Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b522e22ef37f9604da03f445325cbd59d4a9a983.cer
File:                     b522e22ef37f9604da03f445325cbd59d4a9a983.cer (raw, json)
Hash identifier:          qwNN6jrlUkFBc6ZeVyILr4PDKrkYzaF33kVFUWOeJEw=
Subject key identifier:   06:7E:0E:8F:6F:B4:65:2B:47:A7:0F:30:35:2B:16:0F:21:11:33:7B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D917D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d630667-6830-4169-aafe-706427c85335/b522e22ef37f9604da03f445325cbd59d4a9a983.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d630667-6830-4169-aafe-706427c85335/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 Jan 2022 15:35:11 +0000
Certificate not after:    Mon 08 Jan 2024 15:08:42 +0000
Subordinate resources:    AS: 271875
                          IP: 201.218.190.0/23
                          IP: 2803:2c10::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14227414 (0xd917d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 17 15:35:11 2022 GMT
            Not After : Jan  8 15:08:42 2024 GMT
        Subject: CN=b522e22ef37f9604da03f445325cbd59d4a9a983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:c8:b1:a7:45:3d:d3:d4:ac:18:e5:23:6a:
                    c7:31:7e:93:ea:c5:69:a8:eb:e8:84:34:b8:bb:e9:
                    c7:a7:2e:7c:d3:61:d8:a9:2c:9f:34:42:55:3d:78:
                    b4:ed:5f:79:77:02:50:be:0c:43:24:66:8f:60:0b:
                    fd:2b:11:22:03:fd:1b:94:73:37:39:00:86:67:4c:
                    24:36:ff:82:bf:f5:40:e3:64:d5:40:21:be:9e:68:
                    7a:f9:16:03:8e:15:91:83:d2:a9:09:73:ef:c3:68:
                    d6:f3:4e:31:6c:98:76:f5:8d:ef:e2:43:d3:fb:f9:
                    85:d4:06:09:29:0c:b8:74:3b:47:25:ae:66:12:61:
                    fa:91:7a:25:38:68:2f:f2:8d:d6:f9:a3:00:ce:64:
                    f7:44:35:72:39:0f:11:0f:48:27:48:d5:a4:69:a6:
                    97:62:af:f2:a9:5b:03:14:04:55:b7:d6:ff:03:f2:
                    20:15:f3:85:06:34:64:bc:97:04:35:70:d1:ad:fb:
                    e0:6b:b5:aa:8b:83:ad:a9:df:e9:cf:69:ca:1a:52:
                    1e:52:b8:e7:71:87:76:be:5c:5a:1b:5b:75:28:0c:
                    ff:5b:74:4f:0c:85:98:4b:b6:d1:85:20:62:d6:85:
                    91:0c:82:aa:d0:d7:58:d9:27:80:83:5e:6e:da:e4:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7E:0E:8F:6F:B4:65:2B:47:A7:0F:30:35:2B:16:0F:21:11:33:7B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d630667-6830-4169-aafe-706427c85335/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d630667-6830-4169-aafe-706427c85335/b522e22ef37f9604da03f445325cbd59d4a9a983.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.190.0/23
                IPv6:
                  2803:2c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271875

    Signature Algorithm: sha256WithRSAEncryption
         41:48:bf:a8:19:67:07:01:ad:2c:e4:2c:47:3a:2c:39:d1:cf:
         1f:44:a3:32:df:e1:b9:ae:39:3c:a7:8c:15:dd:5c:e8:8e:3e:
         04:9a:50:ef:9a:9a:cc:c9:9c:cc:5a:7d:9a:a3:69:f1:0b:3c:
         cf:81:66:44:77:f0:0d:4e:2d:08:14:ad:71:03:7a:21:2e:69:
         74:82:18:02:ea:67:3c:90:2a:37:43:97:f6:c6:39:b5:01:ae:
         30:1f:73:ec:26:1e:52:12:7c:29:7d:af:97:70:7b:3e:ef:59:
         b9:0d:fb:ed:f7:08:9d:43:b0:25:3a:53:85:cb:6c:76:c9:9a:
         80:e0:da:81:98:ee:ad:50:7c:6f:2b:ce:aa:84:4d:43:8d:60:
         b1:ad:c6:4d:e9:0b:b2:74:6f:01:2c:cd:6f:33:66:7d:23:4b:
         d1:56:e0:ca:c5:71:d9:96:32:8d:63:03:ad:b4:75:14:40:b4:
         bb:6a:9b:91:90:f9:d2:e3:2d:71:83:1d:5b:b6:71:38:41:7f:
         10:fb:cc:49:8a:3d:38:5e:04:d1:31:36:e0:21:b3:eb:fe:a8:
         b9:19:e0:42:97:52:d1:26:4b:87:ae:53:1e:93:13:f4:d5:bd:
         2e:52:0f:2c:d9:47:fc:de:53:73:b2:f5:31:14:1a:e1:3b:0d:
         09:b2:a5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----