Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/003287505ad0145205e27f7baa2a3101a343097b.cer
File:                     003287505ad0145205e27f7baa2a3101a343097b.cer (raw, json)
Hash identifier:          ObPRSlryhLqPwA9zYR8e9DPnAaaFBVZxUtX/p/FEMNA=
Subject key identifier:   D3:77:44:AB:F0:A5:7F:FA:8E:E3:4C:62:3B:2B:71:63:74:C0:7B:A4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C2A4F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/003287505ad0145205e27f7baa2a3101a343097b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Feb 2020 18:19:51 +0000
Certificate not after:    Sat 21 Oct 2023 02:46:45 +0000
Subordinate resources:    AS: 270158
                          IP: 45.168.236.0/22
                          IP: 2806:319::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12756211 (0xc2a4f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  6 18:19:51 2020 GMT
            Not After : Oct 21 02:46:45 2023 GMT
        Subject: CN=003287505ad0145205e27f7baa2a3101a343097b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:ff:5d:7f:b5:fa:24:c5:26:ac:23:dc:d1:
                    29:e4:71:81:07:d0:d4:58:66:5a:f3:5c:d7:fc:79:
                    72:08:2b:50:95:b6:b9:09:30:09:a8:41:0c:d0:d9:
                    1e:93:49:fd:6c:59:22:4e:ee:a2:5d:8d:c0:84:3d:
                    ad:f3:f0:b4:58:02:4e:61:ab:34:98:0f:b2:26:b5:
                    b5:24:08:9f:0c:12:07:80:b0:e2:80:e0:d3:54:e5:
                    0b:48:9f:32:d7:66:6d:c2:9c:39:9d:bb:77:cb:d2:
                    35:4c:4b:14:5d:c8:c0:e6:d5:e8:a8:e4:90:16:17:
                    94:b9:cf:d3:a1:6a:ef:c7:f0:c6:a8:91:cc:c4:17:
                    44:3b:c9:8f:91:d6:98:78:ef:2f:36:9c:d0:ef:1a:
                    b4:c0:0b:1b:32:c9:1a:ee:26:e7:87:18:e9:b5:af:
                    79:d2:bd:30:08:6b:21:4b:d6:9c:db:39:1c:7a:06:
                    ee:9f:fd:d0:93:66:0e:37:50:04:3d:c6:39:2b:d5:
                    73:e5:1b:54:0b:2e:6b:94:20:42:1e:d4:96:80:96:
                    c8:82:b4:d5:b3:45:75:99:ee:a9:8b:6e:36:35:e6:
                    85:d8:d9:aa:ac:59:19:6b:2f:01:61:50:2b:4b:b9:
                    cc:89:47:f4:48:aa:70:17:9e:95:60:54:fd:be:e3:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:77:44:AB:F0:A5:7F:FA:8E:E3:4C:62:3B:2B:71:63:74:C0:7B:A4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/003287505ad0145205e27f7baa2a3101a343097b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.236.0/22
                IPv6:
                  2806:319::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270158

    Signature Algorithm: sha256WithRSAEncryption
         a4:54:95:7f:87:2f:ad:26:de:4a:52:10:6d:59:b7:8e:d5:9f:
         e8:f1:48:f0:48:6d:4c:67:de:5e:91:d6:b8:1d:04:82:e5:e3:
         68:54:10:70:23:6e:aa:45:d3:ac:0a:d2:42:3f:2b:e9:68:9a:
         43:ea:78:1a:36:72:e2:4f:33:6b:68:49:99:90:a9:bc:02:a3:
         90:4c:19:dd:26:4b:26:45:be:f2:d3:1a:db:1e:ab:d4:4e:27:
         50:8b:79:11:ea:e1:7f:27:03:f5:52:75:87:1e:a2:df:57:2b:
         23:10:8c:76:16:cb:19:ac:f4:e2:8e:40:61:77:2f:ef:61:f5:
         4e:b7:37:07:54:be:fc:9b:60:e5:cd:fb:f8:0b:bf:bf:3b:21:
         f7:6a:3e:9f:f1:30:de:fe:e2:50:80:cd:f7:67:03:51:f1:3c:
         02:b8:80:7d:b6:6c:de:c2:eb:99:d6:00:a7:43:23:09:51:23:
         62:b1:08:1b:ce:3f:c3:a2:80:9b:6b:d5:aa:5d:74:d6:18:17:
         b8:03:1d:41:5e:3d:cd:83:a7:89:bc:97:d2:84:41:05:37:d4:
         6c:18:fc:b1:87:2d:a5:49:79:5b:73:fc:25:90:9d:a2:3b:7d:
         6e:7e:d0:08:78:de:62:93:b0:40:ff:e8:b0:d5:1d:b7:3e:62:
         09:06:5f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----