Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e7c7268d24306b60d655788ea7e6ab7c157a37.cer
File:                     13e7c7268d24306b60d655788ea7e6ab7c157a37.cer (raw, json)
Hash identifier:          T8EZRB6uJtxTis+FGdt4ge8qhEgn04rDV0HN2bWbtY0=
Subject key identifier:   EA:A8:46:61:25:18:D4:A2:C1:10:28:2F:AD:CA:B2:F8:36:04:76:EA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D975E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/13e7c7268d24306b60d655788ea7e6ab7c157a37.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 08 Oct 2021 16:42:13 +0000
Certificate not after:    Thu 08 Aug 2024 19:31:54 +0000
Subordinate resources:    AS: 271993
                          IP: 2803:5110::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14251495 (0xd975e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  8 16:42:13 2021 GMT
            Not After : Aug  8 19:31:54 2024 GMT
        Subject: CN=13e7c7268d24306b60d655788ea7e6ab7c157a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a1:0e:26:c4:08:87:b9:e3:04:39:9f:da:22:
                    2b:a6:d2:8d:58:6e:8f:e0:18:1e:9a:a5:3c:50:51:
                    b7:91:c0:80:bc:81:f1:8e:f4:d3:d1:00:13:61:76:
                    70:7b:41:25:2d:b9:ff:78:66:1c:ef:eb:11:35:14:
                    56:87:ca:50:e0:8c:15:d2:ba:17:83:10:03:c2:fe:
                    68:cf:e3:ed:a2:a5:d7:9d:5a:4c:e1:77:27:34:82:
                    b9:cf:ca:88:b0:f1:52:33:7f:2b:73:16:4d:08:00:
                    17:49:16:ce:26:e5:c8:aa:28:60:1d:9c:63:94:e5:
                    45:e7:eb:fb:7f:a5:07:68:01:88:e4:6e:0d:45:15:
                    73:52:2b:ad:64:6a:63:d9:45:90:85:ac:c7:d6:91:
                    8a:27:83:4b:11:23:ca:34:67:8f:6b:85:59:24:84:
                    ae:84:eb:1e:44:f9:9f:19:90:81:fe:2d:1b:a8:43:
                    e6:81:27:c9:f8:c1:70:25:69:23:25:4c:ae:e4:72:
                    35:17:f2:05:f7:7b:8e:e1:ff:7e:94:d2:5d:88:4e:
                    51:53:59:50:ba:3e:fc:68:11:61:5e:6d:2c:19:03:
                    03:f8:a6:df:3a:ff:12:a9:de:ed:50:6a:91:04:2f:
                    52:8a:e8:7f:f2:41:49:f6:fd:3b:ec:fc:51:6e:82:
                    56:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A8:46:61:25:18:D4:A2:C1:10:28:2F:AD:CA:B2:F8:36:04:76:EA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/13e7c7268d24306b60d655788ea7e6ab7c157a37.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271993

    Signature Algorithm: sha256WithRSAEncryption
         14:20:fb:56:74:a4:43:d8:af:70:b0:15:33:2d:c1:ec:93:34:
         1a:da:98:5b:7a:cb:cd:84:7a:c3:86:34:e7:1b:09:94:50:ec:
         6b:7e:c1:cd:eb:1f:31:ff:cb:4b:f8:79:9e:94:14:01:ce:81:
         c0:9f:1d:fb:c8:0b:98:39:9f:86:7b:3a:63:c6:74:52:d8:ac:
         0c:f6:ee:54:24:3e:e5:f6:23:da:f0:34:33:b5:ab:68:6e:97:
         22:ab:71:fb:b7:72:26:ac:70:80:ef:ae:73:ce:81:19:da:fe:
         e9:fb:4c:91:50:7f:c1:4e:bf:b6:d4:3e:02:55:f2:da:32:b0:
         d9:48:21:c9:1a:06:e3:8f:aa:1e:54:9c:9c:30:d6:63:ab:f3:
         d2:b2:19:27:83:fe:5f:f5:1e:16:c0:6c:56:39:b9:da:68:c2:
         60:56:8c:b7:1b:37:f6:86:ba:f6:6d:6f:58:8c:02:07:18:30:
         88:8e:22:b2:50:47:98:13:e6:65:85:5d:93:2e:e5:89:87:bf:
         30:03:df:cc:4b:c1:37:cb:8d:a3:82:18:9b:af:63:ec:0e:59:
         1e:cd:f9:2e:d3:6c:14:90:eb:92:86:c7:d8:d8:7c:6c:11:24:
         dd:cc:ab:7e:96:ae:23:f5:95:9f:0a:e4:f2:63:7c:9e:f4:f4:
         ce:f2:be:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 12:30:33 2023 by rpki-client on console-ams.rpki-client.org