Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/544df6d5af1f71677e39aae8f55f411e4f419ee4.cer
File:                     544df6d5af1f71677e39aae8f55f411e4f419ee4.cer (raw, json)
Hash identifier:          Yy1VRg127ZSkUq7JvX89iVrgea+t8gs8NNTwUkuhEYA=
Subject key identifier:   27:F8:66:7E:85:1E:66:25:99:B7:E9:81:52:77:87:9F:EA:79:94:D5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D787ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/544df6d5af1f71677e39aae8f55f411e4f419ee4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 23 May 2020 12:57:12 +0000
Certificate not after:    Tue 19 Dec 2023 07:48:29 +0000
Subordinate resources:    AS: 269946
                          IP: 45.189.234.0/24
                          IP: 2801:1b:c800::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14125037 (0xd787ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 23 12:57:12 2020 GMT
            Not After : Dec 19 07:48:29 2023 GMT
        Subject: CN=544df6d5af1f71677e39aae8f55f411e4f419ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fc:ca:af:8c:6e:e4:78:ae:49:5e:13:a1:76:
                    e8:3c:d8:e2:e9:b6:e3:70:1f:34:de:28:ba:c3:97:
                    0b:a2:d2:df:00:fe:3b:9c:ed:99:e4:6f:d1:07:c0:
                    03:a0:0e:9d:43:74:4b:3c:2f:84:11:88:96:36:4e:
                    00:e7:b6:e9:f0:40:a7:eb:5e:f2:a3:53:46:51:8f:
                    c0:62:87:bb:a9:5c:e0:51:8e:dd:41:6d:b0:ca:dc:
                    ef:a3:54:02:10:28:15:3b:54:fa:24:8c:1e:cc:f0:
                    6f:f7:bb:06:09:9e:46:fc:c8:e6:cb:d4:a4:62:2a:
                    37:77:fc:0c:be:23:12:0e:3e:16:0a:0f:ab:72:d9:
                    39:1f:e4:fd:1c:7b:8e:4d:63:e5:45:75:a7:68:d6:
                    71:44:e2:dd:d1:bc:25:12:ea:43:08:2b:95:22:dc:
                    c1:2a:13:aa:cf:66:65:8d:3c:37:14:ee:44:8f:85:
                    d1:0e:bf:b7:bc:96:40:8b:bc:3d:6c:48:dd:3e:93:
                    d7:2c:0e:b8:76:03:59:24:7a:2d:8a:f6:42:3e:2a:
                    ba:2f:1d:fe:d2:04:ae:4d:36:2d:b6:0c:19:e7:24:
                    93:48:be:93:76:08:ec:8f:8d:85:fe:67:31:ba:16:
                    67:25:b8:94:f5:89:88:41:38:37:c8:9c:3e:90:a0:
                    f5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F8:66:7E:85:1E:66:25:99:B7:E9:81:52:77:87:9F:EA:79:94:D5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/544df6d5af1f71677e39aae8f55f411e4f419ee4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.234.0/24
                IPv6:
                  2801:1b:c800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269946

    Signature Algorithm: sha256WithRSAEncryption
         55:d8:d1:2e:85:d8:ee:0b:83:cc:b4:c9:3b:0d:bc:b4:6c:0f:
         46:96:94:b1:bf:cc:a9:f3:12:4a:30:23:39:0e:eb:da:9c:84:
         a7:7d:76:19:51:78:8e:97:9a:2c:cc:eb:9b:a4:ba:e6:57:e9:
         da:9b:ba:56:c0:db:9f:dc:3d:3c:61:52:b5:a2:35:cb:8b:9e:
         be:8e:ac:0a:a9:1e:2c:d2:90:35:b7:c6:18:cd:4e:1f:05:7f:
         32:16:6b:ff:03:29:35:8e:8a:e0:0e:9f:34:ea:10:e2:66:ce:
         05:ce:58:42:f9:3c:f0:83:f1:a9:85:c1:73:40:ef:ad:a0:b4:
         9f:a8:30:ad:69:2e:60:5a:cc:f0:dc:7b:7d:44:6c:b7:91:a6:
         7f:df:0e:70:4d:11:4e:39:56:e9:8f:74:fa:d0:73:dd:7a:ae:
         8e:ed:47:c7:1b:6d:b7:69:75:f6:ef:ba:5f:9d:3c:aa:bb:f6:
         76:c9:c7:eb:9e:70:45:c6:97:d8:3c:75:8c:c0:02:6a:6f:6f:
         dc:e5:c2:70:95:6b:e9:47:2d:3b:aa:f5:01:79:59:d9:a5:28:
         11:44:2a:1c:61:8d:e6:3e:e8:92:12:1d:e2:7e:96:14:33:54:
         eb:df:83:fb:d9:92:e5:37:eb:c7:1b:a4:4e:46:93:66:15:dd:
         74:37:98:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----