Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer
File:                     d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer (raw, json)
Hash identifier:          LlBzi5eAWZhwrQ/Xtptr1P5vpXdDLqPIfsQSIUPlAgg=
Subject key identifier:   D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CA61D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 06 Jan 2018 04:52:03 +0000
Certificate not after:    Tue 18 Jul 2023 23:38:06 +0000
Subordinate resources:    AS: 265824
                          IP: 45.70.116.0/22
                          IP: 2803:d420::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13263321 (0xca61d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  6 04:52:03 2018 GMT
            Not After : Jul 18 23:38:06 2023 GMT
        Subject: CN=d2899ec2c192252a77a0bc2f7542a7ec0d2a389e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:a9:3a:35:4c:79:3f:e4:ac:f4:7c:c3:65:
                    97:8a:8d:37:49:6b:bd:9c:3a:7d:c3:41:80:71:4f:
                    88:f9:70:36:3d:e8:7e:2c:94:23:05:ec:d6:f0:c4:
                    da:ce:4e:5e:77:88:dc:d8:8a:7d:2a:ab:6a:84:51:
                    6a:db:3b:96:b4:da:17:80:30:dc:51:0c:07:98:b4:
                    6c:ae:cf:73:57:31:3e:75:8e:15:68:39:eb:4f:49:
                    a2:a3:35:0f:3f:7a:11:77:60:f3:75:cb:2a:45:c6:
                    2e:f9:7e:97:fd:f0:34:d6:de:26:28:9d:66:f6:73:
                    02:19:ee:7d:7b:a2:7b:b2:da:93:6e:11:f5:c4:f1:
                    c4:ad:69:cf:a2:ec:99:c4:da:db:14:15:db:1c:93:
                    8f:39:f8:fd:44:0e:7c:f2:6f:0d:d5:33:fa:92:9e:
                    85:9e:0f:d1:14:fb:16:b4:57:f7:fc:49:f6:bc:af:
                    82:90:5a:55:d4:ec:90:cd:0a:ce:ed:c8:6d:b6:c0:
                    5e:db:a9:1e:fe:f9:aa:c4:a3:3c:24:19:85:aa:42:
                    1a:72:c6:b4:09:ba:05:d3:c1:73:4d:84:56:0a:9e:
                    f3:49:5b:93:f2:24:53:5f:a2:e1:91:d5:95:0b:4d:
                    ac:4e:b0:9f:b3:bb:67:11:c7:b8:f7:6b:18:61:44:
                    d9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.116.0/22
                IPv6:
                  2803:d420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265824

    Signature Algorithm: sha256WithRSAEncryption
         80:32:06:66:19:7d:ce:07:70:83:ee:79:0d:e0:a2:d3:2a:1f:
         4e:18:ba:e4:e4:50:cb:dd:64:9e:56:7e:f3:2a:14:6d:64:69:
         d0:ec:a9:41:dc:6d:53:33:05:a0:18:d4:0a:40:71:7b:5f:b7:
         3e:02:8b:57:4c:e2:71:6a:9b:d7:c0:e3:be:b9:73:c5:a6:86:
         8d:ea:31:48:13:26:c4:2c:61:9b:98:77:a4:21:e9:ea:9c:93:
         70:bd:e8:21:bd:d1:80:af:f9:a3:8e:7f:bb:91:11:46:d6:d9:
         80:fb:aa:63:2b:72:5d:71:3b:76:6a:b4:fd:82:10:84:a8:53:
         66:5d:56:34:94:00:2b:f1:29:d0:63:98:3e:a4:3e:7a:30:95:
         36:35:b3:04:18:58:7b:29:b3:77:32:ab:6e:22:72:22:5f:c3:
         aa:60:fb:c9:02:60:06:6e:9b:ae:1e:d7:c1:5e:3c:52:32:00:
         1c:dd:c5:72:0c:c0:9f:d5:fc:b3:a0:29:84:27:df:ed:a7:9e:
         bc:f8:5c:87:e3:ef:0a:b7:75:a3:2d:b5:51:54:30:e6:f8:36:
         e7:b7:60:e4:29:76:e9:e7:10:a8:ce:f9:85:1a:d9:0f:8b:75:
         dd:d5:19:f0:95:64:a5:f8:18:9c:ad:aa:ae:6d:65:46:aa:ad:
         fd:f7:06:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----