Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbb725da2eefb2563dff5aa4b39678675020bce6.cer
File:                     fbb725da2eefb2563dff5aa4b39678675020bce6.cer (raw, json)
Hash identifier:          nE97VWH0GeR8ms6FBktQDgACOvSzkEsypLHjE0Z5PVg=
Subject key identifier:   2E:4D:5C:20:16:58:92:DE:B0:02:4C:A0:E4:D8:A5:AD:FD:68:35:4D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104C83F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/93fc7048-6005-4494-9d5f-08c026a9fc9c/fbb725da2eefb2563dff5aa4b39678675020bce6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/93fc7048-6005-4494-9d5f-08c026a9fc9c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:20 +0000
Certificate not after:    Thu 23 Jan 2025 17:29:38 +0000
Subordinate resources:    AS: 265684
                          IP: 45.5.116.0/22
                          IP: 2803:e1c0::/32

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17090623 (0x104c83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:20 2017 GMT
            Not After : Jan 23 17:29:38 2025 GMT
        Subject: CN=fbb725da2eefb2563dff5aa4b39678675020bce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c2:c2:fb:c1:cc:cb:5f:29:be:96:fa:b7:9b:
                    7b:7d:81:27:44:19:62:21:25:42:fe:0f:6c:d2:09:
                    e2:e6:b0:64:c9:1e:4d:d7:23:05:8b:14:29:24:a6:
                    55:fc:19:89:b6:62:d1:83:c4:51:9a:27:84:6a:9a:
                    0d:67:05:9d:ed:53:55:fc:73:2a:de:9a:ee:d7:65:
                    55:c8:13:75:bd:ea:81:aa:90:b0:41:dc:b0:9d:06:
                    61:b3:3c:2e:89:e1:8c:91:67:c4:ed:6c:d5:96:b8:
                    c7:ba:ef:97:97:6e:0a:3d:5f:64:12:4c:19:ba:ed:
                    52:f0:d3:14:34:4d:fb:10:0c:1c:fe:1e:9a:91:fd:
                    de:58:10:52:07:a8:07:4f:f1:70:81:77:5a:f5:7d:
                    38:10:81:76:0e:31:d3:43:63:70:0b:36:71:1b:e4:
                    01:94:60:08:a9:a4:c3:72:fb:81:02:a0:9f:61:e2:
                    1b:55:31:21:2e:eb:67:f6:a7:f6:8e:73:05:c2:3f:
                    38:2d:e2:64:1c:0a:7c:5c:17:7a:18:a3:f1:12:79:
                    c2:b4:b6:7f:d7:96:2d:8f:89:e0:41:a5:eb:c1:20:
                    75:0b:bc:7e:e6:89:f4:9a:66:5e:bc:0b:67:45:bf:
                    18:1e:54:f4:5f:9a:fb:e2:61:15:cd:90:1c:a7:bf:
                    97:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4D:5C:20:16:58:92:DE:B0:02:4C:A0:E4:D8:A5:AD:FD:68:35:4D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/93fc7048-6005-4494-9d5f-08c026a9fc9c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/93fc7048-6005-4494-9d5f-08c026a9fc9c/fbb725da2eefb2563dff5aa4b39678675020bce6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.116.0/22
                IPv6:
                  2803:e1c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265684

    Signature Algorithm: sha256WithRSAEncryption
         2e:ba:1f:b5:6c:b3:d0:df:41:47:f8:dd:da:dd:5e:ef:12:14:
         88:26:ff:de:3f:f0:43:6f:31:f1:e4:ed:ac:07:a5:df:26:31:
         3b:0c:4c:0f:c3:2f:b1:05:f1:d2:48:95:b9:e3:60:59:3d:86:
         e9:1d:2b:c5:e6:72:94:41:4a:c1:a5:ca:ff:7c:a0:62:3f:82:
         27:ad:e4:23:a5:40:64:3c:c9:25:f0:8d:5f:d2:e2:c0:75:1b:
         e5:0d:05:24:31:57:21:a1:5f:bc:7d:96:d1:b8:d8:59:f2:fe:
         c3:71:ae:ad:01:39:c1:22:05:e6:49:7d:6e:14:5b:dc:5c:2a:
         fd:5a:f8:75:98:56:ea:87:67:41:ef:ca:03:03:97:45:9f:b1:
         a5:99:25:e5:b0:19:fe:05:a6:74:43:65:b1:73:51:6d:09:72:
         49:52:26:d9:04:11:24:b2:c6:55:89:78:77:51:2e:de:1f:84:
         7c:f9:ce:4c:16:11:66:0b:af:f5:5d:50:f1:52:d4:e6:c5:cf:
         04:b7:f3:fa:f6:8f:36:7f:02:18:ba:4f:bb:eb:19:09:aa:e4:
         f1:55:f9:97:1a:28:93:3c:4d:90:10:3b:df:b9:a5:96:7a:11:
         37:fb:e1:f7:ac:08:e3:27:88:9d:4f:54:e1:25:73:0f:f7:1e:
         19:e6:38:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----