Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/5c91a252e97dbf84dbd3e0ef3de83e27e35ec766.roa
File:                     5c91a252e97dbf84dbd3e0ef3de83e27e35ec766.roa (raw, json)
Hash identifier:          c9ZETmddYWypkg2V0pxaC6HUptnaeBeOdICrCvQgi6c=
Subject key identifier:   CD:47:FC:8F:A3:6E:F9:7F:3D:CE:4B:60:4D:F5:82:D7:D6:1B:33:76
Certificate issuer:       /CN=b85681cb3788741f37ae8f16dc7e84b962b71feb
Certificate serial:       0B6917
Authority key identifier: B6:B4:78:A9:EE:DF:4C:5C:18:C6:F3:B4:F7:E4:EA:71:7A:CA:44:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b85681cb3788741f37ae8f16dc7e84b962b71feb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/5c91a252e97dbf84dbd3e0ef3de83e27e35ec766.roa
Signing time:             Wed 24 Mar 2021 14:29:05 +0000
ROA not before:           Wed 24 Mar 2021 14:29:05 +0000
ROA not after:            Tue 24 Mar 2026 14:29:05 +0000
asID:                     267864
IP address blocks:        45.176.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747799 (0xb6917)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85681cb3788741f37ae8f16dc7e84b962b71feb
        Validity
            Not Before: Mar 24 14:29:05 2021 GMT
            Not After : Mar 24 14:29:05 2026 GMT
        Subject: CN=5c91a252e97dbf84dbd3e0ef3de83e27e35ec766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:60:41:0e:93:8f:78:20:b4:ed:58:3f:c7:e2:
                    6f:4e:fe:bc:7f:fa:28:f4:c9:df:ab:46:d6:72:f0:
                    ed:b5:2a:57:4a:da:0a:f5:13:d9:2e:4b:31:90:2b:
                    a0:18:09:da:af:c1:37:25:9b:11:09:d5:b0:9b:09:
                    b5:82:3c:ec:58:28:e3:a8:44:d4:00:ee:08:05:7e:
                    94:03:03:de:bd:14:d1:a2:00:3f:c4:cf:fe:f5:bb:
                    6f:d2:78:cb:f2:1e:70:1a:c4:24:84:bf:09:23:cb:
                    5a:20:ba:92:9f:20:9e:47:be:f1:1b:74:be:e8:a6:
                    a7:7d:fd:cc:f5:6d:4d:1b:85:2f:d6:8a:73:5f:ee:
                    e1:fc:8b:0f:c1:6c:49:7a:69:ef:46:9a:23:a6:40:
                    04:6b:19:82:97:d4:bc:7f:cd:8b:6b:90:0f:3d:9c:
                    58:5d:8c:34:7d:e8:a8:2a:20:b1:78:86:99:45:47:
                    b7:13:81:47:84:6e:ae:3c:0f:c7:71:c6:fc:bc:e4:
                    dd:4e:c8:14:18:30:3c:8b:f4:f2:28:bf:be:3a:58:
                    fd:20:de:95:b4:c3:5a:56:02:e9:64:4b:c9:68:66:
                    90:be:de:36:75:70:1a:19:4a:65:d9:98:b9:c8:de:
                    8d:b0:de:7e:20:b8:23:3b:07:76:09:41:45:71:05:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:47:FC:8F:A3:6E:F9:7F:3D:CE:4B:60:4D:F5:82:D7:D6:1B:33:76
            X509v3 Authority Key Identifier:
                keyid:B6:B4:78:A9:EE:DF:4C:5C:18:C6:F3:B4:F7:E4:EA:71:7A:CA:44:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b85681cb3788741f37ae8f16dc7e84b962b71feb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/5c91a252e97dbf84dbd3e0ef3de83e27e35ec766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/b85681cb3788741f37ae8f16dc7e84b962b71feb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:28:c6:e7:92:63:64:b3:2c:c2:d8:d8:f3:85:f2:99:ad:e3:
         4c:78:a1:51:1f:b1:d7:27:25:88:10:07:32:a1:79:fa:a6:a0:
         dc:3a:31:16:d1:88:78:b4:28:24:91:bc:3f:8a:88:e2:82:e3:
         d0:75:28:50:3a:d0:87:53:18:ec:91:45:47:28:4d:51:85:70:
         85:7b:a4:21:07:3e:4a:6e:b4:76:1e:8a:03:4b:95:86:bc:10:
         97:f8:2b:a5:0b:23:d3:cf:d2:70:8b:59:0c:53:72:12:95:4d:
         51:af:c8:82:c3:46:93:85:36:c6:7d:be:56:83:12:3a:18:a1:
         73:c6:3b:96:a3:4a:92:2f:87:75:e5:eb:6d:d1:f8:b8:be:32:
         00:19:d0:29:c9:0e:2f:e8:63:96:b7:14:07:5d:9e:4d:1e:ce:
         e6:fc:54:a0:15:86:2a:78:7f:ed:1b:e0:2e:7c:17:5b:97:46:
         59:b5:04:34:21:3d:4c:bb:7a:88:72:9c:3b:2f:47:21:fb:3d:
         4c:f5:9a:41:ee:c9:4e:30:55:ff:03:d1:d7:e7:0e:35:49:62:
         5e:39:f8:20:0a:29:05:d2:26:a2:df:a2:6b:80:11:89:28:b2:
         5e:69:e9:5b:0d:6f:4d:6b:9e:60:24:e2:03:4d:60:f9:f2:ba:
         10:ac:d7:b1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC2kXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI4
NTY4MWNiMzc4ODc0MWYzN2FlOGYxNmRjN2U4NGI5NjJiNzFmZWIwHhcNMjEwMzI0
MTQyOTA1WhcNMjYwMzI0MTQyOTA1WjAzMTEwLwYDVQQDEyg1YzkxYTI1MmU5N2Ri
Zjg0ZGJkM2UwZWYzZGU4M2UyN2UzNWVjNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAimBBDpOPeCC07Vg/x+JvTv68f/oo9Mnfq0bWcvDttSpXStoK
9RPZLksxkCugGAnar8E3JZsRCdWwmwm1gjzsWCjjqETUAO4IBX6UAwPevRTRogA/
xM/+9btv0njL8h5wGsQkhL8JI8taILqSnyCeR77xG3S+6Kanff3M9W1NG4Uv1opz
X+7h/IsPwWxJemnvRpojpkAEaxmCl9S8f82La5APPZxYXYw0feioKiCxeIaZRUe3
E4FHhG6uPA/Hccb8vOTdTsgUGDA8i/TyKL++Olj9IN6VtMNaVgLpZEvJaGaQvt42
dXAaGUpl2Zi5yN6NsN5+ILgjOwd2CUFFcQX9UwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFM1H/I+jbvl/Pc5LYE31gtfWGzN2MB8GA1UdIwQYMBaAFLa0eKnu30xcGMbz
tPfk6nF6ykTGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjg1Njgx
Y2IzNzg4NzQxZjM3YWU4ZjE2ZGM3ZTg0Yjk2MmI3MWZlYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI5ZDFkM2EtZTRiMC00ODFlLThlMzctYTMyOGRm
MmUwNDBiLzVjOTFhMjUyZTk3ZGJmODRkYmQzZTBlZjNkZTgzZTI3ZTM1ZWM3NjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjlkMWQzYS1lNGIwLTQ4MWUtOGUzNy1hMzI4
ZGYyZTA0MGIvYjg1NjgxY2IzNzg4NzQxZjM3YWU4ZjE2ZGM3ZTg0Yjk2MmI3MWZl
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2wWDANBgkqhkiG9w0BAQsFAAOCAQEAUyjG55JjZLMswtjY
84Xyma3jTHihUR+x1ycliBAHMqF5+qag3DoxFtGIeLQoJJG8P4qI4oLj0HUoUDrQ
h1MY7JFFRyhNUYVwhXukIQc+Sm60dh6KA0uVhrwQl/grpQsj08/ScItZDFNyEpVN
Ua/IgsNGk4U2xn2+VoMSOhihc8Y7lqNKki+HdeXrbdH4uL4yABnQKckOL+hjlrcU
B12eTR7O5vxUoBWGKnh/7RvgLnwXW5dGWbUENCE9TLt6iHKcOy9HIfs9TPWaQe7J
TjBV/wPR1+cONUliXjn4IAopBdImot+ia4ARiSiyXmnpWw1vTWueYCTiA01g+fK6
EKzXsQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org