Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09c79d30288209739f9c6d166171b04bde05c914.cer
File:                     09c79d30288209739f9c6d166171b04bde05c914.cer (raw, json)
Hash identifier:          42E3PFNC3Di/CKQpSGVJcwNs0ap+zujYr6ulwb22duc=
Subject key identifier:   ED:40:B4:A9:17:52:42:77:66:C6:15:48:DE:D6:2F:F1:9E:BF:D8:17
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E902AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c7b1a5b9-b6a8-44eb-9a6c-23e41aaae47f/09c79d30288209739f9c6d166171b04bde05c914.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c7b1a5b9-b6a8-44eb-9a6c-23e41aaae47f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 May 2023 19:40:25 +0000
Certificate not after:    Fri 26 Apr 2024 22:28:02 +0000
Subordinate resources:    AS: 266836
                          IP: 45.238.16.0/22
                          IP: 2803:2ca0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15270573 (0xe902ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  8 19:40:25 2023 GMT
            Not After : Apr 26 22:28:02 2024 GMT
        Subject: CN=09c79d30288209739f9c6d166171b04bde05c914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:33:28:85:53:c8:20:c2:3c:96:d7:6a:d2:
                    4a:57:7a:2f:f5:43:56:ff:15:24:08:79:60:02:e2:
                    98:61:00:d8:41:6f:54:c6:6f:37:7a:a8:ab:8e:c6:
                    91:f5:c4:74:c0:12:cd:36:d9:3d:a2:de:c8:e1:d1:
                    c5:aa:04:b6:38:42:30:85:13:7e:8f:36:ee:55:19:
                    ca:d0:93:ee:37:02:67:13:90:54:0e:22:67:1f:6c:
                    76:ed:d0:b6:a1:bf:a7:49:4d:f8:56:7b:50:a7:e9:
                    61:83:7d:ba:11:55:e7:69:c1:4b:a9:9d:e3:dd:03:
                    f3:99:80:3b:47:d8:8b:c6:d9:45:ec:ba:04:7f:69:
                    75:f8:37:33:8e:44:4f:35:9c:71:20:68:d7:e9:7f:
                    8d:a4:25:bb:19:a5:f7:2e:5c:2c:a9:03:81:37:f7:
                    fd:cd:f8:6b:70:b7:7e:da:de:3c:4a:0c:8e:93:ff:
                    03:25:a4:ec:8f:87:2d:ef:e4:3c:aa:f9:49:6a:9b:
                    f3:af:4f:4a:8a:0b:78:92:40:b8:95:4a:9c:f2:c3:
                    94:8e:a1:ba:da:65:58:61:36:a6:ea:8b:a9:af:e0:
                    f0:bb:f4:3f:e1:0f:5a:6b:76:b7:f5:63:2c:b3:ad:
                    b6:48:fe:27:98:88:1a:9a:b7:27:23:ea:79:93:a4:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:40:B4:A9:17:52:42:77:66:C6:15:48:DE:D6:2F:F1:9E:BF:D8:17
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c7b1a5b9-b6a8-44eb-9a6c-23e41aaae47f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c7b1a5b9-b6a8-44eb-9a6c-23e41aaae47f/09c79d30288209739f9c6d166171b04bde05c914.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.16.0/22
                IPv6:
                  2803:2ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266836

    Signature Algorithm: sha256WithRSAEncryption
         6f:e4:2b:0d:ac:0a:28:29:ae:72:d7:de:21:c0:b3:bf:a8:05:
         49:dc:c4:98:2d:52:9c:8f:01:38:94:e8:13:1b:28:a2:bc:f4:
         d5:0d:8b:a2:4c:36:bc:e1:38:75:e2:66:b2:e3:e8:91:bb:e9:
         c0:6f:87:33:1c:ac:96:e3:f3:b3:6c:bb:d0:01:a9:b3:18:e5:
         bf:42:69:30:bf:31:fc:e5:40:4d:20:bc:aa:70:36:d1:78:b5:
         6f:58:5f:8e:35:21:f4:6f:b8:c5:16:eb:fc:2d:c5:c9:cc:68:
         1a:82:44:a7:84:f4:09:b0:2e:bc:34:fe:82:07:e2:08:6a:41:
         db:31:5e:4a:51:7f:67:c2:f4:ba:ec:bb:74:95:53:f1:e5:9c:
         4d:97:10:7e:16:35:1c:c6:ef:2c:6a:13:b5:3c:75:d8:f5:35:
         05:af:a6:4f:98:76:0b:70:bd:91:4b:ba:3e:ab:0f:6d:ed:7e:
         ff:47:f6:dd:62:6f:b1:12:6d:3b:aa:70:21:81:bb:2c:3a:3d:
         62:ab:42:a0:ee:83:d7:df:be:b5:66:1b:dd:0c:40:7b:50:f9:
         26:7d:5c:9f:c0:20:bf:77:0b:55:a6:49:5c:aa:d8:22:e4:80:
         b1:d8:08:ec:d2:a2:57:51:59:31:d4:0d:66:0c:db:72:a4:4e:
         e2:2c:fa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----