Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer
File:                     84a7a446b5912a684e23e2c1eb2619b25184f613.cer (raw, json)
Hash identifier:          vLwF58GNRTgoPkZnjjq6rY0kaJY4GvIyrObeQMz1Vzo=
Subject key identifier:   93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01023F71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/84a7a446b5912a684e23e2c1eb2619b25184f613.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 13 Apr 2018 18:13:15 +0000
Certificate not after:    Thu 26 Dec 2024 16:14:32 +0000
Subordinate resources:    IP: 45.231.148.0/22
                          IP: 2803:cb20::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16924529 (0x1023f71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 13 18:13:15 2018 GMT
            Not After : Dec 26 16:14:32 2024 GMT
        Subject: CN=84a7a446b5912a684e23e2c1eb2619b25184f613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:b5:c4:b8:58:f4:6c:7c:5c:ee:ac:77:52:
                    4a:5c:c5:6a:1a:a5:7d:e4:a7:78:bd:e2:63:6d:5e:
                    4d:5a:79:41:4f:af:76:47:53:af:45:31:49:3b:6f:
                    19:02:7e:fd:29:08:28:55:6a:68:f7:15:d1:28:be:
                    df:21:a1:0d:29:6a:ce:77:3d:c5:cb:39:5b:dc:69:
                    ae:bc:2e:49:c5:c7:32:1c:3b:82:3d:9f:4d:1c:01:
                    89:98:25:8a:03:db:07:85:d1:3c:7d:b3:ef:0e:d2:
                    4b:f4:2e:a7:ad:f5:c5:e8:73:9e:5d:ee:31:c4:5b:
                    22:a8:7f:6d:43:ed:81:4f:6d:c4:89:f6:ea:31:24:
                    57:4b:93:17:aa:b3:79:e2:21:c7:f3:40:b4:c9:b8:
                    51:c4:01:d2:d3:eb:98:a5:12:cc:62:d2:30:64:23:
                    0b:ae:9f:ce:1d:11:ac:2a:e4:69:4c:6f:a3:2c:ae:
                    87:65:5a:08:5e:8e:e6:8a:b3:55:68:44:62:04:fd:
                    8a:72:cb:18:b8:9f:1b:b7:06:44:ae:8f:bc:aa:29:
                    10:ab:ec:45:e4:2e:aa:55:30:07:c2:3b:f8:9f:67:
                    e7:eb:73:42:8a:36:ba:46:0a:1a:f5:d2:37:36:6b:
                    39:13:80:86:47:f6:be:b3:d5:da:aa:bd:cd:68:1f:
                    77:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/84a7a446b5912a684e23e2c1eb2619b25184f613.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.148.0/22
                IPv6:
                  2803:cb20::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:c6:c7:d2:08:48:90:b3:cf:e7:09:4b:2b:6e:5a:35:d1:
         07:d0:d3:f4:52:3e:4d:d2:f0:ad:48:e8:35:1f:dd:7d:73:b1:
         27:66:a0:75:1e:f5:b3:14:46:1d:cf:5b:c4:b0:89:a3:f1:a2:
         d3:9d:c6:73:9b:92:6b:93:5f:ad:b1:db:fd:f4:1b:ae:ea:05:
         24:3a:3a:0e:0d:61:ee:da:e6:e9:25:f0:46:2e:c6:68:19:db:
         1a:10:60:6d:ec:9d:cb:b9:a1:0b:c8:0c:33:d4:fd:68:19:13:
         c0:11:0c:73:7f:06:09:b3:47:d0:24:ec:d1:f4:62:40:0b:3f:
         81:37:d9:f0:d8:c6:75:11:37:4e:c3:7e:0f:b9:a0:a1:fb:2c:
         bb:79:6e:c3:fa:c8:e7:49:35:94:1b:51:4e:bc:90:a5:5e:0f:
         51:6d:f2:fe:e0:dd:8e:26:04:2a:c7:34:8d:34:2f:1e:ca:c6:
         c6:62:fd:b4:87:bf:a0:5b:3d:a9:ee:4a:f9:be:c7:b1:17:5f:
         67:08:80:8b:a8:a2:ee:fa:7c:d4:a4:b2:1d:84:af:53:c6:1a:
         ed:a9:a6:eb:83:7a:87:27:4f:c1:f9:70:84:e2:29:8b:81:71:
         78:81:eb:be:ad:19:05:47:09:a4:07:3b:06:e6:c3:eb:9e:94:
         8b:e3:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----