Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/790c3c5e46e22ae2b861983d5357e8563219b407.cer
File:                     790c3c5e46e22ae2b861983d5357e8563219b407.cer (raw, json)
Hash identifier:          cfuF9uucRaEpQ3LQTkrDMCZeb1Tk4K6TQVWp5SoV6JM=
Subject key identifier:   C4:73:DA:7B:06:EB:BD:7D:8F:A8:A5:03:9A:32:B0:3C:76:E2:6F:F3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E35C9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/790c3c5e46e22ae2b861983d5357e8563219b407.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 19:09:48 +0000
Certificate not after:    Thu 20 Jun 2024 23:28:54 +0000
Subordinate resources:    AS: 270096
                          IP: 170.245.132.0/23
                          IP: 2803:47e0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14900382 (0xe35c9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 19:09:48 2023 GMT
            Not After : Jun 20 23:28:54 2024 GMT
        Subject: CN=790c3c5e46e22ae2b861983d5357e8563219b407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:32:22:74:df:02:58:ea:09:db:cf:69:a9:ae:
                    5a:99:3d:93:4b:f4:73:af:b6:2e:30:5c:9e:10:1f:
                    91:9e:e4:23:78:73:2c:86:b4:1b:9c:cf:10:66:61:
                    f5:a9:3f:82:7e:8f:5b:5b:60:f3:51:30:bb:57:8f:
                    d8:c2:f8:ac:98:41:e3:a7:03:a6:62:20:30:58:f7:
                    91:98:b5:7c:ef:53:10:b8:f5:71:cc:e0:0b:e9:02:
                    aa:ff:f6:48:53:9c:bc:ae:62:70:f8:01:2a:31:31:
                    46:3d:15:12:0f:8c:05:d6:aa:d0:1d:28:13:8f:00:
                    53:c6:9d:42:3e:b8:ea:53:51:0b:99:05:4e:18:1b:
                    b3:2f:ef:d6:2a:40:8c:84:75:db:34:c0:b8:8d:87:
                    b1:71:a7:d7:89:ca:18:60:e6:6c:cc:17:bb:72:57:
                    cc:23:54:27:79:8c:df:16:b1:fa:9b:18:df:8d:f2:
                    74:93:18:ca:f3:51:15:72:39:1e:d3:88:5a:e4:82:
                    1d:c6:f8:f3:b2:1b:1d:82:35:cf:df:4c:11:47:24:
                    93:a3:dd:79:36:65:b0:45:2a:c0:b7:b9:bf:be:eb:
                    cd:8f:a5:ae:d5:c3:12:1a:21:9c:55:de:ce:e8:08:
                    d5:03:35:dc:9c:ed:ff:ee:8e:60:d5:be:56:d3:be:
                    d8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:73:DA:7B:06:EB:BD:7D:8F:A8:A5:03:9A:32:B0:3C:76:E2:6F:F3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/790c3c5e46e22ae2b861983d5357e8563219b407.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.132.0/23
                IPv6:
                  2803:47e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270096

    Signature Algorithm: sha256WithRSAEncryption
         45:4a:f6:c8:be:9e:89:18:1b:d8:3e:01:49:0d:03:6a:31:8c:
         f9:6b:0d:b5:b0:b2:cd:77:fb:c8:49:7a:ac:a4:a2:0f:a1:c5:
         8b:79:51:93:4f:13:39:af:f2:07:8e:fa:94:f4:01:b4:8c:dd:
         71:f9:46:5d:76:df:67:0e:48:a4:4a:7c:fa:ac:b5:75:90:8f:
         2c:d6:09:c3:a4:43:13:50:a4:b7:8a:a7:8f:02:23:3d:2c:e5:
         58:da:05:a2:7e:07:d5:52:1c:2e:78:15:c3:09:41:4c:21:7d:
         86:64:c2:c3:1c:fa:73:20:f6:07:6a:21:57:0b:ea:12:67:27:
         41:f5:dc:77:10:be:e0:20:37:d9:de:f4:70:e5:69:9d:3d:74:
         a7:92:96:42:9a:67:7e:83:fb:52:fa:f2:37:c0:a5:74:a3:dc:
         35:a5:26:40:ce:49:23:65:ba:cf:98:0b:5a:b0:a5:d0:10:5e:
         b6:80:e9:33:79:04:48:76:b9:b9:51:68:d5:39:06:55:a1:14:
         73:4a:a9:7b:6e:ae:34:6e:ee:32:70:1d:be:29:09:c3:f9:80:
         61:f5:9f:c6:c0:f3:56:61:7d:6c:d3:97:3b:9d:37:e4:f8:d1:
         f2:9c:cc:f2:8c:69:91:d2:31:12:a1:f1:c5:20:34:a7:37:69:
         ac:ec:18:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----