Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbeef8d886d331f42fe8744deea812c350664bfc.cer
File:                     dbeef8d886d331f42fe8744deea812c350664bfc.cer (raw, json)
Hash identifier:          EOXy0Sy2e8CfobLnLbtNAx2G1IvUGlbiA+vZUrTHNPg=
Subject key identifier:   B8:96:FE:FB:3E:75:88:D9:DA:58:E0:DD:C5:6A:E3:39:00:D3:E9:9B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       93ECFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/dbeef8d886d331f42fe8744deea812c350664bfc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 23 Feb 2021 06:24:33 +0000
Certificate not after:    Sat 29 Oct 2022 21:04:01 +0000
Subordinate resources:    AS: 271843
                          IP: 45.162.132.0/22
                          IP: 2803:f810::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9694460 (0x93ecfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 23 06:24:33 2021 GMT
            Not After : Oct 29 21:04:01 2022 GMT
        Subject: CN=dbeef8d886d331f42fe8744deea812c350664bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e2:8c:7f:3b:9f:17:b8:78:79:b9:8e:fc:3c:
                    02:4c:9b:ff:f7:02:48:dc:e7:46:9e:16:b1:af:72:
                    cc:ef:a5:b7:bf:7b:98:b2:97:b3:d2:2e:eb:ba:8d:
                    88:70:06:61:93:cd:85:a2:b9:d7:43:57:f0:79:fd:
                    95:85:51:4b:da:3a:b2:f9:83:3e:e7:a7:14:80:29:
                    43:75:fa:ca:bc:dd:b0:f3:0a:cb:a8:a7:81:0b:92:
                    3d:26:13:a4:7d:e3:e1:88:3f:1b:35:54:34:82:2d:
                    3c:dc:78:eb:47:19:c3:26:84:c3:96:df:c3:66:a5:
                    6f:de:c2:1c:2c:72:74:7f:63:9d:72:2f:dd:8c:da:
                    a4:19:76:bd:6e:d9:b1:33:4e:be:92:99:27:55:a6:
                    21:ea:2b:09:23:93:aa:82:52:26:a4:f4:43:b5:32:
                    bf:30:20:56:bc:c5:3a:28:93:62:0a:3c:b3:58:70:
                    72:fd:1a:5d:a7:91:fb:56:a1:a2:55:c1:76:30:1a:
                    8f:ac:2b:79:4d:a9:5b:ff:35:4e:21:b0:77:2f:22:
                    7d:a8:a6:2f:40:3e:2e:cb:3b:48:e5:91:c2:2f:e4:
                    80:7e:60:03:1f:cb:ba:68:92:16:ee:96:75:85:0e:
                    44:f2:15:2d:69:6d:13:5e:b1:a1:4c:85:a5:79:9a:
                    f5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:96:FE:FB:3E:75:88:D9:DA:58:E0:DD:C5:6A:E3:39:00:D3:E9:9B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/dbeef8d886d331f42fe8744deea812c350664bfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.132.0/22
                IPv6:
                  2803:f810::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271843

    Signature Algorithm: sha256WithRSAEncryption
         9e:36:37:0a:60:2b:3a:30:2c:1b:c6:0b:14:c4:1a:ea:4c:a6:
         5b:0a:99:87:46:26:41:ad:4f:8f:aa:31:b5:55:1d:c7:3e:cd:
         6c:f3:20:6d:09:2c:be:ef:01:c2:b2:bd:5e:af:c4:80:be:06:
         d5:52:b3:fe:22:ee:2d:9a:2c:c6:f8:01:da:b2:f9:a9:c2:54:
         76:62:77:65:d1:69:21:ce:da:4a:ef:7f:99:14:07:3f:e3:3f:
         18:6f:76:2a:74:b8:41:7b:7d:80:fb:a3:43:1f:c4:32:4f:e7:
         61:d6:9e:98:77:1e:87:11:c2:68:e5:cc:bc:57:ac:aa:4a:76:
         50:63:0d:50:2d:fc:02:40:75:50:6e:88:b7:94:ca:29:51:08:
         13:84:26:61:93:e7:c9:22:91:3e:cc:96:6d:fd:81:14:0d:2b:
         c8:4a:dd:bc:ad:01:1a:c5:66:9f:5a:f9:c7:ba:86:ab:f5:75:
         e7:ea:53:30:7c:9a:3e:64:a9:65:02:9c:5c:4a:c6:d6:16:53:
         a6:eb:35:ab:7d:d3:09:be:fc:2c:9b:7c:34:57:8d:f6:56:31:
         89:e1:f2:ab:60:f7:e9:d8:49:89:32:a0:00:57:98:36:44:8e:
         02:da:1c:ed:cd:e7:4d:ce:5f:13:e4:73:c3:67:3f:1f:62:36:
         a5:09:e0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----