Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd.cer
File:                     993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd.cer (raw, json)
Hash identifier:          fzMxLEW5IMH66msEY7GegeHeP6ygiajRLb1V5PH+WAY=
Subject key identifier:   AE:C5:6D:08:2E:10:D8:BE:8F:7A:D5:1A:12:68:17:F7:38:FB:93:5F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CB2564
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 06 Jan 2018 04:52:03 +0000
Certificate not after:    Tue 18 Jul 2023 23:38:06 +0000
Subordinate resources:    AS: 265824
                          IP: 45.70.116.0/22
                          IP: 2803:d420::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13313380 (0xcb2564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  6 04:52:03 2018 GMT
            Not After : Jul 18 23:38:06 2023 GMT
        Subject: CN=993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:6b:1b:c3:fa:68:e4:ab:ec:e1:1f:37:7b:
                    a4:37:02:b3:d7:6c:55:15:ca:2b:98:92:91:ba:b5:
                    87:95:8c:41:ef:d8:4d:e7:3e:73:3d:82:b5:c3:1b:
                    97:98:05:25:a0:32:8d:b2:d3:b9:de:14:dc:49:f7:
                    b7:a4:12:52:95:8c:0e:60:dc:5c:de:20:63:7c:f5:
                    37:8f:80:d5:09:0b:89:c6:74:fa:62:01:60:23:20:
                    f5:c0:ff:e0:5d:77:88:1b:c3:cd:c0:fc:93:3b:98:
                    fe:1c:4c:ad:fe:67:49:c4:c1:46:07:83:14:39:8e:
                    23:22:15:99:83:22:8d:40:be:ca:49:be:f6:48:71:
                    e5:06:3a:e7:49:59:13:84:f0:bb:49:fe:76:3a:57:
                    48:5a:95:5b:86:14:fd:f0:95:dd:a9:37:06:9e:89:
                    97:72:b8:6c:b6:20:64:39:12:d2:f0:f9:ad:6f:96:
                    fe:26:07:5e:88:cd:b9:4c:d3:b2:90:e2:54:b8:65:
                    0b:41:8f:37:df:ae:30:df:b4:1a:06:a6:15:7d:54:
                    da:53:4a:16:73:e8:c5:3a:4b:3d:62:c8:eb:bb:83:
                    04:69:82:70:ab:87:d0:55:a9:ba:84:43:d8:87:a4:
                    d7:b9:7b:77:a7:e5:53:11:ed:cb:d5:d8:0a:d7:61:
                    40:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C5:6D:08:2E:10:D8:BE:8F:7A:D5:1A:12:68:17:F7:38:FB:93:5F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.116.0/22
                IPv6:
                  2803:d420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265824

    Signature Algorithm: sha256WithRSAEncryption
         3c:94:2e:b8:d9:9a:1e:5d:2b:3d:70:a7:95:db:9e:4c:3f:cc:
         95:dc:a5:46:61:99:b8:48:2d:06:87:1d:9a:d1:87:17:34:3b:
         38:e0:60:b8:f4:7d:30:c3:e6:59:89:fd:86:9c:3c:48:01:40:
         71:0d:e8:77:55:c8:b2:75:61:28:fb:e9:73:68:ce:34:1d:d9:
         8a:57:b7:e5:a3:97:93:ef:8f:00:66:4a:0b:06:fd:60:6f:f3:
         04:d2:f0:8d:53:a7:9b:7f:49:53:5a:19:e5:74:b7:5f:f8:4d:
         87:73:99:17:6b:83:0f:4d:c0:a1:0d:4f:48:6d:8f:cd:f1:3d:
         71:d5:17:9c:b1:4c:f1:31:9b:76:4f:22:5e:c7:f5:6c:72:fe:
         c9:88:bd:ac:8f:7b:4c:16:13:92:ae:33:8e:19:30:5a:bc:1a:
         c7:85:07:29:31:ae:fd:0b:85:95:c2:8d:9c:72:76:f2:b2:3d:
         98:0f:a4:76:a2:9a:c4:62:d0:07:0a:8f:a0:83:cf:86:5a:18:
         13:50:0e:57:f4:44:02:6e:c5:26:eb:d9:ec:a8:00:d4:90:45:
         99:e3:3a:2d:45:3a:7b:c1:cd:70:62:2a:0e:e4:2e:c6:2e:fb:
         9d:5e:e7:44:7f:e1:59:c4:73:c0:93:5c:33:f1:56:95:ef:43:
         e7:65:88:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----