Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76f225ab4a9e1e6c7a46478c2f8d4d444393dcb5.cer
File:                     76f225ab4a9e1e6c7a46478c2f8d4d444393dcb5.cer (raw, json)
Hash identifier:          X+PQBN7avVq0uOX1GIJKP83pz26Zb0ZPyTChkGmEO5I=
Subject key identifier:   62:E0:79:8B:7F:60:B0:2E:95:22:5B:E1:9D:22:C6:17:BD:BB:C9:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ADBA1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d06201e3-afe2-4a0e-a5e0-5bdfa59ad812/76f225ab4a9e1e6c7a46478c2f8d4d444393dcb5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d06201e3-afe2-4a0e-a5e0-5bdfa59ad812/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 30 Jun 2021 17:56:31 +0000
Certificate not after:    Sun 12 Mar 2023 19:26:32 +0000
Subordinate resources:    AS: 265716
                          IP: 45.65.188.0/22
                          IP: 2803:b5c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11385372 (0xadba1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 30 17:56:31 2021 GMT
            Not After : Mar 12 19:26:32 2023 GMT
        Subject: CN=76f225ab4a9e1e6c7a46478c2f8d4d444393dcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:c0:9d:57:8b:cf:66:a4:40:4e:78:6a:a0:
                    64:4f:14:fa:09:0b:04:ed:44:c0:f2:12:7e:bc:fb:
                    c0:74:1b:db:b0:03:87:90:89:3a:a3:80:cd:31:ba:
                    3a:ed:9f:8c:11:37:d6:5a:aa:1a:20:e5:c9:97:fa:
                    9c:e3:f1:c6:ab:d7:fe:76:95:35:99:ea:c8:47:9a:
                    a2:8e:f8:dd:62:b6:d1:ab:b3:c4:bd:d6:53:ae:16:
                    d9:7e:54:0e:98:c7:67:0d:05:a1:a5:95:63:cf:b0:
                    34:c1:41:ea:c0:d5:23:d2:6c:73:dc:65:fb:bb:2e:
                    a4:11:1d:c3:06:0f:15:72:c5:5c:67:55:c4:68:d1:
                    a3:0d:23:c8:0a:96:70:bd:64:a1:dc:b1:62:56:f8:
                    86:18:ba:f3:99:12:00:a0:7e:e0:6f:67:48:ed:1a:
                    db:d8:99:05:4d:83:1f:5b:e9:30:3e:d2:7d:51:2f:
                    0c:bd:83:59:ad:87:32:8b:c3:60:bc:8a:05:de:81:
                    82:80:a1:94:9b:a5:4a:dd:aa:c3:3e:eb:41:5d:48:
                    69:7a:2b:93:a1:ae:dd:4a:d2:ec:5c:65:c9:7a:8e:
                    94:a9:c9:52:ed:bc:1f:16:fe:57:a6:2a:14:74:77:
                    95:89:b5:28:37:db:fb:50:98:3e:af:18:78:a0:c5:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E0:79:8B:7F:60:B0:2E:95:22:5B:E1:9D:22:C6:17:BD:BB:C9:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d06201e3-afe2-4a0e-a5e0-5bdfa59ad812/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d06201e3-afe2-4a0e-a5e0-5bdfa59ad812/76f225ab4a9e1e6c7a46478c2f8d4d444393dcb5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.188.0/22
                IPv6:
                  2803:b5c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265716

    Signature Algorithm: sha256WithRSAEncryption
         5b:9f:93:ff:77:9a:3f:a2:bd:01:e0:03:8a:5e:99:7a:e5:54:
         70:7d:4f:eb:cb:0d:f4:e5:17:fa:67:1a:b9:e3:45:e7:43:1e:
         09:90:ff:a1:e0:90:4b:82:dd:7d:21:fe:50:92:fe:0e:f9:00:
         83:b9:12:f2:d1:12:1e:5f:6b:2d:ba:cb:e5:07:f6:06:40:79:
         18:62:41:37:15:ba:f9:0a:84:77:ee:b0:2b:b2:00:d4:fd:ab:
         66:09:e1:c4:40:cd:68:a9:79:b2:8d:94:e6:5c:c2:a4:ac:b1:
         b8:2d:fd:63:5e:62:de:89:2a:0d:67:50:b7:2d:f7:80:50:74:
         98:83:7b:8b:cb:cb:d3:ad:9e:2e:1b:9e:45:db:a6:3f:d2:0b:
         31:46:66:f9:be:22:ad:a9:c8:64:69:ab:a4:b5:5e:84:c4:b6:
         b9:73:b4:22:dc:f2:d5:1e:71:f8:06:7d:b9:45:43:65:7b:b7:
         59:ee:ef:48:c1:e3:91:29:2b:7e:bc:20:48:72:b6:c3:16:57:
         39:0b:b9:8b:08:cb:5e:93:73:bf:40:17:a4:39:1a:38:1c:7d:
         0d:a1:e0:a2:19:da:ed:46:0e:e3:f0:f0:16:a9:4f:03:55:62:
         a2:0e:3a:7c:c0:46:ca:59:3c:9f:9a:bd:5c:85:6f:5e:f8:70:
         88:0e:15:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----