Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/84cc9a8a79b50854f94d466684210804d8dff5e7.roa
File:                     84cc9a8a79b50854f94d466684210804d8dff5e7.roa (raw, json)
Hash identifier:          0s2EjKyjbjgOMufpIu5n/Vh76akAXt10qA5virsTBow=
Subject key identifier:   6C:25:8C:05:DB:3E:66:AE:55:0D:76:87:94:25:C3:66:F1:DA:68:0A
Certificate issuer:       /CN=98a80d301d847e6c050c408da1b0efe36548fad8
Certificate serial:       15BD66
Authority key identifier: 44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/84cc9a8a79b50854f94d466684210804d8dff5e7.roa
Signing time:             Mon 07 Mar 2022 14:00:04 +0000
ROA not before:           Wed 02 Mar 2022 03:00:00 +0000
ROA not after:            Sat 02 Mar 2024 03:00:00 +0000
asID:                     264659
IP address blocks:        179.43.108.0/22 maxlen: 24
                          190.211.140.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1424742 (0x15bd66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a80d301d847e6c050c408da1b0efe36548fad8
        Validity
            Not Before: Mar  2 03:00:00 2022 GMT
            Not After : Mar  2 03:00:00 2024 GMT
        Subject: CN=84cc9a8a79b50854f94d466684210804d8dff5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a0:1a:2a:38:c6:8a:46:ad:3b:21:05:80:aa:
                    88:0b:32:55:f5:bf:fc:22:59:7e:44:69:29:d3:05:
                    7c:87:18:33:1d:cf:7c:ab:92:0f:df:63:b9:70:d7:
                    ae:e5:cc:47:fa:66:f0:88:d3:26:f8:df:c8:f8:a4:
                    31:42:53:e0:dd:ff:8a:56:61:86:5f:fd:bb:ff:5b:
                    83:45:cb:88:a6:3d:38:53:fa:e5:ec:cb:ae:20:c2:
                    bc:3e:da:f5:37:39:a3:f0:14:b0:90:64:ac:1f:18:
                    c4:a4:6c:68:91:70:40:23:97:d3:67:d1:6e:00:0c:
                    bd:21:87:7a:3a:14:d1:b6:dd:92:0a:2e:d3:3d:36:
                    18:82:0c:21:80:78:11:bd:00:ae:c2:5f:68:98:88:
                    9b:bb:47:61:f3:19:f4:d4:c1:90:80:58:d9:03:43:
                    65:ad:ff:0e:c3:37:a1:4c:19:78:bf:7b:1c:c3:60:
                    0c:d3:a6:68:e5:d3:45:88:4c:a6:9f:0b:2f:e2:5c:
                    a1:dc:f8:38:f8:b5:86:0d:14:40:4a:98:40:94:a1:
                    92:8f:31:02:26:e9:cb:63:1d:ce:d8:71:c2:20:62:
                    bf:42:81:8f:93:b2:7f:a4:21:d5:d1:1b:e7:a5:ca:
                    10:19:fb:dd:b1:70:91:f0:29:a1:52:af:6e:b1:bf:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:25:8C:05:DB:3E:66:AE:55:0D:76:87:94:25:C3:66:F1:DA:68:0A
            X509v3 Authority Key Identifier:
                keyid:44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/84cc9a8a79b50854f94d466684210804d8dff5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/98a80d301d847e6c050c408da1b0efe36548fad8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.108.0/22
                  190.211.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:50:ad:52:90:d5:c7:28:b8:50:c1:28:51:5c:37:ea:d7:e4:
         df:6f:67:9f:7b:ac:06:4f:97:cc:04:2d:72:e6:a0:ad:3c:c0:
         20:1d:21:af:82:e3:16:1d:90:d0:5a:c5:86:24:b7:64:5a:76:
         5c:93:df:79:84:d8:f4:fd:3f:ef:58:ee:2f:64:07:9f:0f:38:
         96:7c:29:89:18:93:25:d7:ec:cb:f9:d1:10:7b:5a:58:f3:e1:
         34:16:8c:c7:c2:2c:1c:96:59:c1:1f:a7:61:75:4a:49:a0:2e:
         69:e4:04:62:11:6e:3c:85:a8:e2:80:69:3e:f2:c1:d1:4b:c8:
         31:e8:4b:b2:1a:04:e4:96:80:03:86:f6:b2:cb:ad:68:cc:03:
         6d:ab:f8:e1:4b:0f:a8:85:b6:9f:fc:cb:6e:6f:f4:22:e4:c0:
         e3:07:04:41:89:25:b5:26:ef:71:12:22:09:d8:d7:5b:be:00:
         38:09:7b:02:14:d4:07:c3:c2:7e:7a:64:4c:06:a0:16:95:21:
         eb:dc:5b:0c:5b:c1:98:bf:64:ac:3e:cb:99:62:70:f2:85:07:
         68:e1:b5:33:a1:3b:11:04:24:c4:c3:5a:b0:84:2d:9a:58:66:
         fe:67:28:c4:27:6a:ee:3d:3d:bf:d5:cd:bc:66:c8:a8:f3:02:
         ab:8e:1d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:08 2023 by rpki-client on console-fra.rpki-client.org