Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c2dea9e81fdad8d5d4689c106fde720d220299.cer
File:                     52c2dea9e81fdad8d5d4689c106fde720d220299.cer (raw, json)
Hash identifier:          Eli2lt+GOPL9tE5afIf3BCfjKgo56dXfCttQqJulysc=
Subject key identifier:   F2:33:09:8B:82:0C:6C:EE:20:B8:A5:74:08:E5:ED:EF:97:CD:DB:D2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       BD1C5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/52c2dea9e81fdad8d5d4689c106fde720d220299.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 19 Aug 2019 10:31:23 +0000
Certificate not after:    Fri 03 Feb 2023 05:00:00 +0000
Subordinate resources:    AS: 265695
                          IP: 45.5.8.0/22
                          IP: 2803:9c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12393567 (0xbd1c5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 19 10:31:23 2019 GMT
            Not After : Feb  3 05:00:00 2023 GMT
        Subject: CN=52c2dea9e81fdad8d5d4689c106fde720d220299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:2e:e2:fe:c9:0a:3c:eb:43:63:f2:f6:74:
                    18:22:55:74:9f:f3:0b:50:a4:aa:be:b7:58:5a:47:
                    cf:67:a5:53:8e:f4:c2:72:c0:ed:2e:c0:55:3c:a1:
                    c5:81:79:b8:32:aa:5b:68:00:34:fd:5d:8f:1d:2a:
                    65:ab:d3:e3:75:47:3a:01:2d:f7:ad:0d:c1:f2:44:
                    8b:e3:23:c3:27:2b:04:b9:d1:5b:09:f7:f7:32:bd:
                    77:91:ad:6a:c2:8c:a7:08:50:1d:10:74:4d:96:8c:
                    a3:25:fd:6e:61:7e:7f:3b:89:12:40:4e:36:d2:c7:
                    0f:fa:ba:50:81:7c:73:a1:db:58:29:5f:36:a6:7c:
                    84:f9:2c:50:e6:cf:16:94:29:ad:02:d9:56:ea:a8:
                    60:5e:08:23:ef:6f:86:dc:3a:44:3f:eb:26:1c:7c:
                    5a:9a:97:8a:74:d1:31:c8:b8:b1:ba:ce:5b:96:29:
                    e0:ec:b2:32:a1:29:c0:43:12:71:79:3a:d4:df:63:
                    c7:45:54:f6:f4:96:3d:65:36:9d:78:16:9c:53:fc:
                    61:40:98:a8:ee:e4:cb:c1:72:64:25:7d:ef:d3:6d:
                    a0:3a:16:a7:c9:c2:1d:4d:b1:38:70:ba:26:87:14:
                    95:5e:2e:27:5b:a9:87:39:12:0e:ac:fe:34:77:96:
                    3c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:33:09:8B:82:0C:6C:EE:20:B8:A5:74:08:E5:ED:EF:97:CD:DB:D2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/52c2dea9e81fdad8d5d4689c106fde720d220299.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.8.0/22
                IPv6:
                  2803:9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265695

    Signature Algorithm: sha256WithRSAEncryption
         5c:79:cd:8b:83:a1:a6:bb:f0:26:9f:5e:53:86:89:c3:8f:9f:
         ac:3b:e3:0b:ad:f0:4c:76:0e:82:c1:3a:e4:1a:08:3d:8a:13:
         68:93:ac:fa:87:39:60:77:04:aa:d1:fe:33:9c:6b:85:43:c1:
         a7:fe:60:b6:19:32:86:57:8a:cd:61:ef:36:79:e8:ac:e2:53:
         5c:c6:18:78:41:8f:ed:1a:42:a6:95:07:af:f6:d5:46:27:20:
         96:4a:e8:e2:22:a5:2c:c6:83:21:ff:e4:16:d5:5f:02:07:29:
         62:ac:8c:e6:8c:34:8f:4e:02:52:9f:ae:8a:e6:ce:47:7e:68:
         46:61:f4:d9:5e:8d:89:be:d9:65:ff:ac:2a:97:ee:78:e8:e9:
         35:ed:ad:b0:58:13:3c:5d:0b:c3:ed:73:37:ef:00:99:1c:a9:
         23:db:f7:a1:22:49:79:77:e8:9f:61:e9:c7:f2:32:d5:3a:1c:
         19:b0:ba:4c:a9:78:fc:2e:fa:a4:0e:f4:69:88:53:9b:3e:24:
         df:05:06:1c:54:3c:90:59:c8:92:50:fa:0f:80:68:42:14:af:
         64:23:75:84:6e:1f:7e:10:c7:c8:fd:31:05:f6:e4:6c:22:2c:
         31:7d:1c:d2:80:23:ba:2c:4a:2c:b1:16:8b:79:ae:49:03:94:
         f6:18:a9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----