Certificate

$ rpki-client -vvf ta/lacnic/rta-lacnic-rpki.cer
File:                     rta-lacnic-rpki.cer (raw, json)
Hash identifier:          /vWRbO4WmiccM35Suje0ujiiGMJosxGzJURoaXO30ls=
TAL:                      lacnic
Subject key identifier:   FC:8A:9C:B3:ED:18:4E:17:D3:0E:EA:1E:0F:A7:61:5C:E4:B1:AF:47
Authority key identifier: FC:8A:9C:B3:ED:18:4E:17:D3:0E:EA:1E:0F:A7:61:5C:E4:B1:AF:47
Certificate issuer:       /CN=root trust anchor O=lacnic
Certificate serial:       061C65
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Oct 2012 13:00:00 +0000
Certificate not after:    Mon 10 Oct 2112 13:00:00 +0000
Subordinate resources:    AS: 0 -- 4294967295
                          IP: 0.0.0.0/0
                          IP: ::/0

Validation:               OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400485 (0x61c65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=root trust anchor O=lacnic
        Validity
            Not Before: Oct 10 13:00:00 2012 GMT
            Not After : Oct 10 13:00:00 2112 GMT
        Subject: CN=root trust anchor O=lacnic
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:33:85:82:b4:f8:fb:43:38:f7:ee:6f:f2:
                    91:73:73:1e:5b:1d:e7:79:7c:78:ff:06:e7:25:61:
                    9b:34:0b:5b:62:a5:e0:de:e5:39:27:81:c5:cc:f8:
                    24:fd:52:29:a6:04:8a:02:19:4e:d0:7e:b4:0d:13:
                    f8:f1:bc:bd:82:be:7f:c8:31:ee:d8:a5:e1:3a:69:
                    cc:83:8e:ac:62:c5:08:a5:f8:2d:05:2f:7e:56:da:
                    ea:5b:38:89:7d:bf:a9:90:6b:6e:39:67:93:9e:3e:
                    b3:06:60:4d:64:a2:be:e4:09:4c:09:6d:56:3e:1a:
                    f2:94:87:01:f9:74:99:c7:cb:64:f4:64:bf:dd:23:
                    10:f9:87:cc:57:0c:00:c9:88:ec:7b:1d:78:53:3b:
                    68:e0:68:ce:34:02:c4:e6:88:75:33:7f:a0:95:14:
                    1d:b8:3e:af:cd:2c:0e:0f:e5:9a:84:c6:dc:f6:f0:
                    8e:4c:40:fe:d8:c7:0b:1d:12:a0:35:a4:1f:d1:82:
                    7d:6b:58:c6:f6:82:48:bc:39:0a:5c:4a:9d:7e:a0:
                    d1:92:dc:32:a0:3e:f8:71:5e:7b:6d:6d:ed:04:07:
                    b1:07:b1:a0:94:84:db:22:7c:90:02:c9:9d:9e:0b:
                    5f:83:62:d4:32:b7:11:38:71:cf:f3:a4:0f:64:83:
                    63:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8A:9C:B3:ED:18:4E:17:D3:0E:EA:1E:0F:A7:61:5C:E4:B1:AF:47
            X509v3 Authority Key Identifier:
                keyid:FC:8A:9C:B3:ED:18:4E:17:D3:0E:EA:1E:0F:A7:61:5C:E4:B1:AF:47

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  0.0.0.0/0
                IPv6:
                  ::/0

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  0-4294967295

    Signature Algorithm: sha256WithRSAEncryption
         3f:4a:a0:dd:3b:ff:a9:4e:03:b0:bd:28:4a:6f:6c:c1:e0:97:
         a9:9b:a4:35:1f:f7:91:a0:39:cb:60:33:b6:c2:cc:b2:a3:8a:
         8f:b8:9a:e9:d0:a9:70:a7:f8:c0:31:8f:da:1f:04:df:03:75:
         c0:85:cf:fa:99:7e:54:88:75:75:62:1d:fc:b8:7c:45:14:20:
         56:5a:c0:07:8b:5f:93:5b:a7:91:97:e4:52:cb:2b:7c:c8:ee:
         18:61:1d:0a:0b:a9:5c:ef:7c:a4:42:b8:6c:9f:5c:94:68:0a:
         64:e7:fc:4c:4b:bf:fb:3b:ab:3a:7b:aa:fe:fe:b3:7b:2b:03:
         41:4b:84:3f:8a:a3:b6:15:5b:ac:3b:07:b7:6b:16:3f:a2:a7:
         9e:e3:92:03:44:82:6a:ca:a2:42:5a:98:f6:70:e3:52:46:bf:
         ac:fa:5c:a7:08:df:f0:06:bb:4a:cd:82:2e:a9:1f:bc:b6:6b:
         cd:37:99:dc:f1:f6:f1:92:f5:61:0f:fa:16:c7:55:15:f7:e0:
         73:03:81:15:17:88:b4:67:fd:c2:6e:35:65:c2:f2:34:b6:d2:
         c5:ba:26:04:42:44:54:33:23:41:dd:52:8c:2f:43:d3:44:6b:
         da:ce:50:4a:d6:96:a7:99:3b:38:5a:ef:c5:48:3a:14:bf:70:
         9b:07:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----