Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.cer
File:                     9626A6128814BFABD36D86E0348EDC7C67F0F691.cer (raw, json)
Hash identifier:          RjO6YRIfp7DffFumHp0DrtZDNQ1UzSul9ZnIw9FY9Ow=
Subject key identifier:   96:26:A6:12:88:14:BF:AB:D3:6D:86:E0:34:8E:DC:7C:67:F0:F6:91
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       27644B4D94F3B564ACEF3A561E2285D2EFDDDE67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 May 2024 00:40:01 +0000
Certificate not after:    Thu 22 May 2025 00:45:01 +0000
Subordinate resources:    AS: 269918
                          IP: 131.72.168.0/22
                          IP: 2803:dd80::/32

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 03:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:64:4b:4d:94:f3:b5:64:ac:ef:3a:56:1e:22:85:d2:ef:dd:de:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: May 23 00:40:01 2024 GMT
            Not After : May 22 00:45:01 2025 GMT
        Subject: CN=9626A6128814BFABD36D86E0348EDC7C67F0F691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:55:41:fb:8a:6b:7d:f6:b4:60:52:01:4e:
                    dc:21:7b:e0:5d:4c:ee:48:26:53:2f:f9:35:12:a3:
                    7d:43:d1:1c:0f:bb:99:2e:9b:96:94:0c:06:78:12:
                    a4:ea:12:d0:55:e9:a1:36:91:fc:c8:14:44:bc:5c:
                    5d:ed:14:9a:d9:fb:86:aa:f1:40:59:f3:44:78:c6:
                    16:0d:62:ba:87:53:14:f7:09:ec:f7:34:c3:6a:60:
                    7e:84:9a:74:da:a5:4a:e8:d2:c3:f7:ee:e8:03:80:
                    fb:b4:5d:44:a0:7a:7b:3a:9e:12:3d:44:ba:81:21:
                    30:54:e0:9c:cf:07:7e:97:65:4d:71:b7:8b:04:5e:
                    01:c7:0f:0f:d9:ea:3f:ca:cf:f5:7f:37:0f:9d:db:
                    b0:3a:a4:ff:61:dd:c1:86:0a:ad:cb:4f:a2:74:d7:
                    7c:b0:66:53:fe:5f:9d:46:7d:23:c1:fb:3d:57:a8:
                    5a:8f:9c:98:0a:cf:20:69:22:c0:7b:40:f7:75:fa:
                    7d:cb:b9:6b:0a:64:2b:45:47:6b:ba:ea:88:2b:aa:
                    f3:a6:24:04:12:a7:07:94:8b:b0:7a:b7:89:35:64:
                    85:69:21:71:54:8f:5e:92:47:2a:5f:3a:0b:35:a2:
                    6f:67:31:c1:fe:b2:43:aa:2d:a0:75:ab:8f:81:2f:
                    9e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:26:A6:12:88:14:BF:AB:D3:6D:86:E0:34:8E:DC:7C:67:F0:F6:91
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22
                IPv6:
                  2803:dd80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269918

    Signature Algorithm: sha256WithRSAEncryption
         7c:48:43:ce:ab:db:8a:34:ad:e1:f5:94:58:91:4b:8a:0c:e3:
         fb:59:1e:a7:3b:49:0e:a9:be:f2:dc:a4:0d:de:d1:e0:fe:11:
         30:ba:2b:fd:9c:4e:e9:b6:1e:a4:cd:94:a4:42:1c:0c:ba:89:
         5e:7f:6d:84:8b:dd:9c:7c:e6:ce:76:df:8b:f6:35:d8:6c:f4:
         87:9b:a6:d9:12:bb:c0:3d:2b:d2:af:a0:6c:af:80:1d:e0:ac:
         67:b8:db:25:df:ea:97:e7:a8:f5:c9:ac:b9:f1:e6:fb:8a:6a:
         9e:0b:db:73:14:2b:b2:0c:a3:0b:e6:6b:8b:7d:a7:12:25:39:
         55:cb:dc:67:fd:c7:2a:81:24:a2:06:4f:c6:5e:2f:bc:c2:05:
         00:04:86:89:b6:98:ea:46:e7:6e:13:4f:eb:f6:4e:71:2f:4c:
         70:e1:97:b3:9e:ed:c0:9a:00:91:65:56:f7:d5:d1:b5:e1:47:
         e1:15:a5:21:1f:30:89:28:64:95:46:cf:d7:83:40:13:c8:15:
         fa:b3:44:86:af:23:96:20:b9:09:1b:51:0b:95:2a:6b:ba:9b:
         9d:42:c8:07:1e:cf:31:c5:50:af:76:18:1f:d7:5b:ca:70:9c:
         f1:8f:bf:4c:35:6d:ec:38:d9:a1:90:c7:56:06:7f:94:9d:8f:
         5e:be:fa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----