Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e2ac9164cd2977c22e4e616c8134d89b03c418a.cer
File:                     3e2ac9164cd2977c22e4e616c8134d89b03c418a.cer (raw, json)
Hash identifier:          qyLJLQuIUJU9yJmcc+8srTWwecY4KPMugZnIBPyVl7w=
Subject key identifier:   53:E5:C5:C2:5A:60:BA:CA:88:00:EF:7F:C8:23:6C:86:B2:D9:76:BA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0C65D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/de3e5440-6855-464d-9b05-dca4e6f31a11/3e2ac9164cd2977c22e4e616c8134d89b03c418a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/de3e5440-6855-464d-9b05-dca4e6f31a11/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 11 Jul 2018 15:22:44 +0000
Certificate not after:    Mon 05 Aug 2024 16:46:48 +0000
Subordinate resources:    AS: 264790
                          IP: 170.79.16.0/22
                          IP: 2803:b8c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15779421 (0xf0c65d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 15:22:44 2018 GMT
            Not After : Aug  5 16:46:48 2024 GMT
        Subject: CN=3e2ac9164cd2977c22e4e616c8134d89b03c418a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:fd:d2:08:53:bc:56:89:6f:fb:d6:ef:e8:
                    e5:70:56:ee:dc:87:c3:1e:4a:86:4c:e9:ca:2d:11:
                    f8:9f:96:29:84:97:3c:2b:6b:01:2a:a5:fb:08:66:
                    65:17:26:26:c0:bf:bc:ec:a1:b5:9c:4f:d2:be:9c:
                    76:b5:b3:40:05:d2:38:c9:78:41:8f:2e:e5:8a:0b:
                    e0:b2:d4:eb:04:0f:22:71:8b:e1:2e:99:d5:e8:60:
                    4a:9d:a9:df:47:f3:39:aa:cb:14:a2:43:81:02:4b:
                    5a:f9:8e:27:59:01:f9:9e:f6:ce:f6:4f:e1:20:89:
                    68:46:e8:12:8a:76:93:0c:e1:c6:fa:6c:bc:27:10:
                    1a:3e:40:f1:08:f1:5e:5a:34:bd:15:1e:83:f3:af:
                    f8:8b:0c:0c:aa:55:2c:43:31:db:e3:27:ce:f2:c7:
                    09:ac:40:da:3d:12:a4:76:3e:3b:7d:54:4f:cb:4c:
                    d1:ef:de:94:0c:5c:0c:ff:63:fa:0c:d7:bf:d5:65:
                    51:a6:c3:ed:b6:5d:bc:2a:fb:3a:05:29:87:76:20:
                    2b:e2:6a:f9:b8:08:eb:75:75:35:ef:3a:ec:2c:14:
                    38:91:a8:ab:99:c3:70:6e:dc:c8:7a:32:57:dd:8e:
                    ed:dc:88:68:66:7d:97:c9:9d:ff:f1:fa:35:21:20:
                    df:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E5:C5:C2:5A:60:BA:CA:88:00:EF:7F:C8:23:6C:86:B2:D9:76:BA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/de3e5440-6855-464d-9b05-dca4e6f31a11/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/de3e5440-6855-464d-9b05-dca4e6f31a11/3e2ac9164cd2977c22e4e616c8134d89b03c418a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.16.0/22
                IPv6:
                  2803:b8c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264790

    Signature Algorithm: sha256WithRSAEncryption
         3e:78:8d:f6:f1:5f:f6:6b:ab:da:8e:d2:7a:c5:2a:d8:a1:20:
         41:08:5d:72:0c:0a:a2:b6:e2:35:08:cb:28:2d:4f:f8:46:df:
         b0:bd:dd:c1:92:ab:c4:87:5b:1f:7a:91:48:b1:2f:a8:15:07:
         48:ea:f1:61:a0:48:6e:24:d0:83:04:a4:f2:97:5d:ee:04:bd:
         6d:e4:8d:4a:16:cf:a1:c5:8c:e7:e7:14:6b:44:33:1e:8e:f0:
         f5:5c:34:8f:65:4f:9b:a3:d3:ec:df:aa:1e:f2:30:93:b5:c8:
         0c:69:34:bf:01:eb:25:fd:c4:0c:81:9f:0b:a4:9b:be:31:88:
         60:75:03:f3:9d:b4:8e:d2:0b:fd:c7:e5:59:7a:05:09:78:26:
         05:c8:81:2f:0e:ba:57:11:eb:7d:3a:0d:25:1a:45:56:79:2f:
         b5:f3:2e:a5:62:b2:86:35:97:88:8a:b3:b0:55:7f:13:47:46:
         2c:78:c5:ef:10:6e:fb:38:08:c6:c9:54:84:7b:88:67:89:78:
         51:b0:e1:15:b2:18:7d:93:18:02:92:5b:27:6f:0c:3e:7b:e6:
         86:19:f9:36:29:34:8c:93:ee:df:d8:a8:8d:72:d5:15:dd:09:
         e5:6b:90:f3:f0:0a:e5:b9:e4:8c:3e:e2:9f:3c:9c:dc:15:b9:
         3d:16:0b:54
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPDGXTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDcxMTE1MjI0NFoXDTI0MDgwNTE2NDY0
OFowMzExMC8GA1UEAxMoM2UyYWM5MTY0Y2QyOTc3YzIyZTRlNjE2YzgxMzRkODli
MDNjNDE4YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKQY/dIIU7xW
iW/71u/o5XBW7tyHwx5Khkzpyi0R+J+WKYSXPCtrASql+whmZRcmJsC/vOyhtZxP
0r6cdrWzQAXSOMl4QY8u5YoL4LLU6wQPInGL4S6Z1ehgSp2p30fzOarLFKJDgQJL
WvmOJ1kB+Z72zvZP4SCJaEboEop2kwzhxvpsvCcQGj5A8QjxXlo0vRUeg/Ov+IsM
DKpVLEMx2+MnzvLHCaxA2j0SpHY+O31UT8tM0e/elAxcDP9j+gzXv9VlUabD7bZd
vCr7OgUph3YgK+Jq+bgI63V1Ne867CwUOJGoq5nDcG7cyHoyV92O7dyIaGZ9l8md
//H6NSEg31cCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRT5cXCWmC6yogA73/II2yG
stl2ujAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kZTNlNTQ0MC02ODU1
LTQ2NGQtOWIwNS1kY2E0ZTZmMzFhMTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZGUzZTU0NDAtNjg1NS00
NjRkLTliMDUtZGNhNGU2ZjMxYTExLzNlMmFjOTE2NGNkMjk3N2MyMmU0ZTYxNmM4
MTM0ZDg5YjAzYzQxOGEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqpPEDANBAIAAjAHAwUAKAO4wDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEClYwDQYJKoZIhvcNAQELBQADggEBAD54
jfbxX/Zrq9qO0nrFKtihIEEIXXIMCqK24jUIyygtT/hG37C93cGSq8SHWx96kUix
L6gVB0jq8WGgSG4k0IMEpPKXXe4EvW3kjUoWz6HFjOfnFGtEMx6O8PVcNI9lT5uj
0+zfqh7yMJO1yAxpNL8B6yX9xAyBnwukm74xiGB1A/OdtI7SC/3H5Vl6BQl4JgXI
gS8OulcR6306DSUaRVZ5L7XzLqVisoY1l4iKs7BVfxNHRix4xe8Qbvs4CMbJVIR7
iGeJeFGw4RWyGH2TGAKSWydvDD575oYZ+TYpNIyT7t/YqI1y1RXdCeVrkPPwCuW5
5Iw+4p88nNwVuT0WC1Q=
-----END CERTIFICATE-----