Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
File:                     be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer (raw, json)
Hash identifier:          rB1zvPNYWZfMzA3ooeDe7dlOScBmDT9DIxW58c6ZcpM=
Subject key identifier:   35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100194F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/be51756b3d6021dd6ee3d4415280c6f6b7603b86.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:42 +0000
Certificate not after:    Thu 05 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 26210
                          IP: 186.121.192.0/18
                          IP: 190.181.0.0/18
                          IP: 200.105.128.0 -- 200.105.223.255
                          IP: 2800:88::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16783695 (0x100194f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:42 2017 GMT
            Not After : Dec  5 04:00:00 2024 GMT
        Subject: CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a7:36:65:d0:eb:c5:54:bc:5f:d5:56:00:67:
                    19:a3:53:46:cd:ec:8d:0b:03:2e:fa:56:2f:23:33:
                    97:90:e2:a9:0c:e0:5a:76:8c:07:99:3b:a7:ae:29:
                    cc:03:2e:26:b1:e6:48:67:89:07:d3:18:ee:a3:49:
                    2e:8c:1f:b1:69:9a:3c:3f:9c:91:13:2d:72:52:9d:
                    35:a3:30:f2:92:8b:19:e8:05:1b:45:20:9f:c6:89:
                    14:48:bb:fb:26:25:9e:ab:60:c0:31:f2:34:76:09:
                    ec:ec:6f:8b:57:0c:f2:49:9c:33:78:1a:b7:fd:42:
                    60:c1:da:13:c9:ba:7f:9e:63:77:c0:18:9c:7d:f3:
                    64:03:db:75:6d:3f:82:8a:5a:49:45:6c:5d:1c:40:
                    fb:f7:2d:d6:4e:b9:31:95:1b:bd:6a:98:e4:20:a4:
                    bd:c8:c8:69:ab:b1:8f:8e:cf:ab:09:c8:09:c5:92:
                    36:f1:fc:4d:9c:98:24:1e:a9:ad:77:16:52:b6:f6:
                    03:6b:06:d2:22:3f:e8:74:b1:5b:7d:dc:ab:eb:7c:
                    9a:38:9d:02:55:87:be:3f:4e:0b:8c:3b:50:95:e3:
                    ba:73:d0:30:f8:28:29:e9:6a:3e:d6:e9:27:bf:fe:
                    6d:60:d2:33:d0:91:85:4b:c4:02:39:b7:db:ed:2c:
                    d6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/be51756b3d6021dd6ee3d4415280c6f6b7603b86.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.192.0/18
                  190.181.0.0/18
                  200.105.128.0-200.105.223.255
                IPv6:
                  2800:88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26210

    Signature Algorithm: sha256WithRSAEncryption
         5f:0a:8b:20:24:fd:7f:22:b3:26:bc:2d:85:fe:54:fc:7f:02:
         8e:b6:16:52:6b:e2:95:18:7d:c9:96:13:8a:93:c7:f8:3a:f4:
         40:68:9e:d8:ba:81:cb:db:88:27:f5:c8:5c:d8:c2:08:4d:b6:
         03:98:b2:08:2f:10:8f:75:09:f1:d9:24:51:ec:d0:c8:fc:2e:
         a9:86:9f:0b:e6:e5:1a:74:ef:98:95:c8:7f:eb:22:c8:9a:75:
         f1:20:65:64:79:62:82:ba:70:4d:5f:03:34:cd:1e:b7:22:3f:
         34:59:99:5e:7d:ef:55:b6:64:4b:f3:ff:f6:de:7f:22:9c:52:
         aa:86:cb:39:c5:8f:a7:ed:d4:5d:81:b4:fe:d1:00:c3:84:28:
         58:44:24:5a:6b:25:ec:b6:f0:97:8b:7a:11:ca:7f:43:f2:9c:
         70:5b:23:96:ac:16:f7:b2:7e:48:2b:ef:d5:d7:fc:04:af:e6:
         c3:a3:01:c7:5f:bc:e1:79:50:a4:51:5f:f0:0f:84:3a:dc:0d:
         ec:31:67:e3:a6:74:71:76:4a:a5:2f:8a:b9:97:35:f8:42:db:
         55:97:a4:26:b3:d2:da:ef:03:1f:c7:b4:0c:8d:62:7c:e9:2c:
         0e:86:42:ba:c5:cd:6a:61:06:06:ba:f3:c1:a9:7e:55:1c:77:
         36:0f:02:4e
-----BEGIN CERTIFICATE-----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