Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d0dacb7892a48f01d67bf3ce52c3151a8e3a6b7.cer
File:                     8d0dacb7892a48f01d67bf3ce52c3151a8e3a6b7.cer (raw, json)
Hash identifier:          kMumg2YtMeMU1fh28vkYu86KLUFYkZ9DV/NLT/QhbYw=
Subject key identifier:   7B:2C:64:42:ED:2C:1E:9C:03:7D:A1:5A:41:48:33:C7:D8:D9:AB:6A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D01B24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a1bc7386-f3d8-467e-8e92-53522594a1d3/8d0dacb7892a48f01d67bf3ce52c3151a8e3a6b7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a1bc7386-f3d8-467e-8e92-53522594a1d3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Jan 2020 14:09:30 +0000
Certificate not after:    Fri 22 Sep 2023 18:24:34 +0000
Subordinate resources:    AS: 269849
                          IP: 45.180.179.0/24
                          IP: 2803:20e0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13638436 (0xd01b24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 14 14:09:30 2020 GMT
            Not After : Sep 22 18:24:34 2023 GMT
        Subject: CN=8d0dacb7892a48f01d67bf3ce52c3151a8e3a6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:04:55:85:70:60:d3:e5:e9:cd:b8:00:1c:
                    d9:24:e2:8f:b3:37:ec:0e:2b:00:35:1a:6c:1b:da:
                    cb:06:27:ec:2c:0b:df:4f:3b:93:49:38:6f:46:9f:
                    5d:bf:e6:75:12:b7:2b:2c:2b:37:ca:09:77:cd:09:
                    bd:52:ff:e9:b2:ab:2f:cd:79:07:42:8a:68:30:e4:
                    6e:79:ac:6c:a5:6a:a9:62:4f:a8:2c:39:0b:a2:34:
                    f9:16:08:60:3f:fe:5f:9d:d5:9d:90:6d:50:f5:bc:
                    4d:e9:9b:65:10:90:00:1f:44:d2:00:8a:67:df:16:
                    77:41:c8:37:38:a3:25:00:5c:cd:0e:9e:a7:41:c0:
                    b7:fd:be:ab:12:35:6d:71:57:32:83:f8:bc:4e:d8:
                    08:cc:81:f0:e5:d5:94:04:9b:44:f8:46:1f:29:6e:
                    d6:f4:ec:ef:e2:78:27:35:d8:d8:b2:3a:ed:e3:6e:
                    42:86:c0:8e:d6:3f:a4:de:46:a4:e6:65:39:58:e9:
                    b0:d3:1c:5b:ea:44:53:fe:a6:9e:36:f4:05:85:25:
                    ac:b2:8e:64:c9:62:1f:eb:d9:5c:39:5e:6c:d1:f4:
                    4d:56:36:f1:3a:f6:8a:2b:56:9d:ec:e7:ac:d0:2d:
                    44:9f:b9:4d:42:1a:ac:2b:b2:19:7f:6e:21:04:9d:
                    23:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2C:64:42:ED:2C:1E:9C:03:7D:A1:5A:41:48:33:C7:D8:D9:AB:6A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a1bc7386-f3d8-467e-8e92-53522594a1d3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a1bc7386-f3d8-467e-8e92-53522594a1d3/8d0dacb7892a48f01d67bf3ce52c3151a8e3a6b7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.179.0/24
                IPv6:
                  2803:20e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269849

    Signature Algorithm: sha256WithRSAEncryption
         83:63:1f:2b:fd:b1:45:7a:f5:a6:66:a1:43:c7:c9:63:f1:6e:
         16:91:14:73:33:60:02:95:65:27:f0:66:01:90:44:ef:5c:a0:
         f1:f8:91:fe:0f:30:86:2b:c1:a9:53:f4:cf:d5:3f:18:e2:b1:
         6b:e7:ce:47:c3:06:50:52:c3:04:fe:f3:7e:1c:ed:fc:88:65:
         9f:8a:e8:1e:09:b4:e6:f3:e3:04:c1:fb:dd:a0:12:d8:92:61:
         b8:f5:fc:f9:e6:1b:25:68:ae:e9:72:c2:1d:cd:d3:fb:95:fa:
         55:f4:75:8d:02:08:82:0a:77:86:ac:38:af:7d:fd:d7:8b:9f:
         d0:9e:55:38:c9:98:e2:04:fb:12:9b:19:dc:d7:3b:81:39:3c:
         d6:69:45:40:1e:ef:45:74:c4:96:cd:60:58:d4:12:5c:de:f4:
         50:0f:64:3d:bf:cc:7a:1b:8a:84:29:4a:fa:1d:f3:79:e4:5c:
         d9:84:52:b0:c0:f9:6b:5c:d6:cd:c3:7b:23:56:24:a0:c5:f9:
         7b:72:69:4c:7c:17:10:c7:5a:7b:da:ab:fb:17:d1:5a:61:fe:
         67:73:42:f1:b2:d8:9a:99:68:fd:9b:c4:ed:88:63:ba:b1:be:
         f7:bb:18:ac:7f:bc:37:38:68:7f:68:6b:94:f2:b0:a6:54:9a:
         c1:84:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----