Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5222da058cfc64b6d1ca7c93b5a44006fe30ba37.cer
File:                     5222da058cfc64b6d1ca7c93b5a44006fe30ba37.cer (raw, json)
Hash identifier:          tUWPsJWqf6xSHax3k5RhoM1rgMijpx+ZxeqWg40eME8=
Subject key identifier:   F4:5A:82:BE:F9:BF:6B:78:39:9A:B2:4E:B6:62:9B:AA:52:AE:A5:19
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8801A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d92e6b08-1822-4a51-901a-793bf93f3f9c/5222da058cfc64b6d1ca7c93b5a44006fe30ba37.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d92e6b08-1822-4a51-901a-793bf93f3f9c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 11 Jul 2021 17:57:01 +0000
Certificate not after:    Fri 05 Jan 2024 14:00:00 +0000
Subordinate resources:    AS: 6065
                          AS: 6135
                          AS: 12034
                          AS: 13544
                          AS: 19278
                          AS: 21888
                          AS: 23020
                          AS: 27706
                          AS: 28388 -- 28389
                          AS: 28401
                          AS: 28430
                          AS: 28450
                          AS: 28470 -- 28471
                          AS: 28473
                          AS: 28527
                          AS: 28542
                          AS: 28562
                          AS: 28565
                          AS: 28568
                          AS: 262919
                          AS: 262969
                          AS: 265507
                          AS: 265528
                          AS: 265536 -- 265537
                          AS: 265557 -- 265558
                          AS: 265563
                          IP: 45.164.206.0/24
                          IP: 131.196.140.0/22
                          IP: 2801:c4:22::/48
                          IP: 2801:c4:40::/48
                          IP: 2806:201::/32
                          IP: 2806:216::/48
                          IP: 2806:218::/32
                          IP: 2806:23c::/32
                          IP: 2806:28d::/32
                          IP: 2806:2e8::/31
                          IP: 2806:2ef::/32
                          IP: 2806:2f1:: -- 2806:2f3:ffff:ffff:ffff:ffff:ffff:ffff
                          IP: 2806:2f5::/32
                          IP: 2806:309::/32
                          IP: 2806:340::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14188570 (0xd8801a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 17:57:01 2021 GMT
            Not After : Jan  5 14:00:00 2024 GMT
        Subject: CN=5222da058cfc64b6d1ca7c93b5a44006fe30ba37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:96:8b:99:d5:d0:7d:80:85:b2:9a:3f:41:
                    68:40:95:f0:20:c7:c4:5a:21:d4:8e:5b:02:d1:36:
                    20:a1:a7:d2:ad:ca:50:6b:5e:ac:94:de:20:35:73:
                    d8:eb:04:0b:59:53:10:dc:dc:f0:b9:f0:ae:e6:70:
                    c2:cc:19:15:63:7b:36:94:29:d2:ff:2c:1a:8a:de:
                    cc:a5:79:28:9c:30:97:d3:da:1e:a7:53:c5:f7:2b:
                    7a:71:09:11:81:43:2d:da:a0:71:ff:5c:47:29:ac:
                    c8:95:fb:fb:ad:76:79:35:fe:eb:bf:85:51:7b:7b:
                    46:bf:1f:03:ab:ea:35:40:7f:d1:8d:0f:1d:84:b3:
                    b0:18:f6:c7:d5:a9:03:0f:3d:1b:ae:c0:ea:e3:31:
                    fc:d5:10:8b:ec:74:60:d6:34:c1:f8:8a:5c:39:d0:
                    98:9b:42:cd:e7:f3:04:e7:05:6a:1a:0b:4c:c2:e5:
                    c7:5f:93:83:22:3c:b2:63:6c:35:d9:25:60:42:c0:
                    bc:44:d7:fe:7e:db:b4:f8:f9:5b:d0:61:97:9a:8f:
                    a8:9f:0e:7f:64:b5:65:21:85:c0:5c:92:49:11:df:
                    73:f4:69:52:a8:cb:f6:21:b6:01:3f:93:5e:8f:6f:
                    42:7a:cf:e1:c3:cd:05:5f:ec:f8:b2:04:7f:b0:e5:
                    8d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5A:82:BE:F9:BF:6B:78:39:9A:B2:4E:B6:62:9B:AA:52:AE:A5:19
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d92e6b08-1822-4a51-901a-793bf93f3f9c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d92e6b08-1822-4a51-901a-793bf93f3f9c/5222da058cfc64b6d1ca7c93b5a44006fe30ba37.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.206.0/24
                  131.196.140.0/22
                IPv6:
                  2801:c4:22::/48
                  2801:c4:40::/48
                  2806:201::/32
                  2806:216::/48
                  2806:218::/32
                  2806:23c::/32
                  2806:28d::/32
                  2806:2e8::/31
                  2806:2ef::/32
                  2806:2f1::-2806:2f3:ffff:ffff:ffff:ffff:ffff:ffff
                  2806:2f5::/32
                  2806:309::/32
                  2806:340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6065
                  6135
                  12034
                  13544
                  19278
                  21888
                  23020
                  27706
                  28388-28389
                  28401
                  28430
                  28450
                  28470-28471
                  28473
                  28527
                  28542
                  28562
                  28565
                  28568
                  262919
                  262969
                  265507
                  265528
                  265536-265537
                  265557-265558
                  265563

    Signature Algorithm: sha256WithRSAEncryption
         24:13:27:87:e7:99:e5:7e:61:f2:b6:1c:da:b2:b9:9e:53:39:
         6f:06:fb:d7:7c:54:e6:01:1b:d2:c1:b5:a0:91:9c:1d:ae:7c:
         3a:6a:43:6a:55:7f:5e:bc:90:6d:9f:5e:cb:60:09:9a:b1:f4:
         9f:07:3b:3f:72:46:f8:04:07:e7:da:43:3c:99:73:76:51:20:
         91:6e:62:4c:47:60:19:c1:6b:c8:bd:bf:42:be:b3:0c:d9:7d:
         1a:81:a5:a1:a0:2f:26:41:95:5e:fd:25:11:e6:aa:96:1b:18:
         fe:fb:28:b3:09:5e:6f:6f:4a:c1:f7:8c:a1:a7:27:4c:be:2d:
         0f:1c:33:93:ad:6a:72:d4:fe:81:52:4e:12:b6:fa:00:c0:eb:
         db:05:fe:2c:18:f1:78:aa:f3:4e:d2:6c:c2:7d:ed:59:ca:32:
         6b:41:ad:de:63:9a:b0:6f:53:5b:83:9c:d0:01:80:df:8b:1a:
         1d:33:ca:64:e3:bc:65:20:d7:e4:8d:bf:a7:6f:84:e5:9f:91:
         4e:74:c2:ff:91:4b:59:6f:15:6a:b0:01:ef:d0:62:dc:af:3e:
         19:ea:c6:97:76:7e:84:2a:80:b0:4f:74:ce:2b:d2:a0:ee:d0:
         3e:04:73:03:df:e3:c1:4c:2d:76:55:cb:94:75:9c:0a:44:c5:
         cf:d1:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:16 2023 by rpki-client on console-fra.rpki-client.org