Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba80572109c0ba52dbebb4fb02310a9b68fde46d.cer
File:                     ba80572109c0ba52dbebb4fb02310a9b68fde46d.cer (raw, json)
Hash identifier:          5DJRXMmRqX8JiMWRfnN6jZ6dcOUOt62BLfPdYd3IVEo=
Subject key identifier:   0D:B3:0F:C3:89:4E:AF:C4:07:D2:6B:C3:32:81:4D:CC:5E:9C:3A:28
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       B578B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9008badb-4e0f-4b2a-bc5a-85b59f58f700/ba80572109c0ba52dbebb4fb02310a9b68fde46d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9008badb-4e0f-4b2a-bc5a-85b59f58f700/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 06 May 2019 21:17:33 +0000
Certificate not after:    Sat 21 Jan 2023 21:12:37 +0000
Subordinate resources:    AS: 267806
                          IP: 2801:15:800::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11892913 (0xb578b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  6 21:17:33 2019 GMT
            Not After : Jan 21 21:12:37 2023 GMT
        Subject: CN=ba80572109c0ba52dbebb4fb02310a9b68fde46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:7f:70:60:ee:c0:7b:a7:47:72:b5:c5:de:
                    de:d1:fc:bf:86:fd:db:21:3b:28:f6:3b:e6:b0:aa:
                    7b:07:aa:bf:5d:f5:bd:d6:db:48:49:ed:7b:b7:9d:
                    a2:1c:0f:9b:06:8f:93:01:6b:02:bb:8f:d4:8b:96:
                    54:ad:ac:8b:c6:b9:a5:15:17:f5:e6:00:bc:48:b0:
                    be:d8:0e:8b:cc:c5:ac:be:67:bb:1b:06:ef:06:e6:
                    5a:e9:6c:38:d8:16:f2:96:15:46:17:0a:89:bf:d3:
                    bf:59:0c:c1:27:34:dd:76:cd:a1:6f:e4:0d:4a:15:
                    25:58:3b:c1:82:78:c8:cb:b9:08:a7:3b:97:29:84:
                    30:61:26:b5:48:5e:ba:24:d2:ad:46:6d:ee:95:97:
                    fc:0b:98:b3:e4:4f:9d:11:92:f0:46:fb:5a:b8:47:
                    47:a8:7b:78:44:32:c9:99:ae:9a:5b:ba:e1:cc:a8:
                    05:d4:78:ca:67:13:9e:4d:14:ac:a7:0d:a3:60:4f:
                    27:77:ce:e5:b2:39:e3:d8:84:f8:e9:63:1e:63:3f:
                    32:eb:ce:aa:c3:96:98:cb:02:b8:20:be:1c:76:7c:
                    d2:73:e9:f3:05:6a:66:63:e9:f0:29:c0:24:d7:8e:
                    2e:71:27:97:8b:42:cd:39:bd:32:aa:a8:85:3d:39:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B3:0F:C3:89:4E:AF:C4:07:D2:6B:C3:32:81:4D:CC:5E:9C:3A:28
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9008badb-4e0f-4b2a-bc5a-85b59f58f700/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9008badb-4e0f-4b2a-bc5a-85b59f58f700/ba80572109c0ba52dbebb4fb02310a9b68fde46d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267806

    Signature Algorithm: sha256WithRSAEncryption
         24:8c:4d:f2:0d:9b:34:e3:db:1c:8b:76:13:44:90:08:35:98:
         14:a2:8a:5a:8c:00:24:1b:d2:85:b3:c5:a6:20:e0:65:83:6d:
         2d:5d:b7:68:58:b5:0d:a8:18:82:2e:8c:8b:b1:44:4f:39:60:
         de:8f:66:0f:8e:9b:ed:32:4f:f8:a7:b7:19:42:1d:70:b3:53:
         11:60:44:f6:3d:22:6b:b6:2b:5c:87:db:ad:8f:39:15:ec:d0:
         14:b9:28:7f:a3:cd:1b:8c:f8:1e:75:f8:ec:be:47:3c:92:a8:
         09:3b:d2:1c:14:b2:02:e4:8c:e4:57:a3:59:1e:84:9f:d2:55:
         a4:76:dd:05:05:22:90:82:4a:e2:1f:40:32:08:c2:8d:cc:df:
         77:5a:dc:fc:27:db:1f:fc:7e:fe:29:66:d6:04:a6:b8:d3:be:
         da:94:47:dc:cf:7b:c8:36:e5:3e:5c:8b:7a:0d:33:c8:69:12:
         fc:1a:52:90:85:5e:bd:4d:c4:b1:f2:91:1a:b8:b0:74:cd:6e:
         09:07:af:0a:5d:5a:7e:fc:d5:e9:74:d5:98:ae:4c:15:e9:c9:
         31:55:0d:b7:93:b6:1c:2a:59:5d:74:b5:42:84:95:a1:bd:b3:
         2e:d8:ed:d4:95:42:80:8d:a9:8e:fd:4e:76:2d:70:d7:02:54:
         60:b4:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----