Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b.cer
File:                     4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b.cer (raw, json)
Hash identifier:          sE2JFiwAY4QZ1b6SOmgIbU3bPLsxJH8atefm42iW4is=
Subject key identifier:   AA:FA:20:A0:D9:02:10:11:8A:58:48:E4:08:F2:73:BF:8C:7E:70:7C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED3341
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4a515a2b-0a72-4035-beaf-10da20bc8dc5/4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4a515a2b-0a72-4035-beaf-10da20bc8dc5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 17 Sep 2019 16:03:31 +0000
Certificate not after:    Tue 09 Jul 2024 16:02:39 +0000
Subordinate resources:    AS: 269770
                          IP: 45.182.188.0/24
                          IP: 2803:ed60::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15545153 (0xed3341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 17 16:03:31 2019 GMT
            Not After : Jul  9 16:02:39 2024 GMT
        Subject: CN=4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:51:31:fb:5a:5a:4b:c6:ae:46:a8:0e:22:
                    69:b5:85:08:4a:de:47:b5:63:e9:e3:07:b0:2e:57:
                    c1:f3:a2:41:04:08:86:fd:0b:32:f4:96:c1:c2:aa:
                    cf:18:a9:a1:52:9c:82:6d:b5:6e:7a:e1:be:3a:98:
                    5a:65:c7:0c:4e:e2:2b:9d:eb:17:6f:9f:80:b3:fd:
                    63:ec:5e:52:29:d0:28:43:38:5a:b2:ad:2a:20:7d:
                    d5:64:2f:63:fd:eb:9e:5b:88:7a:a9:35:d0:5c:04:
                    bd:7e:4e:8e:2f:a9:66:db:95:eb:b9:43:b2:33:1d:
                    85:94:2b:0c:c7:c6:7d:21:f7:e4:6a:a9:ec:5b:03:
                    5a:1e:a1:5c:89:53:05:ff:de:73:1a:ad:ef:85:0f:
                    cd:35:e5:87:83:f3:2f:dc:d8:4c:c1:de:9c:45:99:
                    80:f1:c2:03:ea:3f:00:05:23:a6:d7:bd:e6:f7:90:
                    c7:4c:2c:71:23:79:47:36:a3:99:b4:1e:af:09:74:
                    4f:6a:1a:94:85:3c:c8:76:f7:0f:ce:94:34:f7:5a:
                    f2:a8:6b:ee:86:f8:04:38:1c:95:bd:2f:73:ac:ca:
                    2f:1a:9a:eb:dd:2b:09:75:ed:87:55:fe:ba:d6:e2:
                    11:7e:08:ac:fe:96:4f:9b:da:cf:52:31:89:f4:9f:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FA:20:A0:D9:02:10:11:8A:58:48:E4:08:F2:73:BF:8C:7E:70:7C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4a515a2b-0a72-4035-beaf-10da20bc8dc5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4a515a2b-0a72-4035-beaf-10da20bc8dc5/4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.188.0/24
                IPv6:
                  2803:ed60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269770

    Signature Algorithm: sha256WithRSAEncryption
         b1:8d:a1:ab:53:0f:dd:b1:9e:f3:81:97:29:da:08:b9:6d:eb:
         03:23:6e:de:08:a5:0f:01:b4:42:82:a4:58:d4:86:f7:1b:76:
         2e:85:f8:e6:74:a8:6f:fd:bc:3b:b1:d2:4a:3f:a2:f3:8e:dc:
         80:15:25:22:62:b8:50:8a:4d:b1:5b:03:40:24:78:5b:ed:31:
         78:1b:ad:28:ed:94:a3:cb:05:93:5b:6e:70:75:44:05:40:01:
         4d:ec:25:6f:60:c5:fa:48:d3:42:f1:c1:f8:3e:32:d8:d5:c8:
         f8:dd:b6:1f:85:03:83:6e:ca:78:e9:31:5d:d7:72:69:4f:58:
         21:93:0f:bf:cf:d5:5d:a3:78:5e:6c:96:1f:4e:f7:f2:d2:0d:
         5a:27:6f:61:cd:66:de:64:f4:13:c3:aa:4c:0f:9e:e5:66:9b:
         77:6c:9a:2d:d1:d4:e8:f7:4a:ae:98:a8:77:e4:4d:04:a0:0d:
         c3:a1:a9:16:52:dc:60:34:a9:31:2a:44:e2:f1:f2:99:e1:14:
         ae:3a:3b:f9:2a:12:f8:d0:69:3a:10:97:03:e2:74:af:07:5d:
         61:40:e3:54:9c:a0:d9:07:71:4e:d1:88:fd:de:89:ba:a4:4f:
         50:33:a5:19:45:62:7b:72:2e:79:91:80:ad:c8:47:55:63:c5:
         68:00:87:03
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAO0zQTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDkxNzE2MDMzMVoXDTI0MDcwOTE2MDIz
OVowMzExMC8GA1UEAxMoNGE0ZWZmMGZiOWM3YjA1Yzg0ZjA3MWZlNDc0Y2MyZjFj
YzlmNDk4YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMdhUTH7WlpL
xq5GqA4iabWFCEreR7Vj6eMHsC5XwfOiQQQIhv0LMvSWwcKqzxipoVKcgm21bnrh
vjqYWmXHDE7iK53rF2+fgLP9Y+xeUinQKEM4WrKtKiB91WQvY/3rnluIeqk10FwE
vX5Oji+pZtuV67lDsjMdhZQrDMfGfSH35Gqp7FsDWh6hXIlTBf/ecxqt74UPzTXl
h4PzL9zYTMHenEWZgPHCA+o/AAUjpte95veQx0wscSN5RzajmbQerwl0T2oalIU8
yHb3D86UNPda8qhr7ob4BDgclb0vc6zKLxqa690rCXXth1X+utbiEX4IrP6WT5va
z1IxifSf4l8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSq+iCg2QIQEYpYSOQI8nO/
jH5wfDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80YTUxNWEyYi0wYTcy
LTQwMzUtYmVhZi0xMGRhMjBiYzhkYzUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGE1MTVhMmItMGE3Mi00
MDM1LWJlYWYtMTBkYTIwYmM4ZGM1LzRhNGVmZjBmYjljN2IwNWM4NGYwNzFmZTQ3
NGNjMmYxY2M5ZjQ5OGIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC22vDANBAIAAjAHAwUAKAPtYDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHcowDQYJKoZIhvcNAQELBQADggEBALGN
oatTD92xnvOBlynaCLlt6wMjbt4IpQ8BtEKCpFjUhvcbdi6F+OZ0qG/9vDux0ko/
ovOO3IAVJSJiuFCKTbFbA0AkeFvtMXgbrSjtlKPLBZNbbnB1RAVAAU3sJW9gxfpI
00Lxwfg+MtjVyPjdth+FA4NuynjpMV3XcmlPWCGTD7/P1V2jeF5slh9O9/LSDVon
b2HNZt5k9BPDqkwPnuVmm3dsmi3R1Oj3Sq6YqHfkTQSgDcOhqRZS3GA0qTEqROLx
8pnhFK46O/kqEvjQaToQlwPidK8HXWFA41ScoNkHcU7RiP3eibqkT1AzpRlFYnty
LnmRgK3IR1VjxWgAhwM=
-----END CERTIFICATE-----