Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
File:                     38b29341362af70cee57f236bd01d638b2845ee4.cer (raw, json)
Hash identifier:          Fx1p0mFvKOBubj3l/vfrWA/1qjNY2kzOD1o8reQXjEs=
Subject key identifier:   A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD966E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:04 +0000
Certificate not after:    Sun 26 May 2024 15:26:56 +0000
Subordinate resources:    AS: 262171
                          IP: 190.93.160.0/20
                          IP: 2803:fb40::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14521966 (0xdd966e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:04 2017 GMT
            Not After : May 26 15:26:56 2024 GMT
        Subject: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a2:b5:f6:92:ac:5a:a1:7c:b6:cb:68:4e:11:
                    77:27:08:3f:98:42:9b:1f:24:9d:f5:72:d0:23:2f:
                    09:a6:ef:70:52:fd:bb:85:fc:02:70:6a:f3:2d:b9:
                    a2:0f:52:95:73:3a:50:2b:d6:07:6f:71:35:f6:93:
                    82:82:24:f1:0a:6f:4a:1b:0a:b5:57:40:26:1e:cd:
                    49:5c:35:14:00:91:c4:da:ff:e3:e3:3a:ab:cb:97:
                    f9:d5:7b:76:6e:ae:d9:c2:64:73:9d:1c:b1:3f:f8:
                    77:51:d7:d2:0a:1b:0d:80:fc:b7:ca:92:06:46:22:
                    83:f4:7c:68:3a:ad:2e:9f:ba:e3:22:d3:d6:7f:3f:
                    2e:db:e0:fa:7a:b4:cf:52:13:61:c9:bd:a8:27:7a:
                    5d:d0:10:7e:06:4b:ef:b5:4b:f0:0b:ca:e2:c2:ab:
                    c0:e5:eb:fc:9a:1c:f7:8d:d5:42:ad:f1:c3:94:73:
                    9c:ab:d0:2f:01:cb:a8:e7:e5:11:68:9e:53:53:de:
                    49:00:a9:d1:83:8b:a8:69:40:4f:ad:9e:34:60:3d:
                    8f:ca:8a:b2:6f:d0:b3:51:72:55:61:de:cb:74:76:
                    9f:76:7d:fd:b9:63:e3:a5:89:da:be:44:0d:e3:80:
                    ca:56:2c:50:d8:a9:c6:a9:cc:b3:44:de:a2:0d:f5:
                    38:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/20
                IPv6:
                  2803:fb40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262171

    Signature Algorithm: sha256WithRSAEncryption
         51:e7:8a:2a:78:2e:01:7f:1f:09:ac:b5:be:68:88:a7:da:4f:
         a2:2d:48:e3:af:e6:85:82:31:de:01:2c:34:6e:1b:dd:bd:d7:
         bb:f2:a8:f4:05:c2:08:7c:ff:83:70:78:47:eb:ec:5c:a8:c1:
         77:f4:f4:0d:82:80:06:a5:c2:10:29:5a:19:ae:e1:ea:76:e6:
         69:fa:09:b7:e0:05:af:de:78:76:aa:48:54:be:d7:e0:10:df:
         71:cf:7b:37:0b:c9:ec:44:c5:c0:b3:f5:c8:22:7a:69:ab:2c:
         e9:8f:5c:8a:81:5a:05:0a:97:9f:a8:a4:77:9c:4c:42:bb:e3:
         11:0c:d7:db:bb:3a:e1:79:4c:a2:32:c2:04:c4:ac:b4:fb:4e:
         30:82:7c:b3:f1:79:05:7e:8d:db:02:d1:bf:d6:12:a0:70:03:
         5b:0c:3c:bd:4f:ca:43:bc:b9:ef:a2:3b:48:a3:37:6a:a2:1d:
         a7:e5:0f:06:6e:41:ee:75:6c:c5:b3:b7:af:ad:19:48:bc:1d:
         9c:bd:4f:d2:0b:a4:03:b0:99:31:ce:43:24:cd:48:e5:25:da:
         55:27:20:ca:81:99:43:27:ba:57:0b:ae:10:f2:ee:6f:ec:3d:
         53:42:b3:a0:10:01:f5:70:e9:96:33:b6:b0:f2:5c:06:9b:e5:
         28:fe:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----