Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/66aca3c82bb4a4a517bcdcf3bf9508c8c8717cfd.roa
File:                     66aca3c82bb4a4a517bcdcf3bf9508c8c8717cfd.roa (raw, json)
Hash identifier:          aTUdLxV7PIwu1ObbCdHw3tA7LmvxtabNux1Es9I0oNE=
Subject key identifier:   3B:2D:16:FC:E2:27:F4:F4:ED:F4:84:8D:B4:EC:DC:56:A3:6E:86:E9
Certificate issuer:       /CN=b08b134d19c661a4a28b302fd9901173cb75358b
Certificate serial:       072B
Authority key identifier: 63:9C:22:C0:00:1B:34:C0:BF:FC:18:55:B2:11:0E:2C:71:4F:A0:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b08b134d19c661a4a28b302fd9901173cb75358b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/66aca3c82bb4a4a517bcdcf3bf9508c8c8717cfd.roa
Signing time:             Wed 23 Jun 2021 17:30:21 +0000
ROA not before:           Wed 23 Jun 2021 03:00:00 +0000
ROA not after:            Fri 23 Jun 2023 03:00:00 +0000
asID:                     265556
IP address blocks:        45.164.136.0/24 maxlen: 24
                          45.164.137.0/24 maxlen: 24
                          45.164.138.0/24 maxlen: 24
                          45.164.139.0/24 maxlen: 24
                          2806:308::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b08b134d19c661a4a28b302fd9901173cb75358b
        Validity
            Not Before: Jun 23 03:00:00 2021 GMT
            Not After : Jun 23 03:00:00 2023 GMT
        Subject: CN=66aca3c82bb4a4a517bcdcf3bf9508c8c8717cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:0f:5b:8d:57:96:be:cb:54:3c:ac:39:bb:
                    da:90:23:a1:20:3d:e3:d5:21:71:73:73:50:16:b1:
                    f7:c4:69:47:27:e3:95:69:e4:c5:b9:3a:a3:45:13:
                    7c:b5:34:1f:e2:c0:d9:c3:d9:6b:79:d6:b5:0d:a2:
                    0b:e8:53:b3:f4:48:db:84:ad:5a:f7:f3:c0:ca:37:
                    b3:89:df:14:75:6d:e2:01:75:66:1c:e9:64:85:07:
                    f6:4e:4c:63:33:a9:fa:c1:f0:d7:62:07:38:bb:6d:
                    ae:3e:7a:98:62:48:15:2e:7b:f1:cc:9b:54:ca:5d:
                    21:4b:32:fd:21:73:78:e5:5d:1c:ad:d4:55:6b:aa:
                    14:be:b7:30:86:6c:85:80:67:c8:dd:5a:ad:4e:94:
                    a0:0c:40:f1:f8:f0:24:52:1c:29:26:66:70:74:ce:
                    47:a5:e6:ce:cd:56:a6:7d:a4:d9:94:4f:d9:43:17:
                    08:e0:e9:5d:67:5d:a3:0c:83:83:a1:3e:df:22:ae:
                    2e:a5:7e:92:81:30:56:18:19:98:ec:81:98:29:e7:
                    4a:79:7a:84:79:26:83:5e:9b:83:23:b8:90:42:8b:
                    bf:4a:d3:3a:47:1f:db:59:7e:99:dc:57:52:62:b1:
                    44:49:e9:e7:bd:82:ec:b8:14:86:9a:83:67:7d:27:
                    9a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2D:16:FC:E2:27:F4:F4:ED:F4:84:8D:B4:EC:DC:56:A3:6E:86:E9
            X509v3 Authority Key Identifier:
                keyid:63:9C:22:C0:00:1B:34:C0:BF:FC:18:55:B2:11:0E:2C:71:4F:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b08b134d19c661a4a28b302fd9901173cb75358b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/66aca3c82bb4a4a517bcdcf3bf9508c8c8717cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/b08b134d19c661a4a28b302fd9901173cb75358b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.136.0/22
                IPv6:
                  2806:308::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:85:4c:32:5b:f6:c4:ac:8d:07:49:c3:14:b6:e8:ee:71:8e:
         7a:96:f5:18:6e:a6:1b:3f:78:d5:53:42:a3:90:5b:61:6d:6a:
         37:5b:2a:8f:85:fd:f2:c4:cb:87:38:aa:8a:ed:90:de:ee:f5:
         6b:90:42:5d:ad:9d:5b:8f:ef:7c:3a:e5:75:17:b3:e0:30:6e:
         1f:0c:1f:76:eb:33:86:20:51:df:4f:a1:7e:c8:12:ec:1e:e0:
         e4:5d:36:e8:4a:ec:a1:77:c2:34:f1:4a:7e:4e:70:08:20:6b:
         b2:e8:c5:37:e5:b4:fe:c2:6b:b8:da:87:67:13:7c:12:65:93:
         d5:85:9d:2f:f8:fa:e8:63:26:97:14:44:20:bd:9e:05:c7:86:
         71:98:84:38:e7:13:6b:a5:10:ad:eb:0c:5a:ee:37:06:99:49:
         95:3d:ec:82:10:2c:1c:b8:6f:2c:0e:5d:10:8c:dd:c7:f1:97:
         be:3b:36:6b:06:8e:be:2b:d7:7b:33:99:f4:3e:f0:30:bb:93:
         0e:4f:eb:66:80:06:a5:a7:7b:e6:60:c8:5b:ee:3e:5c:20:34:
         23:ab:2c:f8:dd:f6:08:2c:f5:47:84:95:ed:d0:3d:90:29:b6:
         4a:93:18:36:a7:65:37:67:6b:43:86:ef:3c:56:45:3a:2d:40:
         68:b2:cb:73
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICByswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYjA4
YjEzNGQxOWM2NjFhNGEyOGIzMDJmZDk5MDExNzNjYjc1MzU4YjAeFw0yMTA2MjMw
MzAwMDBaFw0yMzA2MjMwMzAwMDBaMDMxMTAvBgNVBAMTKDY2YWNhM2M4MmJiNGE0
YTUxN2JjZGNmM2JmOTUwOGM4Yzg3MTdjZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPcg9bjVeWvstUPKw5u9qQI6EgPePVIXFzc1AWsffEaUcn45Vp
5MW5OqNFE3y1NB/iwNnD2Wt51rUNogvoU7P0SNuErVr388DKN7OJ3xR1beIBdWYc
6WSFB/ZOTGMzqfrB8NdiBzi7ba4+ephiSBUue/HMm1TKXSFLMv0hc3jlXRyt1FVr
qhS+tzCGbIWAZ8jdWq1OlKAMQPH48CRSHCkmZnB0zkel5s7NVqZ9pNmUT9lDFwjg
6V1nXaMMg4OhPt8iri6lfpKBMFYYGZjsgZgp50p5eoR5JoNem4MjuJBCi79K0zpH
H9tZfpncV1JisURJ6ee9guy4FIaag2d9J5oXAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUOy0W/OIn9PTt9ISNtOzcVqNuhukwHwYDVR0jBBgwFoAUY5wiwAAbNMC//BhV
shEOLHFPoMYwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9iMDhiMTM0
ZDE5YzY2MWE0YTI4YjMwMmZkOTkwMTE3M2NiNzUzNThiLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8xNDNiZjZiZi00ODY4LTQ1OGQtOGQ2NC0wZWZiNDJj
NTNhNTYvNjZhY2EzYzgyYmI0YTRhNTE3YmNkY2YzYmY5NTA4YzhjODcxN2NmZC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzE0M2JmNmJmLTQ4NjgtNDU4ZC04ZDY0LTBlZmI0
MmM1M2E1Ni9iMDhiMTM0ZDE5YzY2MWE0YTI4YjMwMmZkOTkwMTE3M2NiNzUzNThi
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCLaSIMA0EAgACMAcDBQAoBgMIMA0GCSqGSIb3DQEBCwUAA4IB
AQAxhUwyW/bErI0HScMUtujucY56lvUYbqYbP3jVU0KjkFthbWo3WyqPhf3yxMuH
OKqK7ZDe7vVrkEJdrZ1bj+98OuV1F7PgMG4fDB926zOGIFHfT6F+yBLsHuDkXTbo
Suyhd8I08Up+TnAIIGuy6MU35bT+wmu42odnE3wSZZPVhZ0v+ProYyaXFEQgvZ4F
x4ZxmIQ45xNrpRCt6wxa7jcGmUmVPeyCECwcuG8sDl0QjN3H8Ze+OzZrBo6+K9d7
M5n0PvAwu5MOT+tmgAalp3vmYMhb7j5cIDQjqyz43fYILPVHhJXt0D2QKbZKkxg2
p2U3Z2tDhu88VkU6LUBosstz
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org