Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38edaf5613c2262fc6910e377ea3f09ce2474e6b.cer
File:                     38edaf5613c2262fc6910e377ea3f09ce2474e6b.cer (raw, json)
Hash identifier:          6A95DJLeU50ne5aS+Lw0O75a0aywdKam3zsn+RlcUOI=
Subject key identifier:   C2:9E:9D:75:F7:01:5A:BA:4A:79:AA:3C:79:EB:96:CB:3B:FF:F5:09
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C743BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/38edaf5613c2262fc6910e377ea3f09ce2474e6b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 19 Aug 2019 10:31:23 +0000
Certificate not after:    Sat 03 Feb 2024 05:00:00 +0000
Subordinate resources:    AS: 265695
                          IP: 45.5.8.0/22
                          IP: 2803:9c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13059003 (0xc743bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 19 10:31:23 2019 GMT
            Not After : Feb  3 05:00:00 2024 GMT
        Subject: CN=38edaf5613c2262fc6910e377ea3f09ce2474e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:d9:a8:f0:32:20:c3:80:b3:03:bf:3d:a1:
                    b3:27:91:db:51:6b:5d:21:dd:6b:ad:f1:14:78:ae:
                    d9:e9:ca:50:9e:fa:ab:9c:3a:93:b9:76:cf:d7:b2:
                    5f:ba:63:7a:b4:34:49:15:1b:0e:ee:0d:85:91:a9:
                    d5:43:d4:81:e6:54:d7:f8:7b:ab:6c:f3:6a:bd:6d:
                    0b:65:11:5a:e7:7c:6b:65:d1:53:1b:2c:fa:56:81:
                    84:64:3b:2d:19:3e:97:15:4f:9b:13:c3:d9:76:10:
                    01:84:a0:07:ae:38:72:5b:94:02:5f:a9:f2:c4:5d:
                    bc:65:9c:84:c6:de:df:6a:c9:0a:81:d3:09:f7:87:
                    8b:e1:0c:43:a3:da:23:4d:6f:9e:85:fc:96:d9:e9:
                    a8:37:30:f8:09:0d:91:f1:59:83:41:ba:e1:0c:3a:
                    7f:72:5e:65:bf:e7:c9:e3:cb:ff:ee:cc:71:80:69:
                    e3:8e:12:d1:e3:05:ab:23:ef:2b:ac:0f:85:55:b4:
                    30:23:01:be:a0:bd:b5:c3:2f:a9:12:b3:5b:31:20:
                    84:54:e8:1f:79:62:76:3a:e3:c1:41:b9:d2:94:3f:
                    ed:7a:f1:0c:72:1a:d0:d2:17:49:47:60:bf:12:f8:
                    6b:69:4c:3f:57:a2:dd:83:de:fc:b3:0f:79:da:7a:
                    44:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9E:9D:75:F7:01:5A:BA:4A:79:AA:3C:79:EB:96:CB:3B:FF:F5:09
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/38edaf5613c2262fc6910e377ea3f09ce2474e6b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.8.0/22
                IPv6:
                  2803:9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265695

    Signature Algorithm: sha256WithRSAEncryption
         84:06:0a:56:2d:f5:90:e3:97:63:2e:f4:a2:53:56:3f:4f:9e:
         8d:fb:46:56:95:5f:2d:23:f7:7a:54:b6:0d:ba:b9:bc:01:b0:
         d1:ee:bf:ba:7d:f3:b2:3d:3f:8b:29:a5:55:ae:7e:c4:46:f0:
         3e:23:00:72:19:64:75:f5:f0:80:65:43:3a:dc:c2:57:ba:d7:
         43:61:0e:0a:c2:ed:92:c1:e6:a2:94:b7:31:0b:90:56:55:9b:
         da:51:fa:2a:dd:c4:46:b7:1c:14:3f:08:07:8d:44:8e:6d:d2:
         06:49:37:43:ac:b8:3c:53:51:73:c0:34:61:3c:17:84:fe:dc:
         ed:ef:d8:7e:b0:81:1a:16:d5:6e:e8:b7:c9:ce:e3:d2:eb:8b:
         de:fc:ba:2e:2d:37:e0:3b:fb:cc:52:89:f9:25:1b:ef:db:bb:
         4e:79:62:47:03:2d:9e:a1:0e:4d:ba:5e:e2:5a:80:58:56:58:
         de:9e:31:74:f9:92:83:31:7b:9c:a8:0a:d3:d4:78:e7:ed:20:
         45:c6:28:3c:65:69:4b:a2:2c:ca:b5:9c:55:76:6f:45:d7:8e:
         04:ae:95:97:ee:ee:93:0a:23:9b:a5:e9:72:3f:0b:bc:de:2f:
         97:66:55:1a:a8:a9:11:be:81:4e:08:d8:0f:70:58:93:19:35:
         12:d2:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----