Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03f3fc842228425fd2a45f4711e8d7cf3259690c.cer
File:                     03f3fc842228425fd2a45f4711e8d7cf3259690c.cer (raw, json)
Hash identifier:          iMn7xNPHAbyBBktomLbEcn6/y1s4G3HUZ8EyrzZg0EU=
Subject key identifier:   19:D5:F0:75:3C:0E:C8:72:0E:B7:D7:A1:74:19:7C:61:58:6E:29:4F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5BEFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/03f3fc842228425fd2a45f4711e8d7cf3259690c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 06 Aug 2021 04:00:25 +0000
Certificate not after:    Thu 16 May 2024 16:33:13 +0000
Subordinate resources:    AS: 271941
                          IP: 2803:c610::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15056639 (0xe5beff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  6 04:00:25 2021 GMT
            Not After : May 16 16:33:13 2024 GMT
        Subject: CN=03f3fc842228425fd2a45f4711e8d7cf3259690c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:83:9a:a5:ad:d3:a8:99:7c:8e:0b:c8:ba:2b:
                    09:d3:6f:94:44:8b:58:49:06:1a:2f:c9:27:15:e2:
                    35:26:b4:5f:9a:f8:14:45:86:b1:f4:a2:2e:cb:8d:
                    4f:98:a2:46:b8:da:fb:dc:57:a6:7f:50:9b:a5:66:
                    55:a4:f5:c5:5e:c0:51:4a:b9:34:1f:90:43:63:c3:
                    0b:4d:66:b3:3e:6f:9b:cf:06:9c:ec:d5:84:f7:55:
                    88:59:ea:a1:a2:30:e3:05:ed:29:53:f7:3e:58:fc:
                    6a:2d:96:ea:b1:e8:45:a3:60:3f:86:df:98:9c:c0:
                    51:13:09:80:52:28:9a:4f:43:0d:8c:7a:bc:3b:eb:
                    fc:cd:9b:83:be:6b:9d:70:cb:ec:fc:44:7d:3a:86:
                    54:fd:38:31:c4:96:67:10:65:3e:8e:ed:1d:d8:b2:
                    f2:5c:4f:04:23:69:1b:0a:06:43:41:70:71:53:26:
                    1e:5a:38:9e:10:fe:1c:93:fd:b9:9d:b8:8a:a7:a3:
                    9b:9d:ec:6e:dd:a9:19:04:bd:c3:02:b8:ad:64:12:
                    09:24:57:7f:48:bf:58:e6:3e:75:1e:dc:30:c1:ea:
                    7a:af:cf:60:87:37:be:1f:34:be:5f:b3:0d:a6:a6:
                    d9:61:4a:05:75:df:76:58:36:06:50:89:df:2d:59:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D5:F0:75:3C:0E:C8:72:0E:B7:D7:A1:74:19:7C:61:58:6E:29:4F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/03f3fc842228425fd2a45f4711e8d7cf3259690c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271941

    Signature Algorithm: sha256WithRSAEncryption
         05:64:85:5b:3c:3f:b3:01:c8:6a:ca:ad:04:55:e6:ef:68:22:
         e2:56:30:4b:a2:ea:66:c2:22:c4:a8:07:1b:bc:93:38:e7:e2:
         b2:d3:17:c3:20:e8:8d:65:98:2d:45:1e:a6:5b:ef:ca:0f:91:
         37:61:ba:ad:f9:c1:f1:d9:e5:16:8a:7b:aa:15:4e:9f:d8:3b:
         fd:2a:ff:bb:9b:82:2a:52:c3:1f:5c:ea:3c:f0:ad:57:22:9a:
         92:e9:d5:2b:b6:6f:32:d4:9a:c6:64:89:b1:5e:9a:f9:3d:ef:
         3b:02:c0:96:cb:9f:f0:21:21:f3:60:1f:7b:df:2d:bf:8e:e8:
         1e:9e:99:ab:1a:b2:74:fc:1e:37:72:7c:52:0a:c1:d6:01:9d:
         03:43:4c:64:43:5e:1f:a6:09:d5:b7:49:84:58:94:2b:57:ce:
         65:01:24:1f:c3:19:46:87:a4:7d:6e:d7:d3:33:1f:b9:e1:a6:
         0f:64:34:09:5c:27:44:0f:70:8f:99:56:e6:40:5f:8f:3c:17:
         3c:ea:f0:54:0f:3c:c3:82:d5:ec:49:d3:36:e5:45:43:63:a5:
         f3:8d:96:89:f9:22:2c:d9:e1:5c:00:e2:d7:3b:e3:a9:ef:d2:
         13:76:47:ad:84:5f:3d:0d:b6:6f:ae:6d:11:1f:e2:b2:c1:a1:
         fb:ad:f7:e1
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAOW+/zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDgwNjA0MDAyNVoXDTI0MDUxNjE2MzMx
M1owMzExMC8GA1UEAxMoMDNmM2ZjODQyMjI4NDI1ZmQyYTQ1ZjQ3MTFlOGQ3Y2Yz
MjU5NjkwYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAICDmqWt06iZ
fI4LyLorCdNvlESLWEkGGi/JJxXiNSa0X5r4FEWGsfSiLsuNT5iiRrja+9xXpn9Q
m6VmVaT1xV7AUUq5NB+QQ2PDC01msz5vm88GnOzVhPdViFnqoaIw4wXtKVP3Plj8
ai2W6rHoRaNgP4bfmJzAURMJgFIomk9DDYx6vDvr/M2bg75rnXDL7PxEfTqGVP04
McSWZxBlPo7tHdiy8lxPBCNpGwoGQ0FwcVMmHlo4nhD+HJP9uZ24iqejm53sbt2p
GQS9wwK4rWQSCSRXf0i/WOY+dR7cMMHqeq/PYIc3vh80vl+zDaam2WFKBXXfdlg2
BlCJ3y1ZKL8CAwEAAaOCAvswggL3MB0GA1UdDgQWBBQZ1fB1PA7Icg6316F0GXxh
WG4pTzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hYmYxNTQyNi1mMzBl
LTRkOWUtODJmMy05ZGI0ZGNkZmE5MGUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYWJmMTU0MjYtZjMwZS00
ZDllLTgyZjMtOWRiNGRjZGZhOTBlLzAzZjNmYzg0MjIyODQyNWZkMmE0NWY0NzEx
ZThkN2NmMzI1OTY5MGMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDxhAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCZFMA0GCSqGSIb3DQEBCwUAA4IBAQAFZIVbPD+zAchqyq0EVebv
aCLiVjBLoupmwiLEqAcbvJM45+Ky0xfDIOiNZZgtRR6mW+/KD5E3Ybqt+cHx2eUW
inuqFU6f2Dv9Kv+7m4IqUsMfXOo88K1XIpqS6dUrtm8y1JrGZImxXpr5Pe87AsCW
y5/wISHzYB973y2/jugenpmrGrJ0/B43cnxSCsHWAZ0DQ0xkQ14fpgnVt0mEWJQr
V85lASQfwxlGh6R9btfTMx+54aYPZDQJXCdED3CPmVbmQF+PPBc86vBUDzzDgtXs
SdM25UVDY6XzjZaJ+SIs2eFcAOLXO+Op79ITdkethF89DbZvrm0RH+KywaH7rffh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:16 2023 by rpki-client on console-fra.rpki-client.org