Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef50a919c38d29bb33866e24d668a0b386609323.cer
File:                     ef50a919c38d29bb33866e24d668a0b386609323.cer (raw, json)
Hash identifier:          xIfY5NNWPy5XZkuheiD5JhWogZJ16M5Q4WxlUogB/zc=
Subject key identifier:   A2:7E:F9:12:D9:A3:A0:AE:2C:D2:E1:59:04:73:E0:80:98:E6:0D:DF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       9C8BF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/ef50a919c38d29bb33866e24d668a0b386609323.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:50 +0000
Certificate not after:    Mon 16 Jan 2023 21:09:45 +0000
Subordinate resources:    AS: 263703
                          IP: 143.255.84.0/22
                          IP: 190.97.224.0/19
                          IP: 2803:7800::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10259447 (0x9c8bf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:50 2017 GMT
            Not After : Jan 16 21:09:45 2023 GMT
        Subject: CN=ef50a919c38d29bb33866e24d668a0b386609323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:65:82:97:b6:25:53:73:55:48:34:eb:44:
                    d3:9c:63:bd:84:e1:44:46:ea:af:06:bb:cd:2e:81:
                    57:6f:56:60:71:f3:83:9c:9b:93:16:b8:3f:15:8d:
                    eb:ce:5c:df:95:45:98:1e:5f:6f:0d:89:16:2f:6c:
                    85:59:42:e7:24:f0:48:16:3a:f1:21:8b:6b:d8:39:
                    24:a7:de:c3:65:c1:9b:45:b9:09:b0:d1:a5:ab:27:
                    95:03:a0:10:ec:bb:8c:19:55:fe:5a:51:f9:df:29:
                    bc:ab:92:02:6d:33:fe:12:93:ca:fb:75:f8:da:91:
                    06:45:47:7a:f6:e5:ed:ee:43:3c:03:de:be:ca:70:
                    29:13:b1:62:04:2b:6a:2e:eb:46:c8:47:01:f3:1b:
                    b1:a3:63:5f:3b:2c:c0:6d:06:ff:20:a6:ca:f9:7c:
                    1c:50:2a:13:49:5c:6e:41:36:85:fb:38:64:af:50:
                    64:2e:a5:cf:01:71:8a:75:57:38:70:be:1b:a9:a4:
                    76:4d:f3:70:9f:3b:b9:c6:e9:04:d3:e4:7c:46:92:
                    16:b6:9a:4e:b5:1b:76:6c:7d:e8:54:ae:da:10:1e:
                    6d:b9:87:70:35:70:c8:1f:d1:c0:20:1b:f5:00:d1:
                    87:3b:73:8c:68:fc:d6:aa:e6:ca:4d:33:f6:6d:1c:
                    d2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7E:F9:12:D9:A3:A0:AE:2C:D2:E1:59:04:73:E0:80:98:E6:0D:DF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/ef50a919c38d29bb33866e24d668a0b386609323.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.84.0/22
                  190.97.224.0/19
                IPv6:
                  2803:7800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263703

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:75:1f:b6:cb:9d:56:1f:a8:dc:29:ba:70:2c:47:d2:2a:
         57:3d:42:78:96:81:eb:a6:e8:f8:5d:5d:8a:8b:32:4e:0e:2d:
         65:15:f7:59:91:8e:76:6c:9b:4c:6a:ef:3d:97:74:fd:13:5b:
         1d:57:14:08:76:ce:1b:81:10:d4:bd:94:51:42:cf:4a:d4:4b:
         39:2b:19:8c:1e:35:2c:aa:89:43:f5:e6:cc:24:0b:7b:40:7b:
         5a:2a:22:31:04:a6:42:5f:85:15:e6:fb:e1:f5:86:39:c9:9b:
         41:fe:67:d6:9d:6d:5c:35:89:82:66:58:1d:39:49:58:26:65:
         46:25:ac:c5:ae:ef:40:b3:89:36:0e:30:57:08:68:4f:bb:df:
         7a:f6:94:03:b1:d7:46:b4:bc:5d:19:b8:41:7b:f2:0f:1c:19:
         21:10:3c:24:d5:04:a4:76:57:fb:9c:1d:99:e2:0c:da:41:ed:
         d4:23:a8:d2:b4:1e:ae:88:68:3f:1c:e9:a2:7d:43:0c:72:96:
         a7:f9:ef:be:7e:f5:42:84:71:f5:fd:22:98:54:15:ee:e1:4c:
         9a:8c:73:6a:33:da:03:9f:97:c9:17:e4:3a:62:44:b3:04:31:
         d8:19:70:44:2b:66:49:fd:41:9f:72:b5:22:e3:11:29:6b:97:
         67:e1:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----