Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa3e8fff5576f1b88b5449e6857a024801374985.cer
File:                     aa3e8fff5576f1b88b5449e6857a024801374985.cer (raw, json)
Hash identifier:          duaf/IjkFMrUkSE4N4Y16TjrnCd/NaP4OXWNUYv5bDM=
Subject key identifier:   78:67:0B:A0:47:C6:A5:81:89:5F:CF:B0:FB:F7:FA:8B:E9:94:A2:69
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D35732
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/356802aa-1e01-419a-9c18-11213bfdb38a/aa3e8fff5576f1b88b5449e6857a024801374985.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/356802aa-1e01-419a-9c18-11213bfdb38a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 04 Jan 2019 03:17:15 +0000
Certificate not after:    Mon 30 Oct 2023 18:23:47 +0000
Subordinate resources:    AS: 264839
                          IP: 167.250.132.0/22
                          IP: 2803:8540::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13850418 (0xd35732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  4 03:17:15 2019 GMT
            Not After : Oct 30 18:23:47 2023 GMT
        Subject: CN=aa3e8fff5576f1b88b5449e6857a024801374985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:94:56:71:68:18:77:c5:8a:ff:27:db:16:
                    c2:e8:64:46:6f:35:db:3b:41:31:f6:4c:3a:e4:41:
                    d5:ca:56:92:3f:2e:43:2a:79:72:44:da:7b:28:31:
                    a2:b9:04:f5:92:fd:c2:cc:0b:1b:4b:69:65:b2:4f:
                    33:4f:99:a4:ac:02:42:73:80:ce:56:16:09:35:65:
                    82:2f:fe:ae:5d:4b:1a:d1:31:47:c4:59:08:a8:bc:
                    75:ac:b9:a4:45:d8:22:f6:6c:51:56:f4:18:b1:ea:
                    21:cb:c7:ce:25:30:61:a3:42:d7:38:12:15:e5:49:
                    db:b5:fa:32:7f:4e:c3:6d:45:0b:03:4c:15:25:32:
                    1c:e3:ae:6c:9f:5e:28:ed:02:5c:10:65:fb:7e:21:
                    62:74:2a:25:47:81:ba:4e:8e:ac:0f:39:ce:e3:0b:
                    70:5b:e5:b2:b1:f6:d1:31:56:ae:2a:8b:de:34:b0:
                    5a:11:8c:9f:50:50:7c:85:f3:e3:c5:1f:68:76:69:
                    1d:51:69:8b:ca:1a:a8:2e:97:a3:dd:d9:e8:d0:2f:
                    9c:0c:5e:a6:74:36:52:9f:fe:81:6a:8c:f9:63:80:
                    c2:ea:27:7d:59:53:31:47:cb:aa:10:ad:2d:86:e5:
                    3e:ea:45:fc:4c:37:a2:0a:a7:f8:35:f7:df:30:db:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:67:0B:A0:47:C6:A5:81:89:5F:CF:B0:FB:F7:FA:8B:E9:94:A2:69
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/356802aa-1e01-419a-9c18-11213bfdb38a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/356802aa-1e01-419a-9c18-11213bfdb38a/aa3e8fff5576f1b88b5449e6857a024801374985.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.132.0/22
                IPv6:
                  2803:8540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264839

    Signature Algorithm: sha256WithRSAEncryption
         c0:0f:5d:5b:04:50:f7:cd:f8:70:a0:21:4b:1a:33:63:03:69:
         87:5f:c4:8f:6a:92:da:8e:07:54:78:2c:45:6c:7e:d0:7a:d5:
         93:92:bc:9b:6b:89:8a:19:76:01:96:4d:c2:68:6a:3d:ad:af:
         03:3f:ef:cc:34:1f:e4:2d:cc:02:7e:d2:1c:e4:22:99:b6:e3:
         c6:5b:ad:c4:8e:18:44:63:3a:ea:7d:a1:1b:72:db:71:cd:8b:
         f8:3c:69:7e:ce:04:8b:36:39:0e:4d:01:c1:0e:81:16:af:d6:
         55:96:a4:48:94:57:7f:6f:55:28:15:4f:08:f7:ef:ac:81:f0:
         a7:e0:2d:e7:bb:c4:61:f6:c7:87:33:f7:39:f3:da:09:08:7f:
         fe:0d:f4:a5:27:19:80:54:aa:79:f6:5f:1d:d1:b0:8f:b6:00:
         24:23:f5:56:83:2c:9f:4b:98:90:80:bb:89:aa:a5:91:35:e5:
         50:15:97:26:41:3b:2e:b0:33:61:22:0d:13:17:25:62:08:91:
         48:c8:42:68:36:48:5b:c3:33:b9:ea:4e:59:3e:c5:d7:2c:e2:
         70:55:4d:48:84:51:ac:f9:1f:8d:b7:b6:e9:9c:83:b6:7e:d0:
         e7:81:d2:0a:a3:4d:01:2b:46:ff:55:72:6c:2f:37:aa:00:27:
         45:20:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----