Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/869f7d019a2cd350762d2696e9f2033d079fd988.cer
File:                     869f7d019a2cd350762d2696e9f2033d079fd988.cer (raw, json)
Hash identifier:          MUknEgJ+tQ5zZaRWXgou2A2Pk4UYARj0fGyRvPgDVoI=
Subject key identifier:   65:57:CF:54:48:13:62:4B:C0:98:B8:7B:5B:03:54:E8:F5:BA:20:9F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBCE30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/869f7d019a2cd350762d2696e9f2033d079fd988.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:20 +0000
Certificate not after:    Sun 11 Feb 2024 05:00:00 +0000
Subordinate resources:    AS: 265760
                          IP: 181.224.164.0/22
                          IP: 2803:9300::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14405168 (0xdbce30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:20 2017 GMT
            Not After : Feb 11 05:00:00 2024 GMT
        Subject: CN=869f7d019a2cd350762d2696e9f2033d079fd988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:c3:48:e4:ae:14:01:40:e7:7a:fa:9a:25:
                    ba:17:cf:fd:2d:65:8e:7c:9c:cd:b7:6a:d0:20:d2:
                    a2:4f:e6:12:23:62:8c:37:66:09:b9:f7:f4:3d:61:
                    3d:3c:7c:ba:4d:f5:3d:88:b1:62:0f:9d:94:dd:43:
                    41:a8:e8:86:ef:f5:a5:77:00:17:ef:6c:ec:a7:5d:
                    1b:aa:78:bb:9d:aa:70:6c:50:6a:b5:c4:81:36:28:
                    ab:90:05:62:4b:7a:be:c4:ce:42:17:e8:17:30:34:
                    91:c4:ab:b8:d9:8e:23:92:fc:b8:91:bb:d4:ee:68:
                    9d:40:07:f8:15:9c:63:ca:1d:49:8d:ab:02:cc:d7:
                    0b:89:2c:0d:ed:c7:75:ff:30:0b:2f:ad:1a:2c:b6:
                    e0:13:66:c8:12:7b:fd:ea:ad:9b:12:1b:98:9a:c2:
                    ea:60:0f:c8:3b:e0:9c:ed:86:06:bf:95:0c:d9:f4:
                    8c:e2:99:88:01:91:5d:ca:4b:5e:76:74:b8:28:f4:
                    2e:45:39:09:a2:bf:53:61:aa:15:a4:84:76:8b:8d:
                    33:95:ea:6f:3a:d8:a7:81:5f:07:d7:b9:b7:f2:b7:
                    83:ba:4a:79:7f:37:a6:eb:6f:ec:83:4c:ee:4e:cd:
                    90:79:76:3c:a9:5e:b8:5b:29:fe:df:47:2b:a6:5f:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:57:CF:54:48:13:62:4B:C0:98:B8:7B:5B:03:54:E8:F5:BA:20:9F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/869f7d019a2cd350762d2696e9f2033d079fd988.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.164.0/22
                IPv6:
                  2803:9300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265760

    Signature Algorithm: sha256WithRSAEncryption
         bd:86:54:26:57:af:dc:5f:54:6b:73:e1:90:2c:64:bf:9f:ee:
         07:c1:58:54:53:3c:d3:8d:5c:23:d9:01:c9:46:f7:48:53:89:
         17:ae:f3:e5:f8:e8:7b:c7:15:61:b4:b3:95:9f:e5:99:7d:6a:
         2d:ce:32:fb:d7:e6:24:cb:10:87:3f:4b:20:8e:05:e4:0b:80:
         27:55:30:c4:f0:92:8f:c7:c3:2d:b8:1e:e2:d8:ec:56:d5:8f:
         27:7e:86:90:f6:20:ab:6b:18:56:ea:fa:15:6e:33:17:02:bb:
         e3:5d:48:2f:07:04:28:b2:06:de:6b:d4:49:17:cb:64:a8:2e:
         28:2e:09:32:94:85:b7:3d:64:36:78:6c:b1:c4:b7:c0:f7:ee:
         7a:92:9f:2d:0f:db:e4:f4:9f:48:8f:23:a1:26:42:60:44:5d:
         39:8e:81:7b:91:c8:2a:5b:54:9c:40:08:70:c5:5c:9a:cb:78:
         a3:63:8b:73:85:9b:9a:f7:ab:ad:a5:a5:2d:49:25:4f:17:08:
         96:96:38:d8:6d:98:22:02:63:20:23:07:57:6f:bc:68:bd:c8:
         ed:42:68:1c:0b:08:f5:6f:11:57:d9:8b:51:65:72:94:c5:22:
         f2:d5:1b:ad:64:eb:07:7e:f6:14:6e:38:65:71:2f:2d:3b:d1:
         c7:4e:4d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----