Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.cer
File:                     bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.cer (raw, json)
Hash identifier:          v1DfLh5fL4vOZHZwzO1D5tgY+KT2q8iyTTauTDwx8SY=
Subject key identifier:   3A:13:D5:51:2E:F7:7C:6A:F8:FA:C3:BE:15:8C:AD:91:7C:C0:39:34
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102DE1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Mar 2023 09:00:47 +0000
Certificate not after:    Fri 28 Feb 2025 18:48:17 +0000
Subordinate resources:    AS: 271908
                          IP: 131.255.17.0 -- 131.255.19.255
                          IP: 2803:1210::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16965146 (0x102de1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 29 09:00:47 2023 GMT
            Not After : Feb 28 18:48:17 2025 GMT
        Subject: CN=bfa1a6cea5071fa02d7426401f14b3d6b3d0da83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:75:fa:0f:8d:00:1e:2b:10:27:32:72:c6:1a:
                    51:2a:c8:00:ad:b6:96:88:12:e8:ef:11:d2:36:03:
                    87:59:bd:bb:87:69:58:58:bf:b3:2d:27:bc:87:cf:
                    4c:32:0e:44:e5:45:10:52:08:ee:ef:95:ff:28:f2:
                    c8:d2:ed:63:d6:b0:1f:d9:cb:b0:fc:3b:8d:1d:e2:
                    2c:27:46:8f:e1:7f:2d:58:3d:2d:e1:e3:34:f2:98:
                    a0:c0:1f:b4:c3:ac:a8:ef:8f:70:b5:c7:23:9c:91:
                    9c:0f:b2:ca:71:7d:78:23:fe:e3:c0:ac:10:d8:78:
                    cb:4d:49:e6:98:ef:f1:6e:ee:d1:61:5d:7b:33:d2:
                    19:b8:83:10:a3:95:c7:35:ff:b9:a7:64:2d:2d:43:
                    89:f0:67:ab:c0:2b:52:cc:30:03:4d:01:9c:69:ad:
                    0a:59:cc:47:a3:31:54:6f:0d:da:bd:05:d9:91:6d:
                    95:3b:f7:65:02:55:57:b2:fd:8f:c2:e0:42:56:1e:
                    44:30:66:6f:f2:dd:7a:24:9a:9d:82:e9:ab:3b:42:
                    04:5e:d1:1e:0a:49:33:f9:6e:1d:c8:a2:7c:b3:d7:
                    f9:d7:be:dd:74:50:5c:3b:21:17:85:92:95:da:19:
                    d7:f3:0b:91:5f:67:1a:31:ff:c5:3b:39:32:30:0a:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:13:D5:51:2E:F7:7C:6A:F8:FA:C3:BE:15:8C:AD:91:7C:C0:39:34
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.17.0-131.255.19.255
                IPv6:
                  2803:1210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271908

    Signature Algorithm: sha256WithRSAEncryption
         a3:c6:ca:ec:a1:4b:28:47:ff:a7:9f:87:74:ee:23:37:2a:43:
         c7:df:24:3b:24:44:d0:56:23:41:1d:11:77:b5:fe:a1:6f:63:
         f8:32:f3:05:4f:dd:38:3c:8c:0f:e2:2a:39:9c:12:51:69:ee:
         c5:5e:25:c1:e6:12:47:55:92:e6:cd:57:08:e9:b5:21:52:19:
         56:33:2f:2b:b9:87:04:fc:6d:a2:75:8c:f1:3a:d9:45:2f:8d:
         a5:48:cd:e1:c1:26:47:1f:6a:eb:f9:0e:3a:23:09:ee:c2:21:
         cd:b3:4c:33:9d:f8:ab:21:75:99:de:3c:bd:50:e6:b7:70:2d:
         57:a7:c6:11:ad:a6:fb:ee:01:91:99:d8:f2:d9:9e:6a:e1:83:
         62:4f:55:76:a1:78:2e:1b:bd:8e:10:a1:d5:e5:b1:21:a0:6b:
         a6:93:53:86:7b:9f:13:dc:9a:35:2b:07:46:da:ee:aa:1b:e9:
         75:08:de:8d:b8:d8:50:eb:f1:1f:c0:34:fa:12:9d:7f:99:a4:
         59:43:c8:52:3b:6e:db:09:b4:b7:4a:f1:4f:43:36:f5:ed:e5:
         fb:d8:c1:8c:e5:1f:b1:a3:20:a9:e6:18:a6:fd:b8:a2:c1:36:
         00:84:37:39:b2:1a:6e:5a:b4:16:39:e5:af:9a:63:76:29:d0:
         23:e4:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----