Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
File:                     8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer (raw, json)
Hash identifier:          ze45k/3GF1QR97cKMPXeKMWy2xuFoWauu4R/IWRLC4k=
Subject key identifier:   76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C96AF0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:04 +0000
Certificate not after:    Fri 26 May 2023 15:26:56 +0000
Subordinate resources:    AS: 262171
                          IP: 190.93.160.0/20
                          IP: 2803:fb40::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13200112 (0xc96af0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:04 2017 GMT
            Not After : May 26 15:26:56 2023 GMT
        Subject: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:76:da:c3:ea:3c:91:d3:d3:37:4b:59:81:86:
                    d8:71:cb:6d:f0:7c:e4:2d:5e:3c:48:c9:9d:4d:8c:
                    27:aa:1a:da:b2:c5:18:21:2e:0f:c5:2e:d2:03:17:
                    ff:c5:c4:61:81:71:f3:c0:0a:75:35:84:5d:51:16:
                    8c:01:0a:39:4e:16:e8:2d:cd:a5:1c:f5:54:7b:01:
                    db:f1:45:57:18:8e:16:f1:30:3a:51:37:1f:47:53:
                    99:90:9b:13:eb:0a:05:98:89:3d:63:db:e9:36:8b:
                    de:61:36:7a:bc:4b:97:6e:bf:d6:ec:0e:7c:f7:d1:
                    51:1e:ee:a8:c0:17:78:27:71:ce:24:82:e5:83:05:
                    37:80:33:76:de:2d:0e:61:c3:9a:d8:24:06:8c:1c:
                    91:d6:83:69:a7:a6:55:2f:02:dc:2b:4c:a1:5a:2c:
                    60:e4:de:68:cd:ff:90:c5:31:27:db:a8:74:99:10:
                    81:31:fd:aa:76:75:da:90:d9:0f:cb:bf:6e:9e:fb:
                    57:6e:50:fc:49:ed:dc:3e:9a:a0:55:a1:0f:e4:5e:
                    2b:7c:6a:5e:cd:87:5b:13:05:7c:b7:15:3e:16:03:
                    6d:3a:0a:13:e0:64:1a:50:d3:e5:dd:07:02:4d:2c:
                    d2:f3:51:fe:f5:eb:70:d9:c5:16:be:78:b2:c3:bf:
                    8f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/20
                IPv6:
                  2803:fb40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262171

    Signature Algorithm: sha256WithRSAEncryption
         4c:a2:68:25:d3:62:3a:2b:5b:b2:35:60:39:cf:3f:80:70:40:
         ea:22:d4:13:fa:27:70:ab:d7:02:7d:30:73:eb:a0:9c:17:0d:
         a4:6c:6f:9b:f8:a8:cc:a5:8e:6e:7c:c3:2c:73:c7:36:6c:18:
         7f:dc:22:5b:ac:3d:4c:b9:b7:e0:ba:9b:f0:75:4b:26:fb:79:
         17:71:3a:5f:65:ed:1e:70:84:97:43:72:2e:7d:1d:c5:d5:20:
         6a:7b:7f:fb:25:c8:24:14:f1:3a:2a:6f:46:9f:99:b5:1f:d9:
         79:2f:ac:af:fe:2a:83:e3:77:31:fa:b7:b0:7e:43:4c:e8:12:
         5f:33:39:e3:bf:88:38:ba:21:37:f1:e9:00:50:96:2e:8d:16:
         e8:86:6a:67:48:1b:7d:46:44:d8:7c:92:77:62:eb:4f:13:f7:
         0f:02:ff:c6:02:c0:86:39:bf:93:e2:3c:17:89:f2:55:4f:cd:
         08:b3:e8:66:e1:08:58:cc:ce:c4:d1:33:c7:0d:8b:8c:fe:77:
         8d:f9:5f:79:e4:42:a2:ed:4d:73:bf:8a:9c:97:dc:fa:2c:14:
         81:d6:57:19:77:0a:83:48:fe:ec:fc:ac:ff:80:bd:2c:33:04:
         94:80:97:4f:a5:09:e1:05:97:99:d0:04:83:45:ee:43:ec:b0:
         cc:6f:33:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----