Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f521956f4f617230e395148c3ca1d6ef6263541b.cer
File:                     f521956f4f617230e395148c3ca1d6ef6263541b.cer (raw, json)
Hash identifier:          RQ9bSJLsSXtossSkaOMp71r09/RURv5LsS35315MabE=
Subject key identifier:   FA:C2:A1:A6:D0:A6:EA:68:2C:A8:8A:72:75:7D:A6:DD:D0:94:9A:FE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8DD9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f10193ee-ae59-4c56-b68c-17dbd0d19db3/f521956f4f617230e395148c3ca1d6ef6263541b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f10193ee-ae59-4c56-b68c-17dbd0d19db3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 16 Jun 2022 15:24:47 +0000
Certificate not after:    Thu 10 Oct 2024 15:08:47 +0000
Subordinate resources:    IP: 2801:1cc::/44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16309662 (0xf8dd9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 16 15:24:47 2022 GMT
            Not After : Oct 10 15:08:47 2024 GMT
        Subject: CN=f521956f4f617230e395148c3ca1d6ef6263541b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:4a:5f:f6:79:52:24:14:7a:57:c0:13:52:
                    69:9e:27:04:48:73:90:17:7e:d1:db:f0:32:be:0c:
                    bc:cf:a7:c1:99:a8:61:82:98:02:1c:0d:47:22:b5:
                    87:28:f1:80:83:86:6d:7b:e7:78:ac:d8:7d:f8:f8:
                    bc:ba:f8:77:89:e2:c3:60:1f:6d:17:c5:3c:e7:48:
                    b4:c8:97:67:7e:10:32:ee:1d:5d:da:ab:cc:b7:87:
                    a5:7b:ff:5b:aa:df:0b:4a:1c:67:17:a4:4f:11:49:
                    78:5f:cf:2a:55:d2:0d:27:9e:e4:05:64:30:cf:ec:
                    3c:93:49:02:3d:65:1c:8a:5e:35:f3:a4:0a:02:ab:
                    45:f1:e2:88:6b:0e:82:77:45:34:ff:9e:35:71:84:
                    77:21:fb:97:3f:32:e9:82:47:d0:24:a0:6f:3f:2b:
                    70:fa:1f:06:fc:9e:ae:16:34:5a:bc:5c:de:4a:05:
                    6f:15:19:50:a7:3e:a4:00:20:1c:53:87:15:87:c9:
                    06:0f:52:47:b7:94:96:a4:37:eb:d9:81:79:3e:5c:
                    c0:dd:9d:20:cc:8a:45:91:74:07:51:94:59:b9:29:
                    a1:3c:d3:71:c7:9a:28:d2:b8:d7:a1:04:21:91:b0:
                    83:f3:b9:00:e0:fe:8f:bc:e3:2c:cd:b0:ab:31:95:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C2:A1:A6:D0:A6:EA:68:2C:A8:8A:72:75:7D:A6:DD:D0:94:9A:FE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f10193ee-ae59-4c56-b68c-17dbd0d19db3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f10193ee-ae59-4c56-b68c-17dbd0d19db3/f521956f4f617230e395148c3ca1d6ef6263541b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1cc::/44

    Signature Algorithm: sha256WithRSAEncryption
         39:4a:b4:39:76:85:03:cc:53:cd:5b:3d:44:98:0e:05:42:66:
         3a:32:7c:84:e8:ad:16:55:b0:93:64:37:26:4b:7b:06:38:94:
         d4:22:fa:0a:4d:2e:c9:af:88:be:93:4f:96:d3:43:d4:09:6b:
         e6:35:9f:03:08:86:d9:6e:c1:49:5a:63:c7:22:a9:b9:15:45:
         d9:5d:8f:8c:7f:a6:fe:9b:e4:fc:8f:a8:de:b7:7c:00:48:f9:
         a0:cf:3d:1c:69:de:00:36:fb:2f:21:e9:07:bf:60:60:6a:d3:
         8d:f4:5b:c7:38:60:1d:85:52:46:94:fd:b0:e9:c4:bf:d8:03:
         f8:76:2f:4a:3d:46:c9:92:d1:d2:49:0a:cf:92:ef:5c:7e:59:
         19:06:30:8d:86:ca:a2:df:79:fd:52:2a:69:5a:e6:14:20:14:
         e2:27:bb:3b:20:71:40:f2:5a:28:d7:9c:20:6d:7f:4b:11:ce:
         9d:ff:4b:04:76:32:d4:86:19:65:f7:5f:99:22:4d:c2:d3:01:
         19:06:c8:3b:86:d0:4c:ff:b5:08:70:b9:23:1d:a1:63:4c:ac:
         a2:65:f7:cf:e7:d1:43:8e:a4:a0:ce:42:e2:87:9d:57:83:29:
         c6:64:cc:01:bf:f7:8b:6b:19:f7:af:ee:a7:b6:f1:ed:58:bc:
         2f:7c:56:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----