Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/b99c2d0aaf83f09f48e194657d6d608a8273fa7d.roa
File:                     b99c2d0aaf83f09f48e194657d6d608a8273fa7d.roa (raw, json)
Hash identifier:          F+85OGGLhafHEs7Wq5bdo0w6KUvqnX849WDj3VNo5DE=
Subject key identifier:   EF:34:65:52:C6:8B:92:E3:2B:17:E3:3E:12:A5:30:0F:1E:65:37:FE
Certificate issuer:       /CN=b8e5cbfb9465a07deba594219e5ffc698fbfbabb
Certificate serial:       07161F
Authority key identifier: 00:6D:71:13:48:C6:78:C3:31:34:E9:B4:AB:28:C4:BB:2B:F0:E7:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/b99c2d0aaf83f09f48e194657d6d608a8273fa7d.roa
Signing time:             Fri 13 Jan 2023 23:31:02 +0000
ROA not before:           Sun 24 Apr 2022 03:00:00 +0000
ROA not after:            Thu 25 May 2023 03:00:00 +0000
asID:                     52468
IP address blocks:        165.98.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464415 (0x7161f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e5cbfb9465a07deba594219e5ffc698fbfbabb
        Validity
            Not Before: Apr 24 03:00:00 2022 GMT
            Not After : May 25 03:00:00 2023 GMT
        Subject: CN=b99c2d0aaf83f09f48e194657d6d608a8273fa7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:08:d2:be:11:2d:33:1e:7c:6f:9c:8d:88:
                    6e:d4:7b:18:f4:80:b9:3c:f1:b4:87:44:1a:41:49:
                    2d:8b:ab:d9:a3:ef:28:d7:b0:a1:5f:14:c1:23:3a:
                    1c:9e:f5:c1:d1:bb:09:e8:52:e1:ab:fd:33:e9:14:
                    a9:37:f0:97:c9:86:c0:06:a2:d7:b8:d7:92:d4:f9:
                    b4:8f:e0:95:51:4f:19:d3:e3:ab:cb:8c:66:98:ff:
                    38:3a:b4:19:fb:e8:c3:1c:c4:d4:46:a5:fe:6d:07:
                    58:7d:b3:89:11:dc:d2:6a:15:1f:7d:62:e7:1d:3b:
                    8c:9c:e5:18:e0:79:34:fc:72:0a:f2:61:9c:d3:7e:
                    bb:c3:f7:b2:13:fd:d2:82:ef:21:c7:f6:44:e0:9b:
                    6f:31:7e:0a:4a:7d:ca:81:1c:04:43:0b:e5:93:ec:
                    66:9e:53:2d:a7:cb:c1:68:14:47:3e:87:17:52:7d:
                    4c:fe:4f:8a:b0:20:d9:42:3a:71:08:9b:d9:49:55:
                    ea:ee:7c:09:f9:5c:2d:ba:2d:9b:94:a2:1a:42:b0:
                    11:7c:f1:45:c1:b6:44:bf:75:22:e6:fb:a8:47:b9:
                    6e:08:2a:18:1f:e2:36:e3:58:aa:d3:b8:10:a0:90:
                    c1:14:4e:e4:5c:7a:26:5a:10:ee:e1:28:e3:64:c7:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:34:65:52:C6:8B:92:E3:2B:17:E3:3E:12:A5:30:0F:1E:65:37:FE
            X509v3 Authority Key Identifier:
                keyid:00:6D:71:13:48:C6:78:C3:31:34:E9:B4:AB:28:C4:BB:2B:F0:E7:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/b99c2d0aaf83f09f48e194657d6d608a8273fa7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ec:f7:b8:8a:ad:e2:06:fd:b4:b2:da:96:b2:28:b8:48:59:
         f8:13:0a:8b:94:48:54:f9:93:0b:fd:f6:04:53:8a:e4:51:27:
         4d:49:db:9d:fe:7d:9b:0b:2a:8f:8c:15:01:ac:ec:c0:93:91:
         f2:90:c7:f9:9c:ff:12:4f:05:8e:f3:df:9b:5d:6d:15:26:71:
         d0:22:81:af:a9:08:63:e5:d4:e6:2e:20:9c:ef:58:80:f5:28:
         39:25:8c:32:d6:1f:f4:f1:fc:d8:d5:7b:0d:25:94:60:d9:38:
         0d:b8:a8:12:23:2b:22:ee:4b:13:fc:fa:d0:9e:70:8f:2d:ec:
         d1:61:f9:ba:20:57:73:1a:c9:bf:77:b9:16:5a:f1:b8:bd:d5:
         0a:06:cc:3d:66:91:95:26:91:cc:be:90:44:57:e3:b2:3d:37:
         73:7f:cd:ea:fb:d1:dc:ff:b3:d7:8c:9b:7c:9c:f1:ad:73:2f:
         02:0c:8d:48:d7:60:c7:b7:25:81:00:4c:f3:6b:7d:3e:32:9a:
         91:17:56:fd:e6:44:37:d6:ab:9d:72:5a:16:c6:e2:75:c6:08:
         f6:be:ec:5f:ee:99:0e:30:61:42:44:f6:11:52:38:39:67:fb:
         28:5e:0b:f1:b5:94:38:23:9f:5f:26:ba:1e:5e:35:c1:f3:df:
         36:e9:8a:35
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBxYfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI4
ZTVjYmZiOTQ2NWEwN2RlYmE1OTQyMTllNWZmYzY5OGZiZmJhYmIwHhcNMjIwNDI0
MDMwMDAwWhcNMjMwNTI1MDMwMDAwWjAzMTEwLwYDVQQDEyhiOTljMmQwYWFmODNm
MDlmNDhlMTk0NjU3ZDZkNjA4YTgyNzNmYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArE4I0r4RLTMefG+cjYhu1HsY9IC5PPG0h0QaQUkti6vZo+8o
17ChXxTBIzocnvXB0bsJ6FLhq/0z6RSpN/CXyYbABqLXuNeS1Pm0j+CVUU8Z0+Or
y4xmmP84OrQZ++jDHMTURqX+bQdYfbOJEdzSahUffWLnHTuMnOUY4Hk0/HIK8mGc
0367w/eyE/3Sgu8hx/ZE4JtvMX4KSn3KgRwEQwvlk+xmnlMtp8vBaBRHPocXUn1M
/k+KsCDZQjpxCJvZSVXq7nwJ+Vwtui2blKIaQrARfPFFwbZEv3Ui5vuoR7luCCoY
H+I241iq07gQoJDBFE7kXHomWhDu4SjjZMfbuQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFO80ZVLGi5LjKxfjPhKlMA8eZTf+MB8GA1UdIwQYMBaAFABtcRNIxnjDMTTp
tKsoxLsr8Oc9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjhlNWNi
ZmI5NDY1YTA3ZGViYTU5NDIxOWU1ZmZjNjk4ZmJmYmFiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDAzYmY4MjUtYjE0NC00NzZkLTg5YzctNDk4N2Jk
YzMyOGRhL2I5OWMyZDBhYWY4M2YwOWY0OGUxOTQ2NTdkNmQ2MDhhODI3M2ZhN2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMDNiZjgyNS1iMTQ0LTQ3NmQtODljNy00OTg3
YmRjMzI4ZGEvYjhlNWNiZmI5NDY1YTA3ZGViYTU5NDIxOWU1ZmZjNjk4ZmJmYmFi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKVi2zANBgkqhkiG9w0BAQsFAAOCAQEASOz3uIqt4gb9tLLa
lrIouEhZ+BMKi5RIVPmTC/32BFOK5FEnTUnbnf59mwsqj4wVAazswJOR8pDH+Zz/
Ek8FjvPfm11tFSZx0CKBr6kIY+XU5i4gnO9YgPUoOSWMMtYf9PH82NV7DSWUYNk4
DbioEiMrIu5LE/z60J5wjy3s0WH5uiBXcxrJv3e5FlrxuL3VCgbMPWaRlSaRzL6Q
RFfjsj03c3/N6vvR3P+z14ybfJzxrXMvAgyNSNdgx7clgQBM82t9PjKakRdW/eZE
N9arnXJaFsbidcYI9r7sX+6ZDjBhQkT2EVI4OWf7KF4L8bWUOCOfXya6Hl41wfPf
NumKNQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org