Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer
File:                     24b9a83a84ed651b0b613359fbb1a875e436316a.cer (raw, json)
Hash identifier:          uIqJMYAs5E/E5t1VkBqyoDJiv9k9spQVAMpiijA9VL0=
Subject key identifier:   9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDC4EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/24b9a83a84ed651b0b613359fbb1a875e436316a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 Jun 2022 16:45:45 +0000
Certificate not after:    Wed 23 Oct 2024 21:41:57 +0000
Subordinate resources:    AS: 270149
                          IP: 148.208.0.0/16
                          IP: 2806:3c8::/32

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 12:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14533866 (0xddc4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 16:45:45 2022 GMT
            Not After : Oct 23 21:41:57 2024 GMT
        Subject: CN=24b9a83a84ed651b0b613359fbb1a875e436316a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c8:1f:ec:b5:3b:9f:49:3f:e2:f0:06:65:ca:
                    c7:db:f1:f2:59:54:1f:ff:8c:db:81:32:98:4d:15:
                    3d:4f:7f:de:5a:01:7e:ac:34:66:8a:49:77:7c:68:
                    3f:b9:cf:3b:f4:26:45:0b:02:48:28:73:0a:4a:83:
                    ff:ba:09:9b:21:f3:db:f9:89:e0:ef:5e:67:14:a3:
                    77:77:98:e7:e7:7d:fa:bf:01:fc:f8:f8:c3:96:ca:
                    d5:c9:f3:42:aa:0b:50:5d:6b:b7:8f:e6:54:c1:a9:
                    1d:eb:6b:9d:73:f1:ea:02:1b:f8:9f:d8:e1:f7:70:
                    0d:05:8f:25:8a:ec:88:10:86:a0:5e:3c:d4:0d:f1:
                    8b:e3:fa:45:a2:a0:63:48:4a:c9:db:67:23:c5:6d:
                    96:61:34:6d:b5:6a:60:2b:d8:5e:ff:2d:89:e1:9d:
                    15:1a:07:c1:21:f6:04:3a:6c:4a:4e:f7:fc:6d:7e:
                    f8:45:bb:a2:74:9a:cd:d9:f1:d0:29:22:a9:1d:8b:
                    05:a2:d1:c1:a5:fd:67:d1:5e:64:25:66:6d:e0:90:
                    8b:fc:cc:1b:29:d7:39:f7:c0:80:92:37:af:e1:6b:
                    90:ce:80:b3:50:ac:a4:08:3f:86:32:f1:f1:69:7c:
                    98:96:7f:8e:2e:18:0d:12:6a:64:89:c4:d4:42:db:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/24b9a83a84ed651b0b613359fbb1a875e436316a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.0.0/16
                IPv6:
                  2806:3c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270149

    Signature Algorithm: sha256WithRSAEncryption
         0c:70:29:fb:8b:02:c2:ee:64:f3:7b:c6:a3:f0:0a:52:e2:20:
         e2:00:30:28:7d:5c:26:32:7f:02:e1:cb:ab:87:ba:3d:b0:40:
         13:7f:af:e4:26:86:b1:e8:0c:4b:ff:4d:04:b2:f3:bb:bc:58:
         9e:9b:92:4e:19:68:87:17:39:c7:1d:64:fd:39:ae:47:78:3f:
         56:0b:c5:5c:b5:d1:7a:70:16:34:d4:05:3b:1f:df:60:57:cc:
         48:9b:47:f5:bf:2d:02:86:1f:94:ce:9d:01:21:8d:1a:ca:b8:
         94:05:7c:c3:35:67:e1:6c:92:83:5b:85:81:9b:e9:50:3a:77:
         82:bc:f6:ee:ca:84:f1:0f:cd:19:ea:66:9b:8a:02:92:4f:a0:
         74:72:1a:a5:ca:a5:13:7b:dd:16:33:41:3a:e2:22:0c:11:35:
         94:2f:b6:33:68:ce:2f:dc:47:49:bd:44:0d:3a:1b:0d:61:93:
         85:db:e9:89:b8:69:25:d8:02:6a:f5:64:b9:3a:f4:3e:c8:03:
         81:0f:8d:ac:96:d5:98:2e:c1:5d:6b:65:bc:53:c8:bc:a3:d6:
         56:6a:f8:6f:53:c6:4f:6f:49:99:20:8f:5a:a1:0b:54:d6:d4:
         ba:27:45:62:07:81:01:7d:5b:54:d6:4d:73:27:82:2a:91:ca:
         e2:d2:ef:94
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIEAN3E6jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDYyMTE2NDU0NVoXDTI0MTAyMzIxNDE1
N1owMzExMC8GA1UEAxMoMjRiOWE4M2E4NGVkNjUxYjBiNjEzMzU5ZmJiMWE4NzVl
NDM2MzE2YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIDIH+y1O59J
P+LwBmXKx9vx8llUH/+M24EymE0VPU9/3loBfqw0ZopJd3xoP7nPO/QmRQsCSChz
CkqD/7oJmyHz2/mJ4O9eZxSjd3eY5+d9+r8B/Pj4w5bK1cnzQqoLUF1rt4/mVMGp
HetrnXPx6gIb+J/Y4fdwDQWPJYrsiBCGoF481A3xi+P6RaKgY0hKydtnI8VtlmE0
bbVqYCvYXv8tieGdFRoHwSH2BDpsSk73/G1++EW7onSazdnx0CkiqR2LBaLRwaX9
Z9FeZCVmbeCQi/zMGynXOffAgJI3r+FrkM6As1CspAg/hjLx8Wl8mJZ/ji4YDRJq
ZInE1ELb0o0CAwEAAaOCAwgwggMEMB0GA1UdDgQWBBSdHx2434vi7ufi3k135Yvz
jSzMqTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83NzIyMmJmNy03MWI3
LTQwYmEtYmRiMS1lYTUwMzBkYjUyNzUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzcyMjJiZjctNzFiNy00
MGJhLWJkYjEtZWE1MDMwZGI1Mjc1LzI0YjlhODNhODRlZDY1MWIwYjYxMzM1OWZi
YjFhODc1ZTQzNjMxNmEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwCwQCAAEwBQMDAJTQMA0EAgACMAcDBQAoBgPIMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfRTANBgkqhkiG9w0BAQsFAAOCAQEADHAp
+4sCwu5k83vGo/AKUuIg4gAwKH1cJjJ/AuHLq4e6PbBAE3+v5CaGsegMS/9NBLLz
u7xYnpuSThlohxc5xx1k/TmuR3g/VgvFXLXRenAWNNQFOx/fYFfMSJtH9b8tAoYf
lM6dASGNGsq4lAV8wzVn4WySg1uFgZvpUDp3grz27sqE8Q/NGepmm4oCkk+gdHIa
pcqlE3vdFjNBOuIiDBE1lC+2M2jOL9xHSb1EDTobDWGThdvpibhpJdgCavVkuTr0
PsgDgQ+NrJbVmC7BXWtlvFPIvKPWVmr4b1PGT29JmSCPWqELVNbUuidFYgeBAX1b
VNZNcyeCKpHK4tLvlA==
-----END CERTIFICATE-----