Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c9b57ab9bf19c2b14182899e6b240002a14ff3.cer
File:                     d3c9b57ab9bf19c2b14182899e6b240002a14ff3.cer (raw, json)
Hash identifier:          FxqpPHKmIWNphr6s7HFSFR+fvxwsU5QU4/4l2knTL4o=
Subject key identifier:   6B:2E:0B:22:F5:A7:41:F1:49:B3:A2:97:FC:D6:F7:EA:5C:D5:44:E8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7E5FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/d3c9b57ab9bf19c2b14182899e6b240002a14ff3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Apr 2022 14:35:04 +0000
Certificate not after:    Tue 16 Apr 2024 22:39:39 +0000
Subordinate resources:    AS: 271922
                          IP: 179.63.52.0/22
                          IP: 2803:df10::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14149114 (0xd7e5fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 14:35:04 2022 GMT
            Not After : Apr 16 22:39:39 2024 GMT
        Subject: CN=d3c9b57ab9bf19c2b14182899e6b240002a14ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:7a:5d:e3:79:f7:82:ec:b2:6b:cf:8b:a4:
                    30:0f:17:d6:b6:40:9e:03:1d:c0:5d:e8:4c:fc:5c:
                    bb:55:26:99:16:25:27:88:73:65:26:ee:2f:86:c6:
                    0a:bc:ec:44:e1:cf:4f:c3:c7:3b:55:a6:71:21:e5:
                    cd:98:ca:06:bf:fe:20:0c:cc:be:29:15:52:e9:f4:
                    63:ec:be:f4:d6:37:21:a8:b3:b6:ae:69:cd:f7:dd:
                    f6:94:89:5e:6f:c3:43:cb:23:5e:53:d7:a2:1d:59:
                    e7:68:63:93:73:a6:87:5b:c4:b0:3a:e4:d3:9e:66:
                    ac:b7:d3:0d:48:fe:b0:89:45:9f:2d:c6:fd:c1:da:
                    8c:01:d6:b9:cf:77:69:0b:19:f8:0f:44:89:04:f5:
                    ba:5b:82:d4:98:03:13:f6:78:f9:b4:12:73:8e:25:
                    7f:a8:93:13:a7:71:77:91:d0:4b:04:de:78:27:36:
                    b0:59:21:f2:b9:89:2d:58:13:5f:5b:9b:ba:ad:06:
                    0b:fd:a3:be:d3:4a:ce:3b:59:d5:e4:fd:77:bc:8a:
                    34:00:59:79:03:25:ab:bb:11:32:d4:d7:0c:0b:ce:
                    4a:2b:f3:4b:f1:70:5e:44:65:09:d9:78:77:e9:f7:
                    16:d0:08:f4:61:e5:d1:7a:de:da:f2:36:2d:c3:61:
                    74:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2E:0B:22:F5:A7:41:F1:49:B3:A2:97:FC:D6:F7:EA:5C:D5:44:E8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/d3c9b57ab9bf19c2b14182899e6b240002a14ff3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.52.0/22
                IPv6:
                  2803:df10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271922

    Signature Algorithm: sha256WithRSAEncryption
         8f:c9:1f:4d:c6:95:d1:f9:cb:44:ed:07:7a:7d:6d:45:13:87:
         8a:7f:f3:73:4c:1a:8f:15:57:68:56:fd:d5:bc:60:6d:7f:d3:
         d3:a8:97:51:76:4a:b5:34:40:5f:f1:79:94:3e:8f:a1:02:3a:
         12:18:33:49:23:bf:d5:8c:74:62:3b:d6:c5:24:9e:74:8b:34:
         28:9d:03:a1:a9:44:7f:4e:21:59:1c:1b:f7:78:a4:08:5b:15:
         8b:e2:f4:47:9f:bb:ff:a0:12:a2:c2:9a:1a:c8:73:c2:5d:2a:
         a7:f6:17:e3:b3:fd:b1:59:9d:58:50:ad:e5:dd:49:6c:f2:7a:
         13:cf:b2:ee:c7:66:5a:0c:76:98:77:86:5f:86:0c:b7:5b:e9:
         bf:02:7b:5a:b1:49:20:ca:bc:e0:a0:f7:88:ec:6d:2e:8c:04:
         52:cf:6f:1a:8b:f3:68:b6:e8:1c:6c:4a:24:b4:d6:a6:ad:5f:
         e0:bf:9d:a4:f9:6f:23:26:44:e4:e7:53:d0:9d:9c:c2:17:34:
         34:9e:76:82:bd:8a:25:07:f4:06:dd:5b:57:10:12:17:40:90:
         86:8f:4e:bd:a5:d6:4a:b8:4c:35:23:21:81:f4:bc:ac:be:83:
         52:68:55:b7:3d:5b:66:9c:f6:3a:73:33:cd:7d:9b:2b:23:63:
         71:c5:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----