Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10652e563f43bd248018a74ceab6e843345f20ce.cer
File:                     10652e563f43bd248018a74ceab6e843345f20ce.cer (raw, json)
Hash identifier:          bf+XiBJKEkWP1JRnlMwQd0mRwhV9kAS9nNEZtddnwZc=
Subject key identifier:   15:A7:E3:8C:B7:03:85:C1:A4:2E:F3:16:CD:13:25:41:3E:15:17:93
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DEF448
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/10652e563f43bd248018a74ceab6e843345f20ce.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:06 +0000
Certificate not after:    Sun 17 Mar 2024 21:25:05 +0000
Subordinate resources:    AS: 265721
                          IP: 45.65.244.0/22
                          IP: 200.58.240.0/21
                          IP: 2803:4dc0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14611528 (0xdef448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:06 2017 GMT
            Not After : Mar 17 21:25:05 2024 GMT
        Subject: CN=10652e563f43bd248018a74ceab6e843345f20ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:10:66:82:c5:4e:22:9b:a5:85:6c:5f:ed:a0:
                    9e:ef:5c:4b:22:a3:9b:e3:57:a1:73:69:08:c8:67:
                    e1:9c:2e:f3:13:12:94:e7:84:91:1f:83:50:f8:f8:
                    22:ba:ce:9f:29:9e:66:31:37:8c:3c:bf:d4:93:70:
                    d3:48:40:d4:53:af:29:84:97:dd:8d:86:d1:7a:3a:
                    f5:1a:2a:2b:df:3d:09:e4:b4:8e:a2:b7:1c:89:db:
                    8a:1e:06:76:fd:5a:86:11:1c:74:04:fb:f9:6c:b7:
                    fc:98:ce:5c:ec:0a:1c:1d:9a:7f:21:87:8a:b8:bf:
                    eb:94:f7:22:20:30:c6:5e:c6:87:aa:ce:01:a0:a2:
                    e2:ad:b9:a8:00:dd:f8:9c:9c:07:aa:2c:e0:35:d4:
                    10:0c:11:b5:b4:92:54:53:5d:fb:55:6b:a3:c1:e1:
                    35:40:de:be:88:04:66:2d:48:cd:9c:57:41:a8:13:
                    40:ce:44:0b:e1:8c:a7:f5:84:5a:5c:7f:00:8c:7c:
                    98:09:93:f5:cc:93:7c:a3:e4:00:33:53:e5:de:15:
                    e5:62:7a:32:c4:9c:e2:16:77:e0:5e:bf:50:50:33:
                    df:16:7e:c6:c2:51:7e:c3:f8:5b:10:05:7d:8f:f1:
                    e9:9b:b9:ce:a3:71:af:62:d8:ad:21:c8:af:f5:1d:
                    5a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A7:E3:8C:B7:03:85:C1:A4:2E:F3:16:CD:13:25:41:3E:15:17:93
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/10652e563f43bd248018a74ceab6e843345f20ce.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.244.0/22
                  200.58.240.0/21
                IPv6:
                  2803:4dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265721

    Signature Algorithm: sha256WithRSAEncryption
         a6:26:a9:2d:a7:7f:fa:e1:b3:95:3d:9d:da:ca:55:49:da:30:
         dc:65:68:bc:5e:b5:87:83:5e:51:e4:34:ae:42:6a:f3:7a:33:
         22:65:00:47:ac:29:02:4f:27:8e:d7:6a:b3:ed:70:1b:91:68:
         ca:6e:44:37:bb:f3:dd:c4:3b:48:ce:17:20:46:84:d6:89:8a:
         3f:18:e0:3d:80:eb:63:87:97:88:ec:8a:c9:57:e0:c2:75:76:
         74:be:e4:48:5e:27:b2:86:8f:a8:a8:2e:d3:9a:4f:a1:a0:a0:
         f4:c9:c8:fa:3d:49:d6:3d:50:b0:0b:93:81:87:0a:14:cd:7d:
         00:8a:12:71:df:0c:d5:7b:52:30:1b:8d:37:93:9f:75:3a:30:
         6f:39:5f:f4:0c:bd:2a:a3:66:00:41:2c:78:9b:ae:d4:18:5c:
         8f:6a:fd:23:34:45:67:82:30:57:98:d4:aa:25:39:e6:c0:ec:
         0f:4c:7b:05:00:96:1e:ac:51:33:fc:28:b6:91:3b:21:6a:60:
         e1:6b:ba:93:d7:34:51:60:89:64:98:86:26:62:cc:d4:23:ac:
         85:7e:af:ff:3b:79:42:10:e4:33:c5:2e:5b:63:49:c8:63:f9:
         04:8f:d3:ae:44:86:22:7d:22:b4:73:b7:ad:e2:70:18:2e:fa:
         bc:66:75:f7
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAN70SDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcwNloXDTI0MDMxNzIxMjUw
NVowMzExMC8GA1UEAxMoMTA2NTJlNTYzZjQzYmQyNDgwMThhNzRjZWFiNmU4NDMz
NDVmMjBjZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI4QZoLFTiKb
pYVsX+2gnu9cSyKjm+NXoXNpCMhn4Zwu8xMSlOeEkR+DUPj4IrrOnymeZjE3jDy/
1JNw00hA1FOvKYSX3Y2G0Xo69RoqK989CeS0jqK3HInbih4Gdv1ahhEcdAT7+Wy3
/JjOXOwKHB2afyGHiri/65T3IiAwxl7Gh6rOAaCi4q25qADd+JycB6os4DXUEAwR
tbSSVFNd+1Vro8HhNUDevogEZi1IzZxXQagTQM5EC+GMp/WEWlx/AIx8mAmT9cyT
fKPkADNT5d4V5WJ6MsSc4hZ34F6/UFAz3xZ+xsJRfsP4WxAFfY/x6Zu5zqNxr2LY
rSHIr/UdWu0CAwEAAaOCAw8wggMLMB0GA1UdDgQWBBQVp+OMtwOFwaQu8xbNEyVB
PhUXkzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iNjM3MWY1My04MmZj
LTQxNTQtODBjMS1mODAxM2FhMTM0MmMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjYzNzFmNTMtODJmYy00
MTU0LTgwYzEtZjgwMTNhYTEzNDJjLzEwNjUyZTU2M2Y0M2JkMjQ4MDE4YTc0Y2Vh
YjZlODQzMzQ1ZjIwY2UubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAi1B9AMEA8g68DANBAIAAjAHAwUA
KANNwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDfkwDQYJKoZIhvcNAQELBQAD
ggEBAKYmqS2nf/rhs5U9ndrKVUnaMNxlaLxetYeDXlHkNK5CavN6MyJlAEesKQJP
J47XarPtcBuRaMpuRDe7893EO0jOFyBGhNaJij8Y4D2A62OHl4jsislX4MJ1dnS+
5EheJ7KGj6ioLtOaT6GgoPTJyPo9SdY9ULALk4GHChTNfQCKEnHfDNV7UjAbjTeT
n3U6MG85X/QMvSqjZgBBLHibrtQYXI9q/SM0RWeCMFeY1KolOebA7A9MewUAlh6s
UTP8KLaROyFqYOFrupPXNFFgiWSYhiZizNQjrIV+r/87eUIQ5DPFLltjSchj+QSP
065EhiJ9IrRzt63icBgu+rxmdfc=
-----END CERTIFICATE-----