Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
File:                     569d9c53d2d7a2dabbb573b437a4edbd78719117.cer (raw, json)
Hash identifier:          B0DV75TnGrV8KDSoEn4+gLC99defnVZ7RioDLs7rOaI=
Subject key identifier:   7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB3B43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/569d9c53d2d7a2dabbb573b437a4edbd78719117.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 15 May 2021 19:28:57 +0000
Certificate not after:    Wed 30 Oct 2024 19:46:40 +0000
Subordinate resources:    AS: 264658
                          IP: 167.250.212.0/22
                          IP: 170.83.236.0/22
                          IP: 170.231.248.0/22
                          IP: 2803:4540::/32

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 18:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16464707 (0xfb3b43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 15 19:28:57 2021 GMT
            Not After : Oct 30 19:46:40 2024 GMT
        Subject: CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2b:c8:a6:55:e0:c6:56:bc:13:04:9f:a8:10:
                    bf:ab:a6:92:ff:1c:35:2d:f4:ec:e1:fd:03:79:85:
                    be:c9:72:ea:20:80:a3:9d:5c:59:bf:4f:fa:9f:e0:
                    b8:41:38:a3:61:0d:8b:5d:e3:db:af:e9:51:cb:f1:
                    89:2a:e8:97:b4:42:c8:2c:d6:e4:fe:78:4e:e0:c3:
                    59:28:23:1d:2f:b8:9e:63:d8:2c:38:67:a1:45:61:
                    bb:e3:fb:67:e3:a5:f6:c7:b2:57:08:c4:49:55:0c:
                    2f:30:80:e1:91:7a:20:d9:8b:8f:cf:61:6d:7a:8a:
                    0b:b6:ec:00:ab:01:22:46:00:e3:b7:7b:05:82:2d:
                    70:29:62:86:aa:9e:48:38:2d:cc:2d:16:64:52:20:
                    9a:8f:35:3b:58:79:ca:8c:75:02:90:5d:0e:e1:96:
                    ee:ba:92:d1:89:34:ff:5f:c2:8e:dd:30:81:63:cf:
                    55:f8:42:15:d1:87:40:19:89:5d:51:2b:fe:c2:02:
                    b5:7f:c2:c3:98:1e:cb:33:b2:d4:c7:8f:ec:cb:6e:
                    c0:5d:ec:ef:fb:5f:57:8b:77:54:f4:60:e9:1b:53:
                    dc:eb:31:37:81:84:b3:9a:81:8b:d0:63:db:92:bc:
                    90:a2:17:99:79:13:74:4d:7b:98:c4:34:07:5c:66:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/569d9c53d2d7a2dabbb573b437a4edbd78719117.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.212.0/22
                  170.83.236.0/22
                  170.231.248.0/22
                IPv6:
                  2803:4540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264658

    Signature Algorithm: sha256WithRSAEncryption
         94:69:21:b7:7c:a6:85:a6:b1:7b:ad:e5:bd:88:7d:3c:84:d8:
         46:79:0a:e9:0d:45:4f:19:b3:ac:3d:4a:bd:88:48:ba:77:d1:
         da:7c:74:11:9f:d0:51:60:70:47:d6:c8:5f:d1:16:0a:79:20:
         f8:d8:a0:ee:d2:98:f1:a6:19:86:b9:16:ef:97:40:5e:d1:6a:
         88:66:12:89:f6:de:3e:87:97:0e:2a:7f:78:6e:fa:0d:75:43:
         ee:8b:0f:8f:fe:69:7f:e4:bd:80:72:2a:5b:1e:a7:3c:63:6f:
         24:af:c1:6d:dd:1e:54:9b:b8:af:0d:77:c8:91:87:ea:1f:fe:
         41:99:73:80:e3:77:bd:30:ea:15:a1:00:f2:d4:5b:ed:7f:69:
         e8:91:c8:06:0d:9e:bc:a0:d8:06:0e:06:60:b2:4a:a7:e3:e2:
         3f:80:bd:e5:17:4e:29:5a:11:83:d5:bb:ac:a4:93:f7:a2:0e:
         7f:69:3d:ae:11:ef:86:43:6e:44:b9:8b:ca:b5:ab:1e:62:a2:
         e0:eb:fa:a1:78:f2:8e:de:58:bb:64:3f:b0:d1:af:57:07:1b:
         c9:75:f3:86:da:37:c9:aa:62:23:d0:fa:c6:da:97:c4:44:f3:
         2f:94:af:0f:d4:70:af:5e:35:32:90:aa:47:38:18:d8:20:7a:
         2b:c8:9c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----