0:
         c2:04:88:e6:28:00:5f:0f:b6:53:15:36:ee:e0:26:8b:10:46:
         6e:7c:39:4a:3e:86:c6:b5:c2:1f:45:c2:60:d4:c1:19:4b:e8:
         26:58:bf:27:fb:a7:b3:1f:32:ea:3b:32:b9:f3:79:08:ec:c2:
         9f:24:d2:fb:31:cb:51:ad:03:13:1a:0c:07:6f:e2:10:0e:13:
         6e:f9:88:ec:d3:18:d6:17:d5:44:e0:3d:74:0e:16:9e:b8:b7:
         00:b3:8e:2e:7c:54:5a:86:9b:75:b8:a9:9c:7e:ea:66:ba:f5:
         d8:8b:54:4b:0e:5f:7b:4f:48:80:98:82:61:b1:b9:a8:fa:a3:
         fb:92:bc:6e:4f:87:87:97:0e:82:fd:19:30:02:50:32:c1:28:
         1f:6e:6d:df:b4:33:49:82:cb:73:0f:79:12:61:ea:62:1b:00:
         04:c7:52:f4:d4:e4:4f:19:8a:30:58:2b:19:8e:83:1f:72:aa:
         4e:d0:53:69:ab:69:1b:ba:7b:12:2f:55:83:04:f8:b1:32:69:
         17:c3:99:81:c0:d9:d7:79:06:de:80:e9:ef:44:20:d7:7c:fa:
         5b:dc:e4:39:cf:e4:f9:16:e5:4a:c4:aa:96:e9:b4:00:4a:cf:
         ce:3f:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----