Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.cer
File:                     a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.cer (raw, json)
Hash identifier:          spZPYuVpoqOAYKZp/My8Sy6qkvsk6+UP6PKit69jF/4=
Subject key identifier:   DB:EE:7B:EC:56:4F:90:5D:60:8E:8A:D7:C2:54:C5:D8:32:57:10:50
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7ECDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2020 00:01:52 +0000
Certificate not after:    Thu 03 Oct 2024 21:14:47 +0000
Subordinate resources:    AS: 264688
                          IP: 190.107.240.0/21
                          IP: 190.196.224.0/20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16248026 (0xf7ecda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 00:01:52 2020 GMT
            Not After : Oct  3 21:14:47 2024 GMT
        Subject: CN=a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:0e:94:f4:08:a2:6e:5e:c0:7a:7f:7b:9f:
                    d0:9f:4c:a9:40:d9:2c:74:09:86:aa:75:e3:54:2e:
                    0c:a9:d8:94:51:5c:19:e1:ed:e5:4a:6c:de:48:6a:
                    69:15:dc:9d:c2:dc:b4:46:1b:c5:d6:90:f9:7c:11:
                    4a:c7:61:f7:96:66:db:9f:d5:17:6f:ab:d8:84:f7:
                    9e:55:92:ce:38:c7:57:4b:e3:c8:e8:fe:b6:82:bc:
                    e3:83:f4:58:b7:45:f7:cd:48:38:63:7b:12:35:96:
                    b6:95:b9:04:ef:b4:53:16:64:88:8e:67:fc:6a:47:
                    d8:73:72:50:7f:6d:10:39:16:50:98:95:b5:06:b8:
                    7f:64:62:35:00:0a:60:92:62:38:41:db:83:55:e9:
                    2f:4f:7a:83:31:bd:7b:dc:32:33:a8:96:db:b6:15:
                    7d:57:e2:c6:24:fa:3f:51:16:d8:f3:79:f7:77:c4:
                    a4:d5:7f:2d:8b:1f:ce:34:66:e2:02:e3:3f:d2:fd:
                    43:58:54:14:55:f5:9c:e2:be:0a:1b:2d:d4:4e:09:
                    41:48:ef:49:18:ad:3c:3e:ac:90:0d:7e:51:5f:76:
                    87:ce:b2:dc:f6:95:4a:9f:1c:a5:e6:33:06:0f:85:
                    49:56:ae:a7:fe:4a:0f:b5:00:45:f7:96:c7:09:fd:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EE:7B:EC:56:4F:90:5D:60:8E:8A:D7:C2:54:C5:D8:32:57:10:50
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.240.0/21
                  190.196.224.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264688

    Signature Algorithm: sha256WithRSAEncryption
         35:50:4f:0c:91:93:88:f9:db:24:ef:88:60:37:fd:20:f2:ce:
         4b:4b:78:f9:51:95:1b:fb:4c:3b:b1:bb:47:15:e5:03:7c:f5:
         d1:33:b3:61:f9:da:90:07:5e:c9:26:9b:66:85:6d:91:b8:91:
         4d:f2:6b:92:64:40:07:31:e1:65:f0:bc:b4:f0:0a:6e:fd:a5:
         55:39:92:85:00:09:ef:44:2e:fa:e6:57:12:ec:55:b4:7e:77:
         2d:ba:7b:89:1a:7d:81:06:d4:1a:8a:fe:5d:80:5c:79:64:b6:
         11:0e:57:12:c6:e8:c2:a1:cc:5d:71:f9:83:6f:50:49:fe:40:
         66:a5:8b:1c:46:ed:48:9d:ca:aa:f0:67:7e:7b:ab:9b:1b:a9:
         a0:f8:07:df:25:6e:a6:dc:a9:9f:6e:b9:77:2a:44:7d:77:c0:
         60:63:ca:34:83:2e:7c:1d:3a:44:c6:33:93:9a:ba:60:41:00:
         05:3f:0d:27:a2:fc:99:cb:55:bd:0c:67:84:4d:9b:d3:60:51:
         81:a3:6d:c6:83:4f:92:f6:ce:0b:d6:81:9e:c2:fe:02:dd:8d:
         7a:39:d0:44:91:4c:27:02:a8:f6:82:02:28:02:3a:89:84:d7:
         fd:b5:db:2e:a9:73:b2:c5:e9:c2:f7:c2:93:58:c9:4f:a5:2d:
         6a:70:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----