Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5870581a7a54ad76661b8f0f4f741a7f81ae942.cer
File:                     b5870581a7a54ad76661b8f0f4f741a7f81ae942.cer (raw, json)
Hash identifier:          /Z+YUYdX4SpE+VI+6OJwoJYiPV/EnkkKkgmQxHOmuzc=
Subject key identifier:   C6:8F:A1:BB:54:55:2A:11:4B:5A:F7:47:D4:DB:74:74:4D:62:65:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       B83BAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/610cb410-ef52-4382-a924-acb3b274565e/b5870581a7a54ad76661b8f0f4f741a7f81ae942.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/610cb410-ef52-4382-a924-acb3b274565e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Oct 2021 23:07:56 +0000
Certificate not after:    Tue 10 Jan 2023 18:21:31 +0000
Subordinate resources:    IP: 45.4.172.0/22
                          IP: 2803:5ec0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12073898 (0xb83baa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  4 23:07:56 2021 GMT
            Not After : Jan 10 18:21:31 2023 GMT
        Subject: CN=b5870581a7a54ad76661b8f0f4f741a7f81ae942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:54:05:8e:bb:95:19:b3:7b:b5:d1:8d:35:
                    eb:63:cd:91:e5:d2:51:ca:d1:8a:0c:ed:68:a6:bc:
                    43:75:1d:f5:d9:d7:8e:c5:fe:27:b7:9a:44:f1:ca:
                    6c:de:05:7d:25:56:74:08:94:7d:2e:1a:cc:16:74:
                    4c:38:c8:3e:1e:8c:0e:a8:ed:27:5d:f7:58:71:5e:
                    0a:a1:66:90:ac:6a:e1:34:28:f3:f0:38:95:56:34:
                    3d:19:ff:16:89:7e:1f:28:c6:de:67:5d:2b:1a:45:
                    fe:3a:c4:02:1f:0b:42:f8:75:8a:20:83:d4:a9:5e:
                    6c:29:fd:ec:25:a0:10:c6:48:d3:8e:4c:3c:58:47:
                    92:90:d7:06:40:40:c8:c1:8d:55:9c:d2:48:45:f1:
                    71:1d:1a:e6:29:7f:aa:52:ea:6e:e7:35:98:6d:c9:
                    ef:7b:31:8e:46:a1:7e:54:38:f0:49:31:c2:d1:33:
                    e3:9f:c1:f7:db:44:fd:ec:ba:0f:bf:aa:af:8b:3a:
                    31:7b:57:d1:4d:6e:3b:58:2a:9f:86:ae:ad:a2:a6:
                    33:4f:0f:71:69:27:2d:95:17:92:b0:e8:6d:29:ca:
                    f0:7d:a2:2e:14:cf:33:3e:1c:a2:f3:fa:1c:3c:1f:
                    73:36:a7:1b:28:b1:98:68:b3:44:82:f8:78:a7:bd:
                    22:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8F:A1:BB:54:55:2A:11:4B:5A:F7:47:D4:DB:74:74:4D:62:65:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/610cb410-ef52-4382-a924-acb3b274565e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/610cb410-ef52-4382-a924-acb3b274565e/b5870581a7a54ad76661b8f0f4f741a7f81ae942.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.172.0/22
                IPv6:
                  2803:5ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:a0:5b:7d:80:87:70:10:b7:57:e9:80:4f:d6:6c:8a:71:4a:
         e3:9f:c4:54:34:63:7c:44:79:49:d6:bd:81:17:64:98:a7:32:
         21:35:c6:4a:94:94:2c:6a:9a:be:cb:6c:13:81:67:34:62:a1:
         b6:a9:66:d4:1d:47:8e:c8:9d:96:d4:9e:2f:ed:4c:00:fd:bc:
         d8:a0:52:94:d1:27:93:55:1d:6d:6b:a9:e1:26:18:81:b8:43:
         cc:bc:f1:7d:9b:dc:f9:bb:29:21:17:fd:78:4b:58:11:56:f5:
         e7:1b:8b:f5:41:9b:d0:77:91:53:5c:07:1d:68:a1:8b:9a:4d:
         e2:6b:f6:94:9d:00:d9:06:3d:c7:38:81:b2:17:30:5f:b5:24:
         5e:0c:37:17:8a:d7:92:b8:0c:48:e1:ac:b5:9b:28:d8:00:5a:
         42:ab:3c:a4:bd:41:56:09:3c:5f:cd:c4:49:cd:b4:78:af:93:
         15:bf:ed:7e:06:2a:2e:a9:3f:d3:34:cf:b2:f6:aa:ac:a8:63:
         86:0e:19:30:f1:3f:d6:76:cb:9f:3e:09:6b:bc:65:05:b0:d1:
         9e:f7:ae:53:f4:e5:91:89:51:2a:8c:4a:77:45:08:80:24:6d:
         4c:0c:1a:c7:fd:b6:38:73:2f:36:31:45:09:09:e8:a6:c2:28:
         c4:1a:be:ba
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEALg7qjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTAwNDIzMDc1NloXDTIzMDExMDE4MjEz
MVowMzExMC8GA1UEAxMoYjU4NzA1ODFhN2E1NGFkNzY2NjFiOGYwZjRmNzQxYTdm
ODFhZTk0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMRXVAWOu5UZ
s3u10Y0162PNkeXSUcrRigztaKa8Q3Ud9dnXjsX+J7eaRPHKbN4FfSVWdAiUfS4a
zBZ0TDjIPh6MDqjtJ133WHFeCqFmkKxq4TQo8/A4lVY0PRn/Fol+HyjG3mddKxpF
/jrEAh8LQvh1iiCD1KlebCn97CWgEMZI045MPFhHkpDXBkBAyMGNVZzSSEXxcR0a
5il/qlLqbuc1mG3J73sxjkahflQ48EkxwtEz45/B99tE/ey6D7+qr4s6MXtX0U1u
O1gqn4auraKmM08PcWknLZUXkrDobSnK8H2iLhTPMz4covP6HDwfczanGyixmGiz
RIL4eKe9Ig8CAwEAAaOCAu0wggLpMB0GA1UdDgQWBBTGj6G7VFUqEUta90fU23R0
TWJljTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82MTBjYjQxMC1lZjUy
LTQzODItYTkyNC1hY2IzYjI3NDU2NWUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjEwY2I0MTAtZWY1Mi00
MzgyLWE5MjQtYWNiM2IyNzQ1NjVlL2I1ODcwNTgxYTdhNTRhZDc2NjYxYjhmMGY0
Zjc0MWE3ZjgxYWU5NDIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0ErDANBAIAAjAHAwUAKANewDAN
BgkqhkiG9w0BAQsFAAOCAQEAtqBbfYCHcBC3V+mAT9ZsinFK45/EVDRjfER5Sda9
gRdkmKcyITXGSpSULGqavstsE4FnNGKhtqlm1B1HjsidltSeL+1MAP282KBSlNEn
k1UdbWup4SYYgbhDzLzxfZvc+bspIRf9eEtYEVb15xuL9UGb0HeRU1wHHWihi5pN
4mv2lJ0A2QY9xziBshcwX7UkXgw3F4rXkrgMSOGstZso2ABaQqs8pL1BVgk8X83E
Sc20eK+TFb/tfgYqLqk/0zTPsvaqrKhjhg4ZMPE/1nbLnz4Ja7xlBbDRnveuU/Tl
kYlRKoxKd0UIgCRtTAwax/22OHMvNjFFCQnopsIoxBq+ug==
-----END CERTIFICATE-----