Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff2e3a351a13deac39dfb4447bede66b960c75d7.cer
File:                     ff2e3a351a13deac39dfb4447bede66b960c75d7.cer (raw, json)
Hash identifier:          QhFygmUdoKkY6Q16Og2Yer0rfEWb5rhGXuhFydcSjMQ=
Subject key identifier:   34:EF:2F:4B:AC:1F:E9:DF:B9:3A:35:C0:6E:1D:BB:47:33:85:CA:72
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       BEA8A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0447e796-07de-42b6-a917-6363d75c4b15/ff2e3a351a13deac39dfb4447bede66b960c75d7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0447e796-07de-42b6-a917-6363d75c4b15/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Aug 2020 22:39:16 +0000
Certificate not after:    Fri 24 Feb 2023 17:20:14 +0000
Subordinate resources:    IP: 45.232.104.0/22
                          IP: 2803:40a0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12495011 (0xbea8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 24 22:39:16 2020 GMT
            Not After : Feb 24 17:20:14 2023 GMT
        Subject: CN=ff2e3a351a13deac39dfb4447bede66b960c75d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:37:d7:64:5f:8f:7a:05:42:6d:b8:a0:df:61:
                    ba:29:87:e1:ef:5a:f1:c2:2e:4c:ec:81:5c:46:0f:
                    d7:70:e8:d5:a4:00:e7:63:f2:56:1d:2f:9b:d7:be:
                    1a:ee:5f:54:58:59:59:ae:56:35:bc:e8:a1:b7:9a:
                    ed:32:16:0e:fd:50:ab:cd:cf:3d:3b:80:a4:b5:5d:
                    59:37:54:ff:c5:01:3b:73:63:71:f0:6b:b2:4b:d3:
                    bb:81:0e:43:a0:39:b8:18:6c:bd:e9:d2:f7:94:28:
                    e0:c6:46:14:55:97:29:08:03:d1:bd:2a:0b:d6:b6:
                    5c:c4:37:3a:e1:56:ae:40:5b:33:15:05:70:ae:b6:
                    f4:21:9d:3b:b6:14:94:69:b2:56:86:59:e1:bc:7d:
                    e9:82:fd:cf:da:23:f1:a6:8f:61:9f:59:b4:17:b7:
                    d6:33:65:0d:d0:b1:48:9e:39:ed:30:d1:a4:6d:ce:
                    5c:87:eb:18:c6:3d:6d:a6:86:4d:64:6a:9e:81:b6:
                    aa:35:d5:2c:ad:ab:c3:1f:ea:be:f6:ad:2b:c5:a3:
                    a9:96:d6:80:55:b0:6a:5c:58:f2:fe:f2:08:a3:91:
                    38:1e:7f:35:51:7c:d7:b0:d8:2b:58:36:b2:49:4a:
                    90:d5:38:4d:5e:3c:4e:57:17:d7:ed:4a:2d:e2:93:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EF:2F:4B:AC:1F:E9:DF:B9:3A:35:C0:6E:1D:BB:47:33:85:CA:72
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0447e796-07de-42b6-a917-6363d75c4b15/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0447e796-07de-42b6-a917-6363d75c4b15/ff2e3a351a13deac39dfb4447bede66b960c75d7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.104.0/22
                IPv6:
                  2803:40a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:08:98:af:87:0d:f5:7b:71:f2:78:a5:f1:ac:1a:0a:02:a5:
         97:4b:10:4b:e1:20:00:d3:7d:ce:46:e4:9b:bc:11:7b:5a:75:
         47:7f:49:02:b1:3f:5a:39:df:97:d3:26:c1:c6:e7:8d:92:fa:
         d6:3a:3c:65:01:de:de:55:9f:c6:5f:76:c5:cb:7e:f4:68:e0:
         85:8f:ac:99:57:13:2a:de:d7:db:95:7e:5d:77:85:eb:0f:b4:
         8d:e9:9d:7e:02:76:f2:37:95:21:60:99:69:a4:6c:aa:b5:1b:
         f9:b9:81:68:44:f0:e7:36:2f:25:df:da:f2:8a:25:d0:24:73:
         d2:c9:19:e1:cb:ab:9a:c3:e2:64:dc:c9:7a:d2:92:c0:df:6d:
         18:25:31:30:34:4c:57:de:7c:8f:f5:c8:82:b4:0b:bd:a0:84:
         ab:b3:d6:f6:3f:3c:c0:36:00:bf:e2:85:64:1c:65:16:53:86:
         14:fd:25:a4:92:67:20:1e:d3:8d:d1:0b:9d:32:ea:1a:d3:05:
         59:0d:6a:0e:48:04:cd:a8:11:26:1d:36:fe:13:bb:53:48:77:
         3c:9f:47:37:64:9b:ec:1b:b0:f6:c0:fe:76:50:36:82:fe:54:
         15:04:f0:25:e3:93:88:bf:10:dc:8b:2e:a8:5d:1f:52:6f:06:
         ea:c1:7a:11
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAL6oozANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDgyNDIyMzkxNloXDTIzMDIyNDE3MjAx
NFowMzExMC8GA1UEAxMoZmYyZTNhMzUxYTEzZGVhYzM5ZGZiNDQ0N2JlZGU2NmI5
NjBjNzVkNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIo312Rfj3oF
Qm24oN9huimH4e9a8cIuTOyBXEYP13Do1aQA52PyVh0vm9e+Gu5fVFhZWa5WNbzo
obea7TIWDv1Qq83PPTuApLVdWTdU/8UBO3NjcfBrskvTu4EOQ6A5uBhsvenS95Qo
4MZGFFWXKQgD0b0qC9a2XMQ3OuFWrkBbMxUFcK629CGdO7YUlGmyVoZZ4bx96YL9
z9oj8aaPYZ9ZtBe31jNlDdCxSJ457TDRpG3OXIfrGMY9baaGTWRqnoG2qjXVLK2r
wx/qvvatK8WjqZbWgFWwalxY8v7yCKOROB5/NVF817DYK1g2sklKkNU4TV48TlcX
1+1KLeKTc7ECAwEAAaOCAu0wggLpMB0GA1UdDgQWBBQ07y9LrB/p37k6NcBuHbtH
M4XKcjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wNDQ3ZTc5Ni0wN2Rl
LTQyYjYtYTkxNy02MzYzZDc1YzRiMTUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDQ0N2U3OTYtMDdkZS00
MmI2LWE5MTctNjM2M2Q3NWM0YjE1L2ZmMmUzYTM1MWExM2RlYWMzOWRmYjQ0NDdi
ZWRlNjZiOTYwYzc1ZDcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3oaDANBAIAAjAHAwUAKANAoDAN
BgkqhkiG9w0BAQsFAAOCAQEAFgiYr4cN9Xtx8nil8awaCgKll0sQS+EgANN9zkbk
m7wRe1p1R39JArE/Wjnfl9MmwcbnjZL61jo8ZQHe3lWfxl92xct+9GjghY+smVcT
Kt7X25V+XXeF6w+0jemdfgJ28jeVIWCZaaRsqrUb+bmBaETw5zYvJd/a8ool0CRz
0skZ4curmsPiZNzJetKSwN9tGCUxMDRMV958j/XIgrQLvaCEq7PW9j88wDYAv+KF
ZBxlFlOGFP0lpJJnIB7TjdELnTLqGtMFWQ1qDkgEzagRJh02/hO7U0h3PJ9HN2Sb
7Buw9sD+dlA2gv5UFQTwJeOTiL8Q3IsuqF0fUm8G6sF6EQ==
-----END CERTIFICATE-----