Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
File:                     28bbc56a25d664ac18a328309550c0f6329ea362.cer (raw, json)
Hash identifier:          7EXWtClqdhtk4nZyi3Vk5bhidrM9VUirHZ7ajcKjS2k=
Subject key identifier:   EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4A759
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:31 +0000
Certificate not after:    Tue 29 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 10697
                          IP: 190.110.224.0/23
                          IP: 190.110.228.0 -- 190.110.255.255
                          IP: 190.114.96.0/19
                          IP: 200.50.160.0/19
                          IP: 200.123.32.0/19
                          IP: 2800:820::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16033625 (0xf4a759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:31 2017 GMT
            Not After : Apr 29 06:00:00 2025 GMT
        Subject: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:17:83:31:49:aa:66:0b:92:7f:d3:52:16:
                    aa:4b:65:53:18:29:5f:fa:7c:0e:7a:76:9c:db:0b:
                    9f:89:70:68:42:a6:23:ca:33:3c:03:60:0a:6d:af:
                    8e:07:17:b7:ed:59:18:7c:9b:70:f7:fb:3b:03:e2:
                    82:42:1a:96:e6:3d:90:3e:a9:77:5b:62:d4:9d:34:
                    7e:b6:5a:06:99:b8:b7:89:1d:08:fc:c0:33:ba:31:
                    42:8a:9c:ce:56:22:92:22:c4:49:16:88:fa:e5:83:
                    1f:6b:5e:3d:69:4d:4c:b2:ce:1a:2a:67:5a:43:3f:
                    4c:6f:b7:3b:e4:4d:bd:26:da:2f:da:66:55:d2:f5:
                    3a:b1:f1:e7:c5:5f:03:e0:5a:69:e3:84:8f:be:b4:
                    32:10:e3:f6:61:86:17:ba:cf:13:8c:10:a7:5c:af:
                    77:6e:a8:ca:55:8b:1a:c7:95:84:be:3c:36:0d:c1:
                    8e:49:15:dd:7a:d3:34:83:8b:dd:90:66:7f:7e:d7:
                    ce:e4:b4:b1:7e:89:44:37:1d:e8:14:bd:18:8a:f7:
                    54:f2:a9:db:a8:d8:76:2a:02:07:fd:4a:a7:b5:b1:
                    38:67:d8:35:20:83:de:11:31:2d:be:ed:44:df:ee:
                    79:75:8e:01:c3:29:cd:14:88:b1:d8:13:58:5b:1b:
                    6f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.224.0/23
                  190.110.228.0-190.110.255.255
                  190.114.96.0/19
                  200.50.160.0/19
                  200.123.32.0/19
                IPv6:
                  2800:820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10697

    Signature Algorithm: sha256WithRSAEncryption
         c0:74:9a:46:72:26:68:6a:1a:82:87:4d:c2:3f:f0:af:7c:aa:
         7e:23:c9:d5:71:c4:56:e1:72:e0:c6:f4:d0:b0:2d:d9:c2:6e:
         9b:2b:9b:b6:60:2e:3a:5c:3b:57:e8:2b:97:ff:51:8c:dd:f5:
         02:ce:87:29:55:53:c3:9a:81:0b:5a:1f:5a:c1:b5:2e:7d:27:
         62:53:07:19:11:73:1d:34:cc:b6:84:5a:d5:53:69:a0:eb:fa:
         e8:a8:04:bd:c0:74:26:3d:f3:0c:7e:c6:22:32:b9:7f:f2:39:
         8a:74:fb:80:d9:c1:80:86:fd:1c:2a:4d:2c:47:e0:6e:f1:79:
         42:e2:25:41:b6:81:76:03:0d:68:6e:4d:40:08:96:32:a0:bd:
         84:f1:d3:2d:16:fa:84:55:fc:bb:0c:cf:0c:84:9a:83:cc:09:
         d0:be:6e:63:a0:0a:c1:20:e6:6e:f4:3c:88:26:82:c4:d0:b3:
         e3:ce:54:16:ed:72:d7:81:16:07:f3:45:c7:f0:7a:46:17:5a:
         b1:53:84:8d:5c:ab:33:eb:86:fa:9e:7d:a8:53:ec:b8:bd:a4:
         38:48:77:51:45:ef:27:4a:a4:0d:7a:69:94:5c:00:bc:99:22:
         e4:a7:2b:98:83:c0:ea:00:1a:d9:49:ed:3b:ba:68:40:b4:62:
         be:10:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----