Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f60c96e228a75d53e32c9d1316102ef48949b6f0.cer
File:                     f60c96e228a75d53e32c9d1316102ef48949b6f0.cer (raw, json)
Hash identifier:          USKq9cN1i18WIroKTUtfCrgbVhQu2U1NZc5boAZFl4I=
Subject key identifier:   B4:D4:C5:91:67:E9:EB:F7:2F:B3:C3:B5:2A:D1:27:7C:20:71:3C:7F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE5B99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6ecd41e8-97d7-41ce-a6a8-739c3db73a0d/f60c96e228a75d53e32c9d1316102ef48949b6f0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6ecd41e8-97d7-41ce-a6a8-739c3db73a0d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 May 2021 16:19:47 +0000
Certificate not after:    Mon 11 Mar 2024 22:53:41 +0000
Subordinate resources:    AS: 271913
                          IP: 2803:3210::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14572441 (0xde5b99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 12 16:19:47 2021 GMT
            Not After : Mar 11 22:53:41 2024 GMT
        Subject: CN=f60c96e228a75d53e32c9d1316102ef48949b6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:a6:a8:b8:ae:8d:04:2a:12:64:1e:b6:41:
                    bc:ab:2a:5f:95:3e:92:a4:54:8c:36:85:27:d7:6e:
                    9b:58:d3:4e:d1:3f:49:33:3b:ad:45:08:a1:38:00:
                    3d:f0:02:8c:bd:00:80:f4:76:ab:e3:b6:7d:3c:d6:
                    10:2b:90:4b:1d:e7:82:da:25:70:4e:2e:ce:fe:05:
                    2c:fe:2b:13:8c:0a:b0:e0:89:dd:17:f3:a3:08:db:
                    92:b0:66:4c:06:31:52:8a:22:21:19:2d:d7:79:f0:
                    6b:be:05:0d:53:67:ba:d8:7b:35:f4:42:ce:77:37:
                    f5:92:1c:01:b1:99:4a:f9:cb:db:39:8c:08:18:97:
                    b8:b1:9d:fd:09:d0:cf:05:ea:d8:c2:cf:45:17:70:
                    6d:1d:44:d5:81:d9:f4:35:c0:ec:64:44:e3:d2:ee:
                    fe:1a:72:c8:83:bd:22:95:ed:20:fc:6c:14:74:ff:
                    50:47:b0:28:93:a9:a9:fc:07:06:9c:c2:ef:93:0a:
                    00:53:f0:c7:00:46:77:cf:ca:ef:d0:ba:80:b5:98:
                    1b:db:bb:e6:5c:04:ad:06:46:3c:16:89:18:52:cf:
                    0f:75:c3:6a:45:f2:bd:f3:98:8d:25:fc:02:70:5f:
                    84:3b:2b:87:01:4c:d4:be:8d:2c:ea:27:e9:5b:5a:
                    f2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D4:C5:91:67:E9:EB:F7:2F:B3:C3:B5:2A:D1:27:7C:20:71:3C:7F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6ecd41e8-97d7-41ce-a6a8-739c3db73a0d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6ecd41e8-97d7-41ce-a6a8-739c3db73a0d/f60c96e228a75d53e32c9d1316102ef48949b6f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271913

    Signature Algorithm: sha256WithRSAEncryption
         ba:5d:c8:e5:eb:39:a6:b2:bf:dc:af:d6:83:37:e1:cb:ef:74:
         b9:ca:d7:74:d8:35:94:3c:4d:dc:24:36:e5:dc:17:ae:b6:81:
         30:af:a1:55:31:42:71:67:f2:c8:e0:74:9d:68:63:7e:a3:20:
         b5:5f:26:5c:35:d3:6f:ff:b4:83:e4:2e:c9:b9:67:ef:22:f7:
         07:e3:bf:a2:32:de:18:60:ff:23:de:d0:2d:b8:d1:6b:7c:f1:
         2b:0a:cb:30:98:95:1f:36:f0:22:72:a8:ba:d0:74:50:db:05:
         8d:b5:c7:c1:b8:66:5e:14:d2:2c:8c:b8:ed:dc:5e:60:ed:47:
         ce:d8:97:95:83:1c:5e:28:9b:b3:b4:78:01:dc:82:93:65:54:
         00:2b:ae:ce:35:8d:31:c6:fa:12:d8:dd:bc:1a:5d:63:21:15:
         4b:4a:e2:d4:ce:a1:53:40:ea:77:3b:a8:c9:04:81:52:b2:e4:
         79:0f:39:f9:47:7f:b8:4b:ad:a6:0d:22:02:56:a5:cf:c3:c4:
         b2:4a:cc:1f:07:3e:cc:70:a7:5f:fc:e4:01:d5:74:c2:d4:8a:
         d1:df:61:1b:b2:37:d2:bc:68:f5:90:b0:f3:3f:43:dc:07:ed:
         23:ea:70:e3:cc:2d:f8:cf:f6:32:0c:39:fd:27:ce:7e:eb:51:
         33:84:40:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----