Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d03f83f1157f93a48b147d5db669851e1c99620a.cer
File:                     d03f83f1157f93a48b147d5db669851e1c99620a.cer (raw, json)
Hash identifier:          87miD7j48v98+WnfNxIiZ5pJaxfRM1zNsZY/RuddpHc=
Subject key identifier:   6F:E4:F1:EB:CB:29:DF:D7:55:3D:D3:F1:5E:46:E3:ED:47:D7:5A:56
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3AC62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8e581786-525b-484e-a9d5-8ae7231edbb0/d03f83f1157f93a48b147d5db669851e1c99620a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8e581786-525b-484e-a9d5-8ae7231edbb0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 20:21:26 +0000
Certificate not after:    Wed 28 Feb 2024 06:00:00 +0000
Subordinate resources:    AS: 10986
                          AS: 52239
                          IP: 200.69.0.0/21
                          IP: 200.69.16.0/22
                          IP: 200.69.28.0/22
                          IP: 2803:ec80::/32

Validation:               Failed, certificate revoked on Sun 28 Jan 2024 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14920802 (0xe3ac62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 20:21:26 2023 GMT
            Not After : Feb 28 06:00:00 2024 GMT
        Subject: CN=d03f83f1157f93a48b147d5db669851e1c99620a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:f7:17:c6:e1:fc:e3:33:8a:c7:2e:7a:1a:
                    8e:ff:1d:c7:07:fe:37:26:9c:45:48:f2:cf:ec:a6:
                    26:d0:5c:e3:7e:5d:a1:3a:0c:b3:12:89:4a:17:ce:
                    6e:7c:b1:1a:46:c9:09:b3:26:42:ae:7b:c3:b4:5a:
                    18:e9:14:74:90:59:85:bf:6f:68:6a:5f:62:e4:64:
                    73:75:e3:34:d6:c1:ea:41:ec:ac:3a:8c:87:be:8b:
                    ad:6f:b9:f9:ff:bc:8c:fa:a1:22:31:2e:25:5b:7e:
                    cf:34:14:a2:ec:14:a4:12:f1:1d:39:a4:2b:e0:35:
                    58:fc:ac:c5:ba:66:c4:68:5f:ff:fc:f9:f1:e2:f8:
                    78:95:45:28:b9:08:bb:77:96:68:85:c7:aa:e2:1a:
                    b4:57:91:ca:fb:02:e2:54:50:0c:b3:be:5e:3e:39:
                    f7:eb:4e:17:bb:da:52:72:df:61:c1:76:05:6f:51:
                    44:30:f7:fe:1e:b0:3a:6f:00:3b:f8:aa:0b:a6:a6:
                    98:c4:e4:4b:fd:ba:1c:ad:e6:80:f7:32:4b:e6:26:
                    06:35:06:a3:22:2c:b9:10:04:4e:c3:e2:40:7a:42:
                    8c:e8:83:0d:cc:38:9c:06:fd:70:4a:59:7d:a5:83:
                    cb:f3:43:e8:e3:b7:e8:cc:32:aa:95:d5:24:fb:1f:
                    38:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E4:F1:EB:CB:29:DF:D7:55:3D:D3:F1:5E:46:E3:ED:47:D7:5A:56
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8e581786-525b-484e-a9d5-8ae7231edbb0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8e581786-525b-484e-a9d5-8ae7231edbb0/d03f83f1157f93a48b147d5db669851e1c99620a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.0.0/21
                  200.69.16.0/22
                  200.69.28.0/22
                IPv6:
                  2803:ec80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10986
                  52239

    Signature Algorithm: sha256WithRSAEncryption
         05:15:8f:b7:95:03:31:2d:8b:4b:4c:02:bc:b0:a1:0e:01:9b:
         ed:ca:4d:8c:63:88:c4:4d:1e:4b:e6:d4:9d:ae:1e:84:a7:ac:
         91:8c:db:19:05:70:cd:dd:05:d3:a2:d5:46:45:f1:12:33:cb:
         e0:94:b1:2a:11:64:91:c3:ae:7a:03:f9:74:cc:7a:f7:e9:e2:
         2e:23:4a:b6:d4:b7:ec:18:33:a1:33:e7:c1:1e:b5:db:88:4c:
         21:d3:78:05:1d:e8:d5:51:5f:8c:f0:c5:e3:2e:8a:c8:af:cc:
         40:04:4d:14:9f:96:46:4c:f3:83:a6:a3:38:9a:6b:31:eb:53:
         d7:00:80:4e:cf:20:f9:78:5b:94:3c:fc:ba:fc:27:7d:65:43:
         73:0b:64:71:79:cf:7f:33:6d:ff:ba:ce:3e:8d:e2:b0:16:17:
         cc:e6:8a:17:e5:61:29:a0:6e:54:e9:9c:41:11:43:d5:9f:9a:
         a9:d5:be:57:9d:2b:6e:ff:31:09:48:7c:09:1b:15:84:f3:3b:
         93:0e:97:3a:b4:bd:00:02:d2:6e:8e:55:da:63:79:e8:f7:5a:
         43:85:c1:ae:e7:b9:43:c1:1a:d4:06:c8:f1:e7:4e:c6:93:44:
         b1:3d:9f:1e:93:4e:8b:f8:ac:98:b0:5b:63:d1:e5:c0:78:4b:
         b8:b4:14:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 28 06:58:59 2024 by rpki-client on console-ams.rpki-client.org