Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a044060d76aae49d9f5899b3c3c2defe0c5837f.cer
File:                     5a044060d76aae49d9f5899b3c3c2defe0c5837f.cer (raw, json)
Hash identifier:          SnScpNhYBeB8uGu8VBV2yGRriKUwdDkpprIQC9ubq4U=
Subject key identifier:   FF:9C:51:EC:A4:42:C1:86:74:15:1A:AF:8A:0F:79:13:74:9B:D7:7A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF73B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/5a044060d76aae49d9f5899b3c3c2defe0c5837f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Aug 2019 14:18:11 +0000
Certificate not after:    Sun 24 Mar 2024 18:39:43 +0000
Subordinate resources:    AS: 266812
                          IP: 45.236.148.0/22
                          IP: 2803:d8a0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14644147 (0xdf73b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 20 14:18:11 2019 GMT
            Not After : Mar 24 18:39:43 2024 GMT
        Subject: CN=5a044060d76aae49d9f5899b3c3c2defe0c5837f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:d8:02:8d:b3:f3:3d:d0:8a:90:30:60:e8:
                    a6:47:a8:d8:7f:69:21:2f:56:70:57:ae:85:12:1f:
                    fd:78:dc:d2:f7:30:0d:b9:47:46:94:34:b1:57:0e:
                    24:85:39:57:54:eb:da:20:c0:9f:e8:61:e1:7c:ac:
                    a5:e3:16:60:c8:5f:f1:7d:47:76:4d:ff:c5:17:16:
                    f0:6d:38:c4:8c:c9:ae:74:ef:05:bc:0b:41:7f:f0:
                    78:e2:20:bd:33:01:34:61:2d:86:d0:c5:e1:e5:54:
                    be:97:d7:00:6a:8f:da:05:60:31:b8:70:46:a0:ce:
                    1a:03:86:2d:44:13:b4:5e:7a:9a:45:d4:d1:df:8a:
                    52:72:c4:38:0f:dc:fe:ad:75:0f:ba:e9:a6:65:f1:
                    b6:a4:b4:4f:19:d9:0d:46:db:1c:d0:66:1e:3c:e8:
                    4e:df:da:13:33:b5:80:d5:c0:42:1b:91:39:f2:79:
                    54:01:f8:21:85:58:83:42:c3:59:db:b7:59:e6:e8:
                    95:5f:1b:e8:6f:4e:76:1f:c8:89:cf:c6:43:97:17:
                    53:b1:9a:c1:9e:0b:ca:56:ab:cd:8e:8b:18:dd:96:
                    f0:0f:37:be:91:1e:23:f7:cb:9c:a5:25:11:cb:79:
                    ae:1a:c1:39:70:9d:86:ed:09:46:ec:27:bd:d9:89:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9C:51:EC:A4:42:C1:86:74:15:1A:AF:8A:0F:79:13:74:9B:D7:7A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/5a044060d76aae49d9f5899b3c3c2defe0c5837f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.148.0/22
                IPv6:
                  2803:d8a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266812

    Signature Algorithm: sha256WithRSAEncryption
         94:b8:6b:a9:0e:cf:e5:d6:89:9a:f6:f1:c0:aa:ed:c5:d7:d5:
         11:c7:42:2f:88:1d:c6:bf:bb:b2:9d:ab:a6:03:fb:bb:d9:a0:
         c8:11:99:16:42:ce:6a:8d:6d:fd:1b:a2:8c:fd:96:82:18:5f:
         32:73:a2:87:17:71:41:27:36:d7:ae:81:45:75:b5:58:4e:6e:
         9f:bd:2e:1e:46:76:8d:cd:e1:da:a9:55:6d:05:a7:17:e1:7e:
         2b:a2:a0:58:93:6e:a2:80:fb:7f:49:ab:8c:b6:66:02:81:85:
         37:a0:ab:2f:f8:39:d9:3c:f5:fc:e4:81:da:4a:f2:c6:5f:65:
         2c:e4:8e:6c:b1:5a:f0:19:b3:57:94:01:d4:24:60:39:ea:b8:
         0b:c5:af:61:98:09:a8:46:f3:0c:3b:e9:e8:7d:fe:f4:a6:34:
         9f:4c:a0:9e:a4:f3:77:c7:2b:8b:82:84:85:02:e2:a7:07:06:
         a5:5b:94:83:4e:58:c4:18:df:06:c2:6e:f5:61:10:1a:32:44:
         78:ce:25:87:29:e2:05:df:53:f9:bf:23:91:8b:41:f1:10:e6:
         52:73:56:72:89:c5:b3:8e:e9:a2:ff:a6:0d:ec:a7:76:66:6a:
         04:9f:5f:d7:0f:c1:db:3f:70:b6:c3:20:e6:19:5a:6d:e7:02:
         27:93:b4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----