Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dad5cd6631cc52c48677c74d77ed7ba2ae12ab9a.cer
File:                     dad5cd6631cc52c48677c74d77ed7ba2ae12ab9a.cer (raw, json)
Hash identifier:          j+0HfAhGq8n9Q7TF9OPo6UbQUaj7ZeENJw0kGXT9ErI=
Subject key identifier:   BA:85:F9:EB:82:9C:0C:25:10:9B:30:AD:22:23:D2:DE:AF:26:A5:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4D3CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/515eb134-7801-4069-805d-32dacdf97c95/dad5cd6631cc52c48677c74d77ed7ba2ae12ab9a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/515eb134-7801-4069-805d-32dacdf97c95/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 12:56:02 +0000
Certificate not after:    Fri 15 Nov 2024 16:03:32 +0000
Subordinate resources:    IP: 2801:16c::/44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14996427 (0xe4d3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 12:56:02 2023 GMT
            Not After : Nov 15 16:03:32 2024 GMT
        Subject: CN=dad5cd6631cc52c48677c74d77ed7ba2ae12ab9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:e2:d9:2a:b8:2c:7a:4b:c0:8f:76:06:d0:
                    69:3b:a2:f2:c1:ab:9c:6a:bd:3a:93:30:e5:60:87:
                    fd:64:ef:15:56:99:01:1f:b0:9c:fd:54:86:08:84:
                    69:10:b8:ad:4c:d7:7b:19:89:67:fc:b1:1d:4e:22:
                    fb:4d:32:d5:63:4d:52:9b:52:a4:f6:91:10:f3:cb:
                    f7:5d:4b:20:04:bd:15:2c:92:92:b1:fa:57:45:42:
                    fa:9e:c6:aa:68:f8:76:c0:ca:11:97:cc:c9:2a:d6:
                    7f:d1:02:fa:dc:24:fd:35:65:71:96:cf:b5:4c:31:
                    f5:6d:f0:78:19:05:ad:5e:3b:02:b5:59:0b:e8:01:
                    3f:69:9b:c6:5b:b1:75:ec:6b:76:fa:77:c9:52:68:
                    58:49:33:70:f8:7d:92:f5:36:ec:f3:26:f9:08:29:
                    c7:09:46:dd:9f:78:17:ba:ea:bb:0e:72:1b:01:61:
                    8a:2b:db:91:d7:e1:eb:f2:51:d5:2f:6f:e4:fc:61:
                    83:7e:d3:62:a3:f2:eb:5c:9c:b7:24:6a:db:5e:63:
                    a5:f9:ff:79:aa:32:f4:ca:6e:7e:9f:95:67:a1:77:
                    b4:69:e8:0c:1c:05:98:88:22:73:78:7f:26:43:39:
                    91:63:10:de:44:09:b2:b5:49:36:9d:ad:2a:23:a0:
                    f7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:85:F9:EB:82:9C:0C:25:10:9B:30:AD:22:23:D2:DE:AF:26:A5:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/515eb134-7801-4069-805d-32dacdf97c95/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/515eb134-7801-4069-805d-32dacdf97c95/dad5cd6631cc52c48677c74d77ed7ba2ae12ab9a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16c::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:8b:2c:9c:92:bd:24:99:2d:b0:48:b3:fd:3e:6e:11:39:97:
         ef:1c:77:26:29:e5:4c:fa:39:11:b1:39:33:f9:60:c4:e3:62:
         21:63:9a:4c:69:d4:8e:26:ed:ec:1e:83:20:34:38:c7:90:15:
         5c:17:17:76:b2:09:81:91:98:bc:92:4e:9d:2c:fd:2c:44:82:
         fb:d6:88:bd:3e:3a:0d:43:67:df:0d:ba:6a:84:4e:29:d7:e2:
         b4:6f:39:92:0b:47:ff:fa:20:03:1f:db:ac:ca:9d:fa:e5:4d:
         3b:20:cf:36:b4:7c:ca:87:c4:07:ab:4f:3e:55:05:1f:cd:db:
         eb:ca:22:7e:cd:74:4f:7c:99:40:30:69:1a:e8:bf:cc:bd:32:
         f8:e0:3b:53:24:15:a1:ef:31:bc:8b:a4:3b:ad:b8:b1:8f:7a:
         7c:a4:18:f4:1a:13:a9:ce:62:f6:98:78:d2:67:05:1d:04:4b:
         7a:28:42:82:d0:5e:a1:93:78:cc:d7:9f:c2:ae:92:f6:82:c0:
         b2:6d:cd:6d:81:4a:43:36:46:52:f7:e5:59:aa:96:04:63:60:
         88:ba:4c:f1:a0:46:df:7f:93:49:b3:4f:f9:a0:75:f9:a6:f8:
         54:af:b0:dd:34:1c:f1:b7:d7:e2:72:c2:77:a6:41:b5:40:38:
         12:f3:84:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----