Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
File:                     cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer (raw, json)
Hash identifier:          lOBjpu/Js/7xrZzNYwbjc0FV/vXSKYPpXSb2n0Us4fk=
Subject key identifier:   8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6BF3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:39 +0000
Certificate not after:    Fri 27 Sep 2024 05:00:00 +0000
Subordinate resources:    IP: 168.195.56.0/22
                          IP: 181.199.208.0/20
                          IP: 190.98.128.0/18
                          IP: 2800:240::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16170815 (0xf6bf3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:39 2017 GMT
            Not After : Sep 27 05:00:00 2024 GMT
        Subject: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fc:8d:4e:37:7c:4c:4a:fe:26:42:8e:a9:33:
                    7a:fa:b0:68:98:09:f1:1c:b6:e4:20:0e:5b:46:52:
                    46:ee:a5:9a:1b:b0:7b:0d:21:be:2e:44:eb:8f:73:
                    be:cb:dc:03:cf:9c:b2:7e:f1:45:89:7a:d5:46:86:
                    75:76:04:ae:9a:3f:e7:ef:ec:f7:a0:75:da:d7:24:
                    49:ac:27:dd:d1:7d:1e:aa:48:50:13:f4:47:59:08:
                    87:c3:e8:7c:ba:a0:05:6c:89:b4:22:02:71:48:7a:
                    64:76:48:66:b7:75:88:8e:ae:c1:09:4f:35:6a:c0:
                    4e:1c:c4:fa:83:1a:37:a6:18:e9:82:91:34:20:16:
                    b1:04:11:0f:a0:66:84:ef:98:29:d4:10:bc:f8:ff:
                    cd:64:f1:c6:60:95:b4:d7:c1:48:88:d4:3a:ed:c3:
                    d8:42:0c:10:70:2a:1b:ad:41:49:56:b4:41:6e:4d:
                    f9:0f:ad:7b:be:40:e1:5c:33:85:84:da:2b:cf:ba:
                    70:9d:9e:3a:d7:cb:01:47:a1:32:79:d8:a1:af:8a:
                    c4:74:57:9a:39:39:da:be:9d:a0:5d:e3:eb:27:54:
                    d6:47:1b:04:0b:f0:7c:ce:79:82:bf:9e:3e:3d:2f:
                    c6:b2:97:41:15:b2:ba:b0:1e:6d:af:d8:29:76:3a:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.56.0/22
                  181.199.208.0/20
                  190.98.128.0/18
                IPv6:
                  2800:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:f7:e2:3f:d6:a9:d9:ac:85:d2:cf:9b:28:76:dc:bc:ce:17:
         f2:52:e2:2c:2c:9a:a0:4b:9b:37:62:b6:e2:4c:3c:7d:fc:36:
         ce:88:6b:09:c2:0e:4f:e5:e9:54:15:58:b0:f6:ad:bb:48:1c:
         ec:d9:77:c6:3e:6d:c1:5b:34:7c:9d:2a:cd:ee:8d:a7:19:c8:
         f9:08:85:ab:23:5f:c2:f5:25:8a:67:44:ae:05:25:7d:c4:7f:
         fc:72:09:6b:ee:37:46:b5:ee:db:01:a3:f3:d4:80:61:f4:ea:
         85:b1:e3:36:c5:5d:06:40:36:24:a9:5f:d9:dc:fb:9a:04:fa:
         06:c1:29:51:3f:e8:d7:7a:33:7f:f8:6f:f0:d6:19:a6:54:05:
         96:f0:fd:bb:38:f9:aa:b4:46:e5:88:b3:14:c0:46:33:91:8a:
         5d:fd:4e:f1:1e:b4:44:e4:49:ed:b7:c5:c9:6b:a3:74:7c:56:
         b9:52:53:5f:23:5b:6e:f5:76:72:18:27:66:a0:3e:94:14:93:
         a6:c6:13:db:30:f6:d1:fd:68:cc:98:dc:a5:b2:92:ab:e4:97:
         fe:d4:40:d6:cf:dd:c0:eb:ef:43:3e:66:3a:32:49:93:9c:e0:
         ad:a0:e9:71:3f:b9:ca:3e:f7:cf:15:26:9c:69:72:d9:0e:b9:
         7c:b7:77:90
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAPa/PzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzOVoXDTI0MDkyNzA1MDAw
MFowMzExMC8GA1UEAxMoY2YyODUzY2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRm
OGNlOGQ1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJD8jU43fExK
/iZCjqkzevqwaJgJ8Ry25CAOW0ZSRu6lmhuwew0hvi5E649zvsvcA8+csn7xRYl6
1UaGdXYErpo/5+/s96B12tckSawn3dF9HqpIUBP0R1kIh8PofLqgBWyJtCICcUh6
ZHZIZrd1iI6uwQlPNWrAThzE+oMaN6YY6YKRNCAWsQQRD6BmhO+YKdQQvPj/zWTx
xmCVtNfBSIjUOu3D2EIMEHAqG61BSVa0QW5N+Q+te75A4VwzhYTaK8+6cJ2eOtfL
AUehMnnYoa+KxHRXmjk52r6doF3j6ydU1kcbBAvwfM55gr+ePj0vxrKXQRWyurAe
ba/YKXY6rQsCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBSNc8R3oTGtbVFnZt70cswu
YEh/rTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kNmYyMWE4Yy0zYTcx
LTQ3YTctOWY2ZS1jOWI0NDE0MjdmY2QvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDZmMjFhOGMtM2E3MS00
N2E3LTlmNmUtYzliNDQxNDI3ZmNkL2NmMjg1M2NjODVjMWU1NWM2NWU3NjMyOTli
YTA4ODk0ZjhjZThkNTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAqjDOAMEBLXH0AMEBr5igDANBAIA
AjAHAwUAKAACQDANBgkqhkiG9w0BAQsFAAOCAQEAfPfiP9ap2ayF0s+bKHbcvM4X
8lLiLCyaoEubN2K24kw8ffw2zohrCcIOT+XpVBVYsPatu0gc7Nl3xj5twVs0fJ0q
ze6NpxnI+QiFqyNfwvUlimdErgUlfcR//HIJa+43RrXu2wGj89SAYfTqhbHjNsVd
BkA2JKlf2dz7mgT6BsEpUT/o13ozf/hv8NYZplQFlvD9uzj5qrRG5YizFMBGM5GK
Xf1O8R60RORJ7bfFyWujdHxWuVJTXyNbbvV2chgnZqA+lBSTpsYT2zD20f1ozJjc
pbKSq+SX/tRA1s/dwOvvQz5mOjJJk5zgraDpcT+5yj73zxUmnGly2Q65fLd3kA==
-----END CERTIFICATE-----