Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/1fbddd15de67e9d2e5bea1c5299308f52b4287de.roa
File:                     1fbddd15de67e9d2e5bea1c5299308f52b4287de.roa (raw, json)
Hash identifier:          Qf+hbgVvwUYsg+GoFDeFC/xDo1WpNWTFIwY6LfuC50U=
Subject key identifier:   95:FD:B6:82:6C:25:D4:20:B1:C6:54:F7:23:91:2E:AF:A8:F0:B8:65
Certificate issuer:       /CN=8634873a21a0af40a01354647ad4978d3847d365
Certificate serial:       11887C
Authority key identifier: 0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/1fbddd15de67e9d2e5bea1c5299308f52b4287de.roa
Signing time:             Mon 30 Aug 2021 21:40:12 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28058
IP address blocks:        179.60.48.0/23 maxlen: 24
                          200.105.112.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1149052 (0x11887c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8634873a21a0af40a01354647ad4978d3847d365
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=1fbddd15de67e9d2e5bea1c5299308f52b4287de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:c5:16:0c:60:a0:8c:f6:7d:28:8c:89:6a:
                    86:3d:db:c8:53:2f:76:08:82:f5:8f:71:5d:72:b8:
                    ff:5c:b0:8f:25:3d:cf:16:22:93:21:26:99:04:56:
                    6e:70:17:16:a7:d9:5e:8d:81:7b:a5:2b:78:b1:6b:
                    4e:49:08:80:8c:68:44:52:ad:7b:af:99:8a:7e:7c:
                    de:ae:04:b3:89:ee:d7:67:f6:6f:ea:24:73:f9:48:
                    31:7f:20:87:da:aa:61:e5:ae:ff:cd:cc:37:27:bf:
                    73:e1:17:7a:35:23:37:2f:57:7c:20:16:fd:98:af:
                    a9:61:1a:eb:45:02:b9:bd:67:06:2b:17:e1:57:27:
                    dc:2c:e8:5e:82:e1:5e:35:bb:84:a3:9c:5b:ea:d5:
                    2c:b7:5d:bf:21:d6:9d:33:03:18:93:3c:39:e9:12:
                    31:e2:a2:2c:22:2b:78:e9:db:47:37:72:3c:e5:86:
                    5a:0f:a2:b4:c1:0e:a7:73:f2:e5:f2:d5:54:b3:1e:
                    2c:ff:27:71:84:cf:81:d5:a1:4d:67:97:7c:0c:0d:
                    82:fc:ee:83:c9:34:1e:7e:5f:91:21:d3:72:39:31:
                    3c:75:96:40:94:4b:68:bc:1e:27:5d:39:4f:b3:48:
                    31:35:bc:6c:55:39:c0:45:d2:9e:83:d0:2e:ea:fb:
                    47:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FD:B6:82:6C:25:D4:20:B1:C6:54:F7:23:91:2E:AF:A8:F0:B8:65
            X509v3 Authority Key Identifier:
                keyid:0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/1fbddd15de67e9d2e5bea1c5299308f52b4287de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.48.0/23
                  200.105.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:55:20:35:75:c1:8b:43:67:8d:10:11:39:06:2f:ee:5c:
         1b:9d:ed:08:21:44:ea:ba:0d:86:0c:30:cb:e4:b5:7a:2d:68:
         ac:8c:0a:99:25:02:7d:83:f9:4e:c5:ff:46:e5:01:b1:d2:d1:
         83:aa:2d:0f:a1:12:c1:bf:b3:97:1c:99:2a:f3:ed:76:0e:bc:
         6e:62:b6:07:15:8f:84:72:7f:cd:cd:e6:b8:29:a2:03:1e:26:
         46:97:b5:0b:60:9c:f5:55:f9:77:e1:ac:f5:a9:9c:52:31:bb:
         ac:8f:11:e6:54:dd:f4:d1:79:89:89:84:55:de:c6:15:2b:2e:
         42:6e:50:cd:5f:cf:39:c2:98:13:bc:31:43:36:77:03:ed:38:
         1b:fd:9c:4f:3e:32:a2:a3:df:92:23:4f:9f:c9:85:ec:3f:4c:
         3b:28:bc:13:11:0d:e4:c1:cf:bd:7c:22:5a:91:2b:c3:bc:e2:
         c9:3e:4b:96:46:7e:74:ee:63:75:79:48:67:94:03:d8:da:c7:
         c7:16:9f:80:6b:28:13:ca:a4:b4:b8:13:89:25:00:d7:c4:55:
         a5:49:37:94:69:1f:cd:b7:b5:cd:fd:f9:31:d4:4b:0d:a4:b2:
         f0:89:e1:6c:49:50:9d:8f:f9:95:39:85:83:1c:a2:6b:e2:65:
         30:2c:96:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:54 2023 by rpki-client on console-ams.rpki-client.org