Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer
File:                     5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer (raw, json)
Hash identifier:          hc/HsZ7XjSHzWY+0dryKDbicwCVtde8NzK0Oh7OPSdU=
Subject key identifier:   45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D3DBC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 15 Feb 2019 12:48:04 +0000
Certificate not after:    Thu 18 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 23031
                          IP: 179.0.40.0/22
                          IP: 2803:fc10::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13884358 (0xd3dbc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 15 12:48:04 2019 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e0:29:9d:e1:e0:d1:f1:ab:83:e2:ae:39:df:
                    a7:db:e5:f3:d7:fe:cd:13:c5:b0:b1:ab:9c:3b:af:
                    ce:88:25:f0:af:b5:10:63:e8:dc:df:b5:d5:e5:aa:
                    49:98:9f:75:58:b9:f7:cd:c0:22:a5:5a:d0:58:e0:
                    f2:a0:24:53:ec:fd:1b:3a:90:9b:3e:a7:f3:b0:3b:
                    09:54:3f:a3:cc:e7:7f:5e:03:b6:da:fc:c3:67:89:
                    55:11:a4:f3:ed:b1:df:5d:a9:d8:34:25:c3:09:c6:
                    b2:e6:95:04:52:64:40:4b:fd:a1:a1:4c:50:a7:b9:
                    f4:b5:68:81:5d:a4:c6:ea:33:4c:9e:e5:6d:f7:b6:
                    41:42:15:57:50:57:94:67:3b:f0:95:84:5b:95:ba:
                    40:d0:b5:20:77:b8:b0:22:7a:81:98:bc:64:de:86:
                    b8:5c:56:51:b7:e2:0e:81:ae:2a:d7:d3:eb:26:bc:
                    1c:b7:0f:fd:15:2e:ff:37:3c:de:3e:39:c4:54:77:
                    8a:1e:50:66:d2:a5:5a:1c:df:93:64:21:dc:c7:1b:
                    2c:2f:8b:eb:40:e6:06:2f:48:f7:7c:10:5e:7b:15:
                    31:c3:cc:d4:a6:9e:81:a6:c9:dd:8a:8e:c0:1c:bf:
                    f7:3d:9a:90:49:d8:3e:93:6b:df:a3:e3:05:70:b4:
                    78:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.40.0/22
                IPv6:
                  2803:fc10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23031

    Signature Algorithm: sha256WithRSAEncryption
         02:46:7e:0b:fd:e0:a6:f5:1c:77:a2:69:52:32:29:c9:6c:80:
         2e:a0:5b:45:89:28:05:11:ec:c4:3a:43:14:bd:09:7c:5a:07:
         f0:db:6a:a3:80:49:60:c5:28:ae:07:be:cc:73:bc:ae:c3:93:
         ab:e5:b2:46:85:d8:9e:5f:86:b2:c3:07:c0:f7:8b:12:37:ba:
         ff:eb:1a:a9:e1:36:29:2c:67:c0:7e:80:12:9c:fe:79:fd:68:
         ae:df:d9:06:b2:bc:e3:f4:d5:70:ae:d4:c9:51:35:46:6d:84:
         23:bc:3b:ed:44:ee:2f:b2:6e:02:9f:6b:d1:a9:66:4d:1d:93:
         1b:85:19:79:ae:c7:39:b1:1a:86:a7:01:53:07:47:29:92:f2:
         8f:4a:96:99:da:50:0a:5a:dc:f5:6d:0e:6b:38:49:1f:69:52:
         4f:b5:fb:32:fc:46:13:eb:b0:8c:af:81:50:c4:a5:53:57:0f:
         e7:df:d0:82:12:54:92:ce:54:21:f2:4c:68:95:d6:6d:ba:7a:
         db:0a:32:dd:44:6e:44:9b:93:14:6c:23:45:96:ba:e1:89:b8:
         8d:28:90:67:e9:ef:b0:46:c8:4c:3a:a4:e1:e9:5f:4a:15:69:
         a5:28:2a:3e:c8:06:36:90:81:dd:b6:1b:33:71:d1:21:01:c6:
         e9:fd:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----