Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer
File:                     9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer (raw, json)
Hash identifier:          3Bl/q5brMNhxY74L1EeJ8EQKh3XVfU3gMiiJik1K2TQ=
Subject key identifier:   E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA3933
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9fa677563ca5bfe6068216c74122a5d7cb2db27a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:20 +0000
Certificate not after:    Sat 31 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 26617
                          IP: 170.150.28.0/22
                          IP: 181.189.128.0/22
                          IP: 181.189.144.0/20
                          IP: 190.4.0.0/18
                          IP: 190.14.0.0/20
                          IP: 190.111.0.0/19
                          IP: 200.35.160.0/19
                          IP: 200.94.248.0/22
                          IP: 2803:3a00::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14301491 (0xda3933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:20 2017 GMT
            Not After : Aug 31 06:00:00 2024 GMT
        Subject: CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:af:0b:ce:f4:ca:db:aa:3f:67:96:57:d8:dd:
                    ec:dd:9a:6d:1a:d0:36:ef:72:c4:69:32:5c:10:c8:
                    4a:4c:e7:86:79:e4:66:98:b0:09:60:81:e3:22:78:
                    47:99:b8:9d:d3:fb:38:5d:ed:5c:2e:d7:29:61:6b:
                    f8:ae:d9:46:71:02:02:6d:ac:58:d0:a2:08:53:92:
                    0e:9d:a5:20:c6:29:c7:d9:aa:43:34:41:88:b4:4e:
                    de:c2:27:16:f3:db:4b:ec:be:fd:5e:91:98:9d:67:
                    5f:35:d7:7b:45:bf:2e:b1:94:5f:d7:d8:cb:ec:95:
                    b0:49:96:12:f4:fd:d2:b3:1b:8a:09:ce:d5:b3:6c:
                    93:df:df:20:8f:a0:a6:43:56:54:93:e9:eb:58:1f:
                    fb:23:37:37:2d:a0:ad:dc:8d:17:3f:ea:04:56:c6:
                    89:e0:71:27:fa:c2:5d:62:ce:2e:23:f5:d0:cb:2f:
                    16:a2:35:26:9f:6c:ef:29:75:ea:ae:a1:0b:b1:46:
                    51:ff:11:21:b4:74:7e:9d:cb:00:0f:c8:87:bd:eb:
                    9d:3e:a8:38:bc:a5:5f:bf:16:f8:e9:cf:dc:7b:80:
                    fd:1e:2f:7d:a7:48:78:43:aa:72:c9:7e:11:00:d9:
                    1e:95:76:77:05:88:97:91:fc:d8:9f:67:bd:c2:db:
                    31:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9fa677563ca5bfe6068216c74122a5d7cb2db27a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.28.0/22
                  181.189.128.0/22
                  181.189.144.0/20
                  190.4.0.0/18
                  190.14.0.0/20
                  190.111.0.0/19
                  200.35.160.0/19
                  200.94.248.0/22
                IPv6:
                  2803:3a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26617

    Signature Algorithm: sha256WithRSAEncryption
         33:6a:34:07:0a:ed:70:6c:18:61:78:69:b3:a9:51:2f:72:f2:
         10:ba:25:75:2c:b5:8b:1a:50:db:ff:13:33:a4:cc:9b:00:ac:
         e4:43:0e:e9:3d:88:c9:b9:35:a5:ac:ae:3e:7a:8e:bf:2f:69:
         d2:68:44:e7:0c:e6:8a:f4:40:f4:fe:b5:98:3c:76:54:33:0a:
         32:28:d0:6f:c1:dd:a7:7d:8a:bf:04:43:87:8b:a6:85:ca:db:
         fa:04:9c:60:11:0d:25:cc:cc:74:ea:ce:cb:c7:2a:6c:32:31:
         67:46:02:c8:d9:de:42:71:1b:f4:9a:91:1f:0c:55:a7:72:b9:
         1f:15:cd:05:37:dc:dd:51:2c:07:28:54:28:a8:c0:78:53:3e:
         70:e8:d4:59:91:3f:40:af:9c:ef:a7:10:03:ee:0b:5b:d2:79:
         76:3d:08:08:bb:aa:31:90:ca:8e:d3:f4:5d:12:f6:08:d5:8f:
         79:11:a8:dd:c6:70:c3:b5:a2:3b:eb:7e:1f:77:56:e0:c2:a8:
         ba:5c:4b:1a:9c:f9:c8:51:17:40:7c:5e:33:90:97:c9:3b:60:
         dc:7c:84:d0:f4:54:28:cc:94:77:f3:00:6b:6b:37:f5:6e:fe:
         f6:75:a5:80:c4:cb:97:52:ad:2e:8c:19:16:23:11:56:b6:6e:
         59:ba:3f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-ams.rpki-client.org