In [the docstring of the `construct` function](https://pycryptodome.readthedocs.io/en/latest/src/public_key/rsa.html#Crypto.PublicKey.RSA.construct), it seems that `lcm[(p-1)(q-1)]` should be `lcm[p-1, q-1]`.