Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a95f00c30d4360b8734d44d748537fafcb56a34.cer
File:                     3a95f00c30d4360b8734d44d748537fafcb56a34.cer (raw, json)
Hash identifier:          xcS9xx+pWKU+diQTbxeFHV4KtmUteSHP/CMb4mqndk8=
Subject key identifier:   67:B6:BA:F7:1F:7A:FF:79:CC:B0:28:98:5D:33:2B:24:BF:CD:C0:74
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F01B82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/3a95f00c30d4360b8734d44d748537fafcb56a34.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 15 Mar 2022 19:41:33 +0000
Certificate not after:    Tue 30 Jul 2024 19:24:29 +0000
Subordinate resources:    AS: 64117
                          IP: 45.185.220.0/22
                          IP: 2803:d360::/32

Validation:               Failed, certificate revoked on Thu 14 Mar 2024 19:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15735682 (0xf01b82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 15 19:41:33 2022 GMT
            Not After : Jul 30 19:24:29 2024 GMT
        Subject: CN=3a95f00c30d4360b8734d44d748537fafcb56a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:aa:99:f9:de:94:a4:f7:8e:b6:11:c4:7e:19:
                    b1:5e:a9:75:cb:6a:80:26:1a:30:87:70:cf:a3:69:
                    9d:11:51:98:ab:2c:9b:a5:9c:ab:e6:cb:30:22:6c:
                    0c:9a:36:64:ee:e0:75:ad:ef:1e:00:bc:3c:0e:26:
                    98:ad:a8:e6:79:e7:77:81:2e:58:fb:fd:a7:bc:86:
                    55:da:f4:59:dc:b5:e2:29:50:99:6f:58:29:8d:3a:
                    a8:ef:94:a3:76:1e:a8:58:34:cf:71:ef:f9:9d:07:
                    07:b6:b8:32:25:86:f0:27:fb:5c:7c:13:50:99:d1:
                    47:16:06:06:5e:43:2e:fc:61:21:72:8b:c9:de:e1:
                    1c:82:64:63:98:ee:fd:3c:e2:54:52:eb:6e:20:b2:
                    66:9b:6d:28:cb:43:1b:fa:33:a5:e1:a8:9e:ef:84:
                    30:e5:c2:6b:4a:a1:0e:a9:f9:49:e4:ae:73:90:6f:
                    cb:46:63:70:ee:f6:a4:f1:12:26:51:c0:25:b4:c1:
                    4c:e1:f8:51:a6:2d:f9:0c:05:c6:c1:7f:c4:db:86:
                    2c:27:66:af:3d:b0:8d:02:fa:3a:05:a5:e9:d1:5f:
                    32:6e:51:cd:59:79:3f:c6:21:ac:e1:cf:81:e4:69:
                    64:07:5f:80:c1:70:a1:a5:01:f7:a6:88:2d:fe:9f:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B6:BA:F7:1F:7A:FF:79:CC:B0:28:98:5D:33:2B:24:BF:CD:C0:74
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/3a95f00c30d4360b8734d44d748537fafcb56a34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.220.0/22
                IPv6:
                  2803:d360::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64117

    Signature Algorithm: sha256WithRSAEncryption
         2d:98:58:de:6c:ec:53:ad:98:c8:94:51:4a:32:0e:ea:14:78:
         9e:3f:52:f4:c1:ec:93:56:2c:7c:a0:2b:13:0b:47:1e:2e:49:
         ca:a8:79:42:38:f6:60:8d:f1:04:13:73:e7:65:2f:ad:fa:bd:
         ea:e0:e1:06:59:aa:3e:76:a2:a1:a9:a4:b9:d3:bb:ef:f8:26:
         23:65:98:ec:6c:48:5a:65:5d:04:01:b3:b3:66:07:65:fb:68:
         9c:d2:3b:06:f0:7e:d7:a3:ce:ab:8a:71:18:b9:e6:ed:96:6a:
         00:a2:3b:81:1c:aa:6d:da:2b:37:6a:21:0e:5a:5f:df:49:32:
         45:ea:92:83:ce:9e:cb:ac:c1:6e:60:cd:1e:92:c6:4c:af:8d:
         86:f1:a2:0c:c4:4d:a5:a3:c5:58:9f:3c:7e:fd:f3:d3:92:42:
         a3:94:97:57:e8:42:e8:a9:5d:f8:ea:37:07:dc:93:a3:9c:91:
         29:0e:74:41:29:62:35:e6:80:6b:42:05:fd:d4:ef:0c:7e:ee:
         63:84:60:05:ed:85:7c:09:97:75:cf:6c:33:64:d4:f3:2e:2b:
         55:e1:29:a9:82:80:d3:1f:96:55:e0:a7:32:97:d5:0f:72:50:
         41:2d:6a:d5:b1:e5:d4:34:4a:1e:d0:4e:ff:da:33:7a:50:5e:
         38:49:cd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----