Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e655cb43dd8f20b8038a37f8f6e9274404c8cbc9.cer
File:                     e655cb43dd8f20b8038a37f8f6e9274404c8cbc9.cer (raw, json)
Hash identifier:          WddvlkOMFIMzoqyRpgyNxd/5qlbemflHB9+W6rdtUhA=
Subject key identifier:   02:8C:51:BA:8C:4D:AD:6D:2F:6F:93:65:BC:52:A4:85:72:11:01:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       9AEF31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/e655cb43dd8f20b8038a37f8f6e9274404c8cbc9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Mar 2020 15:24:52 +0000
Certificate not after:    Fri 06 Jan 2023 15:30:03 +0000
Subordinate resources:    AS: 269975
                          IP: 190.89.28.0/22
                          IP: 2803:16e0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10153777 (0x9aef31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 25 15:24:52 2020 GMT
            Not After : Jan  6 15:30:03 2023 GMT
        Subject: CN=e655cb43dd8f20b8038a37f8f6e9274404c8cbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6c:a8:04:0d:04:73:ac:7c:49:b5:13:ec:04:
                    7e:99:8a:99:ae:09:e9:4d:da:28:69:e5:75:be:88:
                    45:3f:4e:3b:7e:b3:10:e4:00:60:8e:2c:04:87:b7:
                    d1:a7:29:67:18:66:68:08:f9:8c:dd:02:24:94:d2:
                    97:a3:5b:70:7d:b6:cb:ea:be:5c:fa:79:a7:67:76:
                    dc:3a:d0:d4:1f:28:b6:13:26:05:a0:d1:9f:d5:99:
                    2e:34:34:1f:a5:9c:dc:4a:7d:13:6d:0c:e8:56:01:
                    bf:7b:50:5e:1c:c0:dc:18:f8:c4:3a:1c:f2:77:d8:
                    22:69:2a:b8:a6:9c:ff:9d:98:ca:0d:bd:43:71:21:
                    59:62:c7:97:df:e5:58:a8:a7:8e:98:73:a0:e1:24:
                    8a:d9:96:25:94:df:3e:06:70:10:08:b6:d6:9e:42:
                    e6:ba:c1:a1:a2:6f:aa:ce:64:18:0e:4d:36:6f:5d:
                    89:f4:6a:e8:a2:19:6a:17:8b:97:14:c4:74:0c:9a:
                    43:bc:04:13:ce:08:fe:0e:a8:4b:6d:75:4e:40:58:
                    2b:6a:27:56:b4:5b:a5:69:0a:a6:ce:cc:30:fb:19:
                    47:de:4f:4c:a1:00:be:93:1e:fa:24:0a:19:04:76:
                    5a:63:cd:35:70:d5:aa:15:44:57:3b:e2:56:f0:54:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8C:51:BA:8C:4D:AD:6D:2F:6F:93:65:BC:52:A4:85:72:11:01:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/e655cb43dd8f20b8038a37f8f6e9274404c8cbc9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.28.0/22
                IPv6:
                  2803:16e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269975

    Signature Algorithm: sha256WithRSAEncryption
         b0:94:13:a7:96:be:4c:ea:d7:c3:46:69:9d:73:f9:96:79:8e:
         f5:df:e1:63:aa:49:f7:0b:2e:6f:05:ca:5c:10:c9:ed:3d:98:
         1b:07:62:3b:32:9d:37:9f:56:48:c5:b1:4b:51:17:02:83:88:
         a1:28:90:f1:6d:81:7c:b4:ad:3a:8a:43:56:d4:b3:c3:6e:88:
         05:c9:c1:dc:b6:e0:92:2d:e6:2b:85:78:4b:f6:1f:0a:f2:f1:
         c3:cf:7b:ed:fa:d9:e7:2c:c0:2c:8b:a7:3d:47:c1:0b:75:9b:
         7f:ac:72:c6:7a:05:96:ee:5d:b0:c1:5d:a3:77:8b:ec:cb:f7:
         97:a6:c5:0d:69:ca:cc:fa:76:d1:98:79:82:7d:79:17:8a:7c:
         f5:3e:da:58:74:7b:27:77:35:93:f7:4d:02:eb:cd:dc:32:e0:
         8e:89:e3:f0:28:ae:c0:7d:7f:a7:23:9e:d1:38:1c:28:de:10:
         07:d5:b1:41:18:b9:d9:7c:f3:56:53:9c:a9:64:1f:0d:f4:89:
         b4:9e:f1:5a:51:1d:a7:ee:36:07:79:45:8d:06:22:f8:84:74:
         8c:ca:56:7c:66:60:bd:68:e4:b8:e4:54:ad:c4:06:a6:e1:fe:
         47:f7:64:72:a2:30:c9:12:8b:28:ed:12:33:7d:3a:50:3c:d1:
         7c:1c:52:1a
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAJrvMTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDMyNTE1MjQ1MloXDTIzMDEwNjE1MzAw
M1owMzExMC8GA1UEAxMoZTY1NWNiNDNkZDhmMjBiODAzOGEzN2Y4ZjZlOTI3NDQw
NGM4Y2JjOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO9sqAQNBHOs
fEm1E+wEfpmKma4J6U3aKGnldb6IRT9OO36zEOQAYI4sBIe30acpZxhmaAj5jN0C
JJTSl6NbcH22y+q+XPp5p2d23DrQ1B8othMmBaDRn9WZLjQ0H6Wc3Ep9E20M6FYB
v3tQXhzA3Bj4xDoc8nfYImkquKac/52Yyg29Q3EhWWLHl9/lWKinjphzoOEkitmW
JZTfPgZwEAi21p5C5rrBoaJvqs5kGA5NNm9difRq6KIZaheLlxTEdAyaQ7wEE84I
/g6oS211TkBYK2onVrRbpWkKps7MMPsZR95PTKEAvpMe+iQKGQR2WmPNNXDVqhVE
VzviVvBUiC0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQCjFG6jE2tbS9vk2W8UqSF
chEBIzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hYTQ5NTkxMi03ZTAw
LTQ5ZjgtOGUzZS03ZTNmOTkyMzU0NzkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYWE0OTU5MTItN2UwMC00
OWY4LThlM2UtN2UzZjk5MjM1NDc5L2U2NTVjYjQzZGQ4ZjIwYjgwMzhhMzdmOGY2
ZTkyNzQ0MDRjOGNiYzkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr5ZHDANBAIAAjAHAwUAKAMW4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHpcwDQYJKoZIhvcNAQELBQADggEBALCU
E6eWvkzq18NGaZ1z+ZZ5jvXf4WOqSfcLLm8FylwQye09mBsHYjsynTefVkjFsUtR
FwKDiKEokPFtgXy0rTqKQ1bUs8NuiAXJwdy24JIt5iuFeEv2Hwry8cPPe+362ecs
wCyLpz1HwQt1m3+scsZ6BZbuXbDBXaN3i+zL95emxQ1pysz6dtGYeYJ9eReKfPU+
2lh0eyd3NZP3TQLrzdwy4I6J4/AorsB9f6cjntE4HCjeEAfVsUEYudl881ZTnKlk
Hw30ibSe8VpRHafuNgd5RY0GIviEdIzKVnxmYL1o5LjkVK3EBqbh/kf3ZHKiMMkS
iyjtEjN9OlA80XwcUho=
-----END CERTIFICATE-----