Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38fda0bcf0f391014d6a46cb5293e3f0251a85e8.cer
File:                     38fda0bcf0f391014d6a46cb5293e3f0251a85e8.cer (raw, json)
Hash identifier:          kZB24PKQOiNk2GmG9T2bbH1ltBbJ9zSh9mVDElIgWdM=
Subject key identifier:   C4:08:2E:23:72:1B:8E:06:AB:36:65:67:39:B3:59:F0:CC:32:AB:94
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E280D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2c206e0c-d40d-4219-909b-b55b2ce156bb/38fda0bcf0f391014d6a46cb5293e3f0251a85e8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2c206e0c-d40d-4219-909b-b55b2ce156bb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 19 Sep 2021 01:12:09 +0000
Certificate not after:    Sun 05 Jan 2025 02:06:45 +0000
Subordinate resources:    IP: 187.62.104.0/22
                          IP: 2806:3ae::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14844116 (0xe280d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 19 01:12:09 2021 GMT
            Not After : Jan  5 02:06:45 2025 GMT
        Subject: CN=38fda0bcf0f391014d6a46cb5293e3f0251a85e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:29:72:33:27:f9:3a:f8:fe:88:ce:44:1b:dd:
                    49:4e:66:56:3c:b3:2b:70:65:84:9c:96:6f:d5:4d:
                    7f:e0:24:62:69:04:06:2e:f7:b0:f4:27:82:ac:f0:
                    46:9d:f2:bd:8b:b1:02:2e:ea:a6:3f:9f:66:29:24:
                    b2:ea:84:2e:75:24:2f:de:59:0d:6c:36:d5:1e:c8:
                    66:96:a2:0f:dd:b4:f3:16:4e:8b:2b:4a:12:1a:df:
                    21:ca:a6:3b:c7:86:d7:b2:7e:63:7c:e8:21:e8:81:
                    aa:bd:e3:90:1c:22:41:38:39:c6:7b:ef:2c:54:f3:
                    d8:14:07:bb:af:57:be:c3:75:20:6f:6f:3c:ff:05:
                    31:aa:67:03:96:3b:48:b3:eb:72:c2:bd:43:66:34:
                    63:31:a1:4e:fc:cd:f8:43:31:a5:b1:97:86:b5:79:
                    42:37:1c:3b:ca:e4:96:bc:d2:72:75:4a:55:5e:2b:
                    f6:51:b5:c1:7a:fb:93:53:18:26:e2:93:3a:a0:e7:
                    b9:90:65:28:dd:d4:1a:fd:f2:75:8d:5f:c5:7d:92:
                    6b:90:32:38:c2:e8:05:10:ae:e8:d4:b8:4e:0d:ef:
                    c3:c2:81:f8:55:9f:62:10:c9:c8:6f:91:6d:48:c9:
                    94:a7:18:24:9b:f0:aa:78:f4:a9:92:69:1b:9b:2c:
                    2e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:08:2E:23:72:1B:8E:06:AB:36:65:67:39:B3:59:F0:CC:32:AB:94
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2c206e0c-d40d-4219-909b-b55b2ce156bb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2c206e0c-d40d-4219-909b-b55b2ce156bb/38fda0bcf0f391014d6a46cb5293e3f0251a85e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.104.0/22
                IPv6:
                  2806:3ae::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:38:22:ba:86:85:73:71:06:37:9c:f6:59:a4:f0:00:4e:0e:
         fd:79:33:79:c3:4b:f9:2f:8b:34:93:63:2a:ff:94:e1:3c:63:
         35:21:ef:3f:25:7f:f8:55:61:05:1e:6f:81:75:2d:72:e9:0d:
         73:ad:d7:b1:b9:47:81:74:af:f3:d1:c7:e6:0a:2e:d7:d5:3d:
         90:92:e0:34:a1:f1:ea:6b:19:83:cb:7b:18:90:48:10:f2:d1:
         9e:ff:0e:a9:be:d8:78:4c:57:e5:5e:37:78:d5:8d:e0:cd:62:
         1d:fd:84:0e:93:cd:03:50:ca:79:fa:af:0b:04:58:f1:95:94:
         76:d2:64:0a:28:8c:1a:ce:c0:28:6a:2d:7b:71:bb:c5:ca:e3:
         46:84:4c:e4:11:02:e1:24:b2:2c:b4:6f:2d:da:6b:09:9b:24:
         80:06:17:28:3b:91:ad:9a:01:4f:6f:07:5c:dd:f4:3e:46:fe:
         43:69:d2:93:85:c4:e2:ad:bd:3a:82:37:6b:e2:2a:90:23:ed:
         78:54:b0:f2:2d:2a:4a:cf:80:72:25:44:4f:97:09:71:97:ca:
         3a:53:0e:f9:67:17:23:05:08:ac:2d:f0:d8:16:ff:dc:8a:d0:
         be:94:d2:1d:d3:a4:b2:b6:bd:a1:a2:08:b7:2b:9b:4b:1d:ff:
         68:68:d2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:16 2023 by rpki-client on console-fra.rpki-client.org