Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a780aded9dabf63283959a6696312a1fecffbf4.cer
File:                     0a780aded9dabf63283959a6696312a1fecffbf4.cer (raw, json)
Hash identifier:          sA2uje6qK8sZNbFf1hboiHbg2dHRosaKqLquJ/7qZuc=
Subject key identifier:   40:A7:5D:8C:A2:65:BE:0A:A5:BC:89:9D:98:42:5B:F9:69:03:61:68
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D33E6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/0a780aded9dabf63283959a6696312a1fecffbf4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 Oct 2018 03:03:29 +0000
Certificate not after:    Sun 29 Oct 2023 19:42:06 +0000
Subordinate resources:    AS: 52302
                          IP: 186.190.208.0/20
                          IP: 2800:5d0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13844075 (0xd33e6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 22 03:03:29 2018 GMT
            Not After : Oct 29 19:42:06 2023 GMT
        Subject: CN=0a780aded9dabf63283959a6696312a1fecffbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:96:55:fa:dd:38:b5:50:57:19:22:aa:14:db:
                    18:13:62:58:27:96:da:68:fc:07:3e:4f:f1:45:d5:
                    ee:ba:9e:1e:67:40:8d:e1:ff:aa:b9:fb:bb:2c:1d:
                    b2:ec:2e:4c:ad:2a:de:7b:1c:09:dd:13:36:99:cf:
                    02:e8:61:7c:26:fa:30:35:fe:ab:b4:f6:ac:bf:5b:
                    1a:97:f4:11:ca:5c:a6:b6:ca:e5:2e:33:47:f1:e0:
                    62:c1:c8:55:59:4a:c7:d4:21:b1:39:89:6f:81:58:
                    76:bd:8c:a2:d6:03:75:64:92:15:c0:93:f9:07:85:
                    f9:ef:c7:16:5e:f7:14:c7:ea:9e:18:c5:2a:fb:ed:
                    15:cc:20:0f:b5:5b:46:36:ba:68:71:40:ce:dc:4c:
                    05:3f:7a:46:8e:4b:5a:1e:14:28:61:6b:70:9d:a5:
                    f9:96:7f:88:c8:04:50:6c:4b:f9:16:2a:09:9b:d1:
                    00:21:90:c0:dc:27:fd:cb:e2:f7:08:68:bf:62:be:
                    74:03:2e:46:63:8c:8a:c9:45:1c:b6:e6:f3:07:65:
                    fb:66:4d:e6:b7:e2:a2:6a:e1:47:6a:1e:64:71:d3:
                    ce:53:6a:03:2f:78:37:bf:f7:eb:57:8a:57:78:53:
                    62:1d:07:e2:c1:41:ac:c5:ed:66:80:48:54:15:ed:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A7:5D:8C:A2:65:BE:0A:A5:BC:89:9D:98:42:5B:F9:69:03:61:68
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/0a780aded9dabf63283959a6696312a1fecffbf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.208.0/20
                IPv6:
                  2800:5d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52302

    Signature Algorithm: sha256WithRSAEncryption
         0a:f1:91:44:02:54:73:25:db:73:69:ea:3e:e9:fe:35:d4:80:
         b2:3a:d8:b0:20:fe:82:a8:a9:b0:76:d0:2d:c1:97:48:fd:ae:
         01:fb:24:6c:b9:b9:83:1d:dc:a5:5c:d3:11:13:34:ad:50:17:
         6f:84:f8:c1:20:53:89:c1:1a:00:d1:c3:64:c4:da:c4:e2:a1:
         d7:a6:2f:8a:6c:ab:4b:34:01:fc:2d:60:5b:a0:fc:fc:03:66:
         6d:21:b2:e3:ba:ac:f8:8d:76:4e:d0:94:8e:b3:30:b5:0f:2a:
         0f:21:2b:6a:78:ad:24:65:d2:87:7d:c6:c8:60:97:21:f5:33:
         90:a3:e7:e1:13:34:64:09:c0:33:a8:76:20:7f:ed:fd:89:af:
         98:4a:54:08:b9:2b:f9:03:b1:38:47:04:f8:5e:49:50:52:1e:
         b8:ee:22:6a:a5:8f:7b:d4:f2:d5:0d:83:f8:4b:20:89:e3:b6:
         1c:08:28:79:c9:77:d4:84:75:52:65:0c:15:c0:cc:4c:f3:48:
         be:24:83:7e:ba:8b:e5:d0:35:f2:13:2a:9c:ab:e7:60:45:a3:
         6f:d5:e4:df:1c:42:ed:07:ca:64:2a:ce:e7:1c:d8:ff:4a:2d:
         8e:df:ed:6d:34:6d:3e:e1:61:5a:5b:48:3c:63:8a:2a:ad:e6:
         e6:f4:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----