Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/445f1a97d8d47498c64cad5870c042c973c346ef.cer
File:                     445f1a97d8d47498c64cad5870c042c973c346ef.cer (raw, json)
Hash identifier:          0GUNYusaNfgSOOOIu+CW3+cQSb7FNQcdwKa+2m/d8Lc=
Subject key identifier:   ED:92:CD:89:55:0A:11:BC:01:BD:82:FE:85:A4:47:16:E8:93:D0:5D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       9685B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c6c95306-0981-4a12-a241-5cf8ddcb94e4/445f1a97d8d47498c64cad5870c042c973c346ef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c6c95306-0981-4a12-a241-5cf8ddcb94e4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 Jul 2019 18:16:39 +0000
Certificate not after:    Thu 22 Sep 2022 15:00:00 +0000
Subordinate resources:    IP: 190.9.64.0/18
                          IP: 200.24.96.0/19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9864630 (0x9685b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 25 18:16:39 2019 GMT
            Not After : Sep 22 15:00:00 2022 GMT
        Subject: CN=445f1a97d8d47498c64cad5870c042c973c346ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:ff:aa:33:ea:6c:96:8e:0b:36:8f:49:f6:
                    f0:76:a9:2c:3f:68:7c:12:8b:65:98:42:bd:62:8b:
                    66:88:2f:10:10:1a:2a:65:f9:8a:8d:23:95:6d:44:
                    cc:11:d0:c4:a7:4a:9b:0d:09:4d:50:a6:8b:2b:7d:
                    e3:2e:1d:88:3d:1c:8f:41:a1:16:8c:fd:e3:96:22:
                    da:50:c9:d8:83:a2:7b:be:62:23:eb:9b:40:39:4a:
                    b7:88:d5:6a:ff:86:d6:b1:c7:cf:2f:58:d3:f1:73:
                    9f:e8:be:b8:de:2a:be:6c:cb:2e:b7:e0:8c:63:eb:
                    4a:da:be:1d:67:70:7a:ad:f6:53:5a:d6:b1:fa:52:
                    2b:a4:36:eb:a3:a1:bd:7d:1e:9e:b4:28:84:47:eb:
                    66:f8:e7:9c:14:03:f7:bc:a4:43:20:a9:e3:29:7f:
                    e2:8b:4b:ca:a1:0c:4b:28:4d:14:b9:ae:f4:b2:21:
                    2f:54:52:11:bd:dd:95:bb:bc:d6:d0:ea:c8:19:91:
                    f1:f3:6e:45:40:9f:97:72:0e:7a:ae:b7:9c:29:3d:
                    b4:a8:82:d1:ea:3d:81:4d:43:d9:1d:32:24:c4:2c:
                    0d:d3:0a:e3:d7:3d:dc:1b:0d:dc:ad:36:e4:9a:2e:
                    67:96:5d:ee:6d:0e:27:51:4c:f1:4b:95:36:b3:47:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:92:CD:89:55:0A:11:BC:01:BD:82:FE:85:A4:47:16:E8:93:D0:5D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c6c95306-0981-4a12-a241-5cf8ddcb94e4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c6c95306-0981-4a12-a241-5cf8ddcb94e4/445f1a97d8d47498c64cad5870c042c973c346ef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.64.0/18
                  200.24.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         93:b2:f0:72:9c:5f:8f:2d:f9:f8:c4:a1:63:ee:42:22:4b:e7:
         80:35:84:98:f9:7b:1e:61:5b:4d:ba:79:db:40:39:74:f2:30:
         22:89:40:84:4a:67:10:75:0d:22:40:8e:83:55:7f:a2:a2:ae:
         5d:7a:4b:4d:c9:28:6f:0a:1a:b6:04:75:3a:73:ff:75:df:1a:
         65:9f:77:a7:9b:83:de:ea:72:bf:11:14:a2:95:74:9d:b6:28:
         ca:1c:32:fc:b9:b3:72:78:25:a6:4f:00:76:b1:43:08:95:3e:
         44:07:5f:f9:99:26:d1:a6:0e:ce:2c:3a:b0:13:9b:a7:4f:76:
         6f:cf:6a:4e:f0:c7:08:1c:d3:a1:0c:66:1e:ee:c7:0c:0f:bf:
         6c:17:6f:33:54:d4:07:68:4f:d9:4a:72:1c:75:6e:fc:d2:cd:
         86:51:da:12:2e:61:ff:d3:48:2f:59:50:f9:ce:b5:a3:db:6e:
         37:c7:41:f1:21:64:7b:34:bd:65:d4:7f:60:71:45:dc:ca:f9:
         92:50:1c:93:38:d1:ff:7f:04:84:ab:5c:48:4a:ec:bd:0d:f9:
         fc:f8:9d:9d:8a:97:25:98:72:3b:7d:ca:c7:f1:ef:08:f1:c0:
         09:d3:6f:4f:9d:57:ef:c3:c4:7b:dc:44:ca:88:6c:cd:c2:88:
         e2:4a:cb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----