Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81f8f997c47106c2eed6534190df56a42748b97a.cer
File:                     81f8f997c47106c2eed6534190df56a42748b97a.cer (raw, json)
Hash identifier:          Zmp3eKBRgJbzjGG0kbfYIUn2QXw+xUKMm6Q/pnzM3/g=
Subject key identifier:   D6:A7:C0:AC:7A:3C:A2:42:BD:58:EC:0A:9A:4C:98:85:BE:9B:0B:E6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6C855
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7f4e747b-c42c-400b-8043-09160cc76cf0/81f8f997c47106c2eed6534190df56a42748b97a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7f4e747b-c42c-400b-8043-09160cc76cf0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 01 Nov 2022 21:06:39 +0000
Certificate not after:    Sun 11 Feb 2024 18:41:49 +0000
Subordinate resources:    AS: 28417
                          IP: 148.222.0.0 -- 148.222.223.255
                          IP: 148.222.248.0/21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14075989 (0xd6c855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  1 21:06:39 2022 GMT
            Not After : Feb 11 18:41:49 2024 GMT
        Subject: CN=81f8f997c47106c2eed6534190df56a42748b97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:4b:69:4c:e4:32:5f:e8:0b:4a:0b:11:80:
                    6d:22:e2:ca:02:b8:86:7f:b8:a9:e7:da:18:fc:6b:
                    70:9a:2c:ca:d7:f3:e0:90:80:5d:48:94:5d:a2:fa:
                    15:22:f8:22:2d:45:04:94:63:7c:33:d6:69:b7:e2:
                    48:c1:c0:18:0a:f7:ee:23:ac:7f:d7:ec:f9:53:fc:
                    07:08:03:12:87:0b:8d:21:cf:a5:96:7e:79:f1:2e:
                    15:ec:4c:1c:d2:4a:28:f9:ca:86:3f:06:1c:ca:12:
                    91:ae:5a:9f:2d:db:d7:ff:b4:0b:3b:13:db:7c:d8:
                    e7:b6:db:25:7a:c6:46:04:e6:47:43:03:4c:94:db:
                    26:56:e5:7d:af:e8:e7:54:b8:41:5d:75:90:91:e7:
                    88:47:7d:d3:75:6d:5d:44:52:25:a0:6f:50:24:8b:
                    d4:80:35:70:54:a8:a8:a0:70:73:70:64:12:d7:c7:
                    ba:9b:a9:3b:ac:47:68:17:cb:00:ce:39:82:26:10:
                    68:8b:ac:df:dd:43:ec:5e:1e:34:5d:0c:ca:38:a5:
                    56:52:9c:99:cb:cc:02:eb:ba:ba:68:63:3d:e9:fc:
                    1e:ae:7a:dc:b5:7a:77:fa:ba:01:20:98:86:53:f5:
                    21:ec:f4:12:46:79:19:7d:de:19:76:c0:6d:1e:d5:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A7:C0:AC:7A:3C:A2:42:BD:58:EC:0A:9A:4C:98:85:BE:9B:0B:E6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7f4e747b-c42c-400b-8043-09160cc76cf0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7f4e747b-c42c-400b-8043-09160cc76cf0/81f8f997c47106c2eed6534190df56a42748b97a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.0.0-148.222.223.255
                  148.222.248.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28417

    Signature Algorithm: sha256WithRSAEncryption
         43:aa:35:de:79:a5:97:17:ac:c9:b1:4e:b2:88:7c:52:dc:2d:
         29:73:e8:ff:98:72:fa:8a:7e:02:a7:66:83:a4:59:60:bc:19:
         81:41:49:b7:ce:0f:72:97:4b:7a:35:cc:24:ad:eb:4b:0e:8d:
         6c:29:9c:38:42:14:c6:01:bc:e4:f5:05:a0:fd:0e:0b:37:39:
         8a:31:c5:7e:4a:88:7f:fc:cf:db:f3:11:cc:54:4d:a4:6d:49:
         ff:74:ca:43:1b:c4:7a:78:50:f0:80:8b:a3:b9:3d:a8:26:87:
         5d:ce:d6:18:1e:a7:f7:01:7f:4a:e9:4e:54:9c:2e:56:11:0f:
         dd:03:33:e5:88:83:51:6a:9c:3c:26:d6:31:53:8a:8b:4e:94:
         1d:5c:72:dc:0f:68:aa:4d:1d:c5:1f:e9:5f:97:23:b2:9a:92:
         b2:73:96:2c:c0:0b:45:a0:df:56:15:88:e5:16:53:89:ae:55:
         81:da:45:5c:02:31:00:de:28:0c:c1:9b:29:70:52:1d:31:18:
         2c:f8:8b:ca:f3:00:52:af:0a:f8:56:50:90:e2:5c:61:c1:99:
         e1:a7:74:f6:3f:21:6f:bd:e4:6a:e2:ca:6f:80:51:c2:3c:1d:
         5b:5f:aa:82:02:2b:db:b1:9e:96:a1:e3:75:2c:12:20:61:9a:
         c5:ba:60:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----