Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/4fb5ee171f9199461b88e217351b6d9288a6250d.roa
File:                     4fb5ee171f9199461b88e217351b6d9288a6250d.roa (raw, json)
Hash identifier:          7RrHSWbv9o3fnxAOX2v5nb20ocSGSWy26hT2gumG7F8=
Subject key identifier:   1C:BB:19:2B:51:80:06:AB:EB:03:36:34:3F:CA:AF:6B:A2:16:6E:45
Certificate issuer:       /CN=63c3a21c71007155e6b7b013a30357703347965c
Certificate serial:       0DDDBE
Authority key identifier: DC:74:08:38:C2:43:73:AD:EE:0B:26:F9:EB:63:A7:EF:25:80:96:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63c3a21c71007155e6b7b013a30357703347965c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/4fb5ee171f9199461b88e217351b6d9288a6250d.roa
Signing time:             Sun 18 Apr 2021 00:20:37 +0000
ROA not before:           Sat 17 Apr 2021 03:00:00 +0000
ROA not after:            Mon 17 Apr 2023 03:00:00 +0000
asID:                     52510
IP address blocks:        138.219.56.0/23 maxlen: 23
                          138.219.58.0/23 maxlen: 23
                          170.233.192.0/23 maxlen: 23
                          170.233.194.0/23 maxlen: 23
                          170.245.48.0/23 maxlen: 23
                          170.245.50.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908734 (0xdddbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c3a21c71007155e6b7b013a30357703347965c
        Validity
            Not Before: Apr 17 03:00:00 2021 GMT
            Not After : Apr 17 03:00:00 2023 GMT
        Subject: CN=4fb5ee171f9199461b88e217351b6d9288a6250d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:38:67:45:3d:b8:03:6e:85:e5:a5:c0:ce:
                    00:62:b6:7c:d9:a7:81:d4:48:26:33:e8:f1:5c:c9:
                    43:69:80:44:24:90:39:8d:5c:1e:c2:0a:4a:9f:ba:
                    6b:cf:56:75:8e:1e:25:b0:c4:25:39:66:84:9b:bc:
                    f8:71:b2:cb:32:5a:94:1d:a0:2d:45:55:50:c8:6f:
                    94:13:13:2e:10:75:27:94:b6:38:ed:10:4f:a6:10:
                    1b:52:ef:e1:4e:f2:cc:d4:12:3a:80:5d:40:e5:5a:
                    77:fa:5f:a6:3b:b5:5a:d4:54:71:46:5a:30:1b:b7:
                    54:34:3b:f8:97:99:f6:b6:f5:7b:75:44:15:32:37:
                    f0:49:cf:01:ae:2b:18:24:fd:0e:f4:c9:1a:28:58:
                    da:c5:6d:0f:34:52:4d:85:c1:71:53:3d:a5:b2:02:
                    46:56:a1:18:d9:a7:da:04:da:bb:aa:d8:34:ab:d1:
                    e8:2c:5b:6d:9c:82:31:af:be:a7:22:4e:1c:a9:08:
                    2f:d4:8f:36:1a:3e:04:09:1e:b4:a3:01:be:cb:2f:
                    ef:40:98:02:fd:fe:4d:20:a2:3b:49:e1:fe:8c:f5:
                    7e:0a:92:fe:a0:2b:79:06:71:e2:f3:af:d1:65:73:
                    8d:f8:71:16:67:9a:eb:21:4b:7c:72:6a:c4:10:8d:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BB:19:2B:51:80:06:AB:EB:03:36:34:3F:CA:AF:6B:A2:16:6E:45
            X509v3 Authority Key Identifier:
                keyid:DC:74:08:38:C2:43:73:AD:EE:0B:26:F9:EB:63:A7:EF:25:80:96:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63c3a21c71007155e6b7b013a30357703347965c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/4fb5ee171f9199461b88e217351b6d9288a6250d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/63c3a21c71007155e6b7b013a30357703347965c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.56.0/22
                  170.233.192.0/22
                  170.245.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:ff:b4:1d:31:b1:2f:fa:cb:c2:e2:36:fb:a5:a9:5e:85:ff:
         cd:ce:75:e7:54:a7:1c:62:d7:77:f1:63:5f:36:f5:eb:74:41:
         58:b7:28:e2:0d:57:40:3e:04:77:03:0e:3c:33:b1:15:bd:e5:
         5d:50:11:09:80:32:9a:8e:c6:c9:8f:c6:2b:28:88:a0:08:cf:
         ca:32:a1:96:91:36:92:4c:2c:f1:eb:9d:af:45:93:0e:c1:af:
         60:bf:83:d4:10:6c:80:a7:47:68:6a:9f:1e:35:83:74:cb:ad:
         aa:7e:70:66:5e:71:ed:5c:64:a4:a2:7e:cc:15:b3:38:d8:d6:
         dc:3c:5b:a4:d3:9e:85:d9:1e:83:4f:b1:7f:46:fb:9c:1c:fd:
         64:b1:94:ed:dc:84:e7:cb:ff:a8:7c:ba:45:5d:83:71:bd:8c:
         da:50:ce:c6:45:db:67:e2:02:81:70:71:22:5e:c5:c8:7f:53:
         3f:a9:db:7b:80:5e:07:d0:4e:81:8a:1c:4c:7c:16:28:02:f1:
         78:d0:b7:86:23:08:54:23:fe:f8:67:71:8b:30:cc:4d:80:0b:
         ec:6b:64:cb:a5:a7:c9:a1:eb:2e:f3:e2:19:12:fc:69:b2:3d:
         27:7f:72:f1:c8:f4:e2:fa:64:ab:af:9f:80:eb:aa:ce:a5:27:
         28:c8:2e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org