Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/39438c9689d16ffb4b2aedd970803833e2635806.roa
File:                     39438c9689d16ffb4b2aedd970803833e2635806.roa (raw, json)
Hash identifier:          szU/X944NJkLio0nC4OCJJcKeEXBXxuKqjyuI8hMg8s=
Subject key identifier:   A9:77:C0:28:5E:B6:CD:A9:44:E2:85:5E:5F:FE:C9:E4:85:63:33:07
Certificate issuer:       /CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
Certificate serial:       0306
Authority key identifier: 05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/39438c9689d16ffb4b2aedd970803833e2635806.roa
Signing time:             Thu 15 Apr 2021 16:39:44 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     262186
IP address blocks:        45.177.109.0/24 maxlen: 24
                          45.177.110.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 774 (0x306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=39438c9689d16ffb4b2aedd970803833e2635806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c0:24:7e:98:8d:66:c7:55:e7:de:44:5d:ac:
                    34:8c:81:60:0f:66:fd:2a:a9:c7:f7:a7:81:3b:05:
                    7d:01:fe:55:3e:f7:0e:98:c0:0b:0c:1b:7a:88:ad:
                    0f:27:64:4e:c4:3a:ef:af:2f:12:3e:bd:27:d9:38:
                    59:71:e3:47:26:10:fc:87:d9:b2:75:19:b8:ed:5a:
                    f2:49:20:b2:7d:a0:cc:a1:39:01:de:30:b2:be:01:
                    47:7e:61:f0:b2:92:32:e3:bc:9f:ae:9a:ec:6c:02:
                    ea:26:9b:56:7c:8f:01:e5:8f:9d:72:2e:86:3d:67:
                    78:34:29:e3:84:f6:28:d4:ec:05:aa:1c:84:10:92:
                    7f:4f:ae:3f:f3:bf:3e:9e:b1:21:f2:55:93:fe:6f:
                    ce:7a:26:cb:84:dc:e8:4c:01:8a:7f:a5:3e:3d:94:
                    7f:ae:8f:0b:9d:96:a6:9c:0f:2c:e1:2f:cc:25:19:
                    56:07:de:29:e0:c3:6e:a6:6b:f1:3f:b6:80:83:9c:
                    d2:d5:0e:3e:07:39:48:bc:22:41:a2:6f:7e:ff:c7:
                    da:90:63:52:8b:5d:13:ae:7a:6f:da:69:d6:20:32:
                    bd:20:a4:e4:cb:f3:58:ab:4b:19:5b:1a:5d:73:02:
                    74:18:d4:56:84:6b:18:f7:3e:19:b4:dc:a5:ad:d1:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:77:C0:28:5E:B6:CD:A9:44:E2:85:5E:5F:FE:C9:E4:85:63:33:07
            X509v3 Authority Key Identifier:
                keyid:05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/39438c9689d16ffb4b2aedd970803833e2635806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.109.0-45.177.111.255

    Signature Algorithm: sha256WithRSAEncryption
         54:01:f2:0c:16:cf:7d:d6:64:85:c0:e6:a9:3f:81:a9:fe:d4:
         2e:a5:ec:dd:34:65:bb:ab:72:c2:18:11:2b:93:6b:4b:7c:71:
         2f:2a:d4:b5:61:86:97:bd:74:55:30:01:d9:31:b5:ff:5c:15:
         26:8b:61:75:e5:4e:d6:e4:c9:a6:ee:a9:4c:28:9c:97:b0:4f:
         21:50:fd:ef:07:0c:9a:74:d9:74:02:a6:aa:fb:e5:a0:a3:15:
         e6:45:62:77:9d:42:5e:4f:47:cb:ac:c9:19:c3:0b:9b:1f:1e:
         57:8f:56:ca:fb:41:21:81:3b:37:33:77:f3:23:0c:fa:9f:bd:
         74:b3:64:a2:33:24:92:48:33:b2:30:c7:f8:7b:5f:c7:19:aa:
         8c:a1:20:e2:b7:f1:1f:c6:21:c4:06:61:4e:5b:bf:fb:9a:25:
         9f:7c:f9:8f:22:22:76:0e:34:05:28:d7:28:37:8d:4c:5a:0a:
         0b:1b:18:ee:26:54:a3:75:1d:6b:e4:7c:23:7b:fe:70:a9:af:
         c6:7b:c0:cf:0f:ef:68:e6:fe:96:5e:fe:b2:72:b8:e1:0d:7d:
         b1:2e:07:a8:19:7d:df:44:74:f6:76:0b:b8:b0:bb:de:75:59:
         59:33:25:35:4b:e0:28:36:c2:b4:ad:18:8e:0b:97:1d:64:c5:
         1b:29:ba:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-fra.rpki-client.org