Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ec226503396fbae8397c779b6ca5e68de01be0d.cer
File:                     8ec226503396fbae8397c779b6ca5e68de01be0d.cer (raw, json)
Hash identifier:          SL08nmQZvKQvyvdPSQV7Ci57Kgp0noEl7RV6GeGfBAs=
Subject key identifier:   F4:4D:25:5B:74:A7:31:F2:AB:D1:D5:7F:45:FE:15:95:E0:3A:64:0B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C17DEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8ec226503396fbae8397c779b6ca5e68de01be0d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Nov 2020 15:05:39 +0000
Certificate not after:    Thu 01 Jun 2023 06:00:00 +0000
Subordinate resources:    AS: 61440
                          IP: 2803:80::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12680682 (0xc17dea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 25 15:05:39 2020 GMT
            Not After : Jun  1 06:00:00 2023 GMT
        Subject: CN=8ec226503396fbae8397c779b6ca5e68de01be0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:97:7f:16:6d:06:8e:d7:d8:89:4e:ce:07:
                    7c:c5:c7:2e:70:22:27:4e:9c:bf:48:1d:d8:5a:01:
                    01:6d:67:4c:56:7a:af:f6:d0:d0:5b:7b:9c:62:1a:
                    e2:54:1d:da:fd:4e:4b:3b:d1:99:a0:29:42:b2:00:
                    b4:a5:4d:05:36:b2:fc:ad:7b:37:d2:87:9d:84:9f:
                    39:8a:33:1b:10:38:17:a0:07:83:4a:36:77:5c:05:
                    eb:bd:41:f8:53:42:d1:3d:63:ab:b1:31:3d:e2:d9:
                    26:1c:03:a8:43:90:59:4c:68:b6:c4:1f:35:67:f7:
                    15:db:3f:25:f5:56:31:78:fa:80:61:89:1d:92:5d:
                    e2:ad:6e:3d:ea:20:4d:c5:5a:c2:ab:fc:eb:fe:cf:
                    83:4a:fc:75:17:67:58:f9:d3:c8:00:38:6d:0e:22:
                    7c:63:60:10:45:27:1e:e2:f4:35:8b:30:61:23:95:
                    99:91:ab:16:c8:76:1f:30:78:23:08:ba:cf:4a:6c:
                    fa:63:dd:21:bd:ff:92:16:9a:c0:98:43:3e:59:90:
                    20:05:52:6e:63:ef:0e:a9:66:fb:89:e4:8a:f7:6b:
                    01:47:4d:14:cd:34:03:ea:a3:52:f7:09:ce:35:00:
                    1d:ee:d7:8c:af:0b:6a:82:15:05:68:57:08:d5:31:
                    6b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4D:25:5B:74:A7:31:F2:AB:D1:D5:7F:45:FE:15:95:E0:3A:64:0B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8ec226503396fbae8397c779b6ca5e68de01be0d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61440

    Signature Algorithm: sha256WithRSAEncryption
         95:6e:39:89:79:be:4b:bb:13:d7:87:a5:1a:88:dc:b8:15:ba:
         cf:c0:b8:1d:42:1f:28:70:91:56:22:5a:63:a0:f5:46:58:1d:
         19:5e:9d:18:29:9b:9b:a6:7a:84:f9:01:40:ee:ce:44:14:49:
         ba:a4:4e:43:c8:b4:69:e4:0d:de:79:d3:16:39:b7:ef:ef:d5:
         1b:90:6d:d2:93:9a:a1:4a:e5:5f:5f:03:77:03:02:3f:63:86:
         fb:c8:f4:79:20:f6:4c:8a:95:bc:4a:d6:bc:81:bd:2e:f5:0d:
         f3:80:e1:f0:cd:40:b3:1f:1b:70:9e:d4:41:52:86:9f:56:6a:
         14:34:d9:c6:df:42:67:7c:3d:93:d1:2c:a6:09:25:4f:4f:3c:
         84:1e:42:31:e7:0a:06:62:72:c1:5a:11:c4:24:38:d7:87:70:
         66:80:e8:f7:dd:81:4b:e6:ea:44:be:a1:48:56:db:a3:a1:b7:
         1c:89:7b:d5:9e:71:b8:0e:fd:dc:7a:b3:f6:33:b8:78:9d:4f:
         0c:49:3e:09:19:8a:dd:f1:2d:0f:2e:a4:31:9e:c8:96:d9:3c:
         bf:67:83:e3:d7:e7:a6:60:2a:c2:40:1a:54:09:04:e7:c8:37:
         04:3b:3b:26:90:c5:b0:99:73:96:0a:b9:eb:54:e9:f2:45:87:
         58:22:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----