Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
File:                     ab812eecfcc01d38c444dbeae53234651af8c84d.cer (raw, json)
Hash identifier:          Lwmc7YqW0veKWA86E8oz3ol4WvB3oTD7/7oz5iiMBHY=
Subject key identifier:   C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F55200
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:15 +0000
Certificate not after:    Sun 15 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 19114
                          IP: 181.188.192.0/18
                          IP: 186.65.0.0/18
                          IP: 200.7.192.0/18
                          IP: 200.24.192.0/19
                          IP: 2800:830::/31

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16077312 (0xf55200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:15 2017 GMT
            Not After : Sep 15 15:00:00 2024 GMT
        Subject: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:df:c5:b3:ab:bd:56:3d:7a:b7:97:cc:c2:84:
                    de:46:0c:2c:25:b7:cf:cd:a1:87:fd:90:8b:9b:e3:
                    0c:67:62:9a:eb:21:b2:aa:a5:bb:70:93:a4:fc:ca:
                    0f:51:f8:ea:2e:b4:28:d9:cf:4f:1e:60:0d:fe:b8:
                    06:c3:55:ba:87:3a:eb:c5:90:bc:67:72:2d:10:53:
                    21:b5:73:72:2f:af:8d:9e:46:57:14:52:cc:3f:00:
                    58:d2:dd:56:7a:c8:43:63:f1:31:c0:99:cb:18:15:
                    a0:1a:4c:62:80:d1:43:94:6c:ec:b8:ab:79:a1:a9:
                    4f:d8:a1:f1:04:60:93:73:9c:49:1a:9a:cd:e7:6c:
                    ff:4f:b8:60:0b:cd:05:49:60:98:e3:df:e7:55:ad:
                    f5:08:0e:8e:4e:07:7a:6b:e6:cd:22:31:e5:e7:a2:
                    77:58:5e:1f:33:d1:e0:51:4d:fa:e5:3f:10:ad:4a:
                    04:2b:31:ad:19:ec:00:48:bb:37:18:60:e1:35:48:
                    57:78:1e:1b:61:c9:d8:b8:2d:d0:09:01:37:d4:a3:
                    d5:3b:76:98:de:0c:dd:32:5e:45:38:9c:d5:27:7d:
                    32:16:ca:8c:89:0d:5a:9a:b9:84:76:ef:00:d9:97:
                    ba:d1:45:4f:38:7f:62:ef:c6:b9:45:97:de:89:9a:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.192.0/18
                  186.65.0.0/18
                  200.7.192.0/18
                  200.24.192.0/19
                IPv6:
                  2800:830::/31

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19114

    Signature Algorithm: sha256WithRSAEncryption
         26:03:67:51:e9:ba:04:ad:58:a3:0f:38:d6:a7:86:21:e3:3b:
         49:3a:90:b7:6e:8c:84:44:f7:f8:74:9a:db:a8:10:02:d4:ef:
         e1:ef:f8:97:03:79:30:33:25:ab:09:d7:c9:fb:d0:61:41:00:
         67:c4:82:0b:e9:f7:33:78:d8:45:26:2d:0f:3b:af:98:3c:03:
         cb:db:1e:d8:75:30:a1:85:75:13:9e:ec:c2:94:34:32:29:7a:
         ad:67:cd:57:89:95:61:83:7c:cd:4b:ed:2f:98:71:77:11:18:
         cb:54:a4:d8:00:d2:b0:71:bc:30:6b:8f:1c:f7:d0:ce:3e:7a:
         66:80:ac:ef:25:8d:5c:29:51:69:18:85:2a:94:ae:10:4e:6d:
         78:22:b3:9d:7d:25:a4:f5:85:c3:99:18:a2:c1:bb:72:30:09:
         8e:71:08:64:a2:43:64:6c:ef:8a:6c:4f:0f:af:1a:f1:b6:17:
         9b:bd:c4:cc:a9:0f:44:f0:68:0f:a3:20:11:15:87:e9:ca:18:
         4d:73:1d:54:6d:f5:8e:51:10:2a:21:77:65:59:ea:12:29:de:
         49:0c:25:ca:61:16:0d:0d:dd:6f:36:f9:8b:0f:c5:9d:f5:ab:
         ce:24:51:0e:36:92:ca:46:97:43:cc:5d:05:35:32:39:7b:d5:
         55:b5:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----