Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/557ecc034de51f13cc1eaa1ecf0a673c57284a64.roa
File:                     557ecc034de51f13cc1eaa1ecf0a673c57284a64.roa (raw, json)
Hash identifier:          FVOjzoO5sXZnZen35H0N2RhvDsPlLE+7AYVsP4lT/u0=
Subject key identifier:   FC:75:91:A9:24:51:0E:3C:B3:8A:4F:61:47:60:C3:CF:D2:CC:97:F2
Certificate issuer:       /CN=110912d812a3612d5635fe6be68c37d72afb24e2
Certificate serial:       199EE7
Authority key identifier: 8C:F3:4C:B8:EE:8E:AF:7E:15:A8:52:DC:E3:41:01:EC:7F:FC:04:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110912d812a3612d5635fe6be68c37d72afb24e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/557ecc034de51f13cc1eaa1ecf0a673c57284a64.roa
Signing time:             Thu 16 Mar 2023 00:04:42 +0000
ROA not before:           Thu 15 Jul 2021 03:00:00 +0000
ROA not after:            Sun 16 Jul 2023 03:00:00 +0000
asID:                     267785
IP address blocks:        45.172.16.0/24 maxlen: 24
                          45.172.17.0/24 maxlen: 24
                          45.172.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679079 (0x199ee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110912d812a3612d5635fe6be68c37d72afb24e2
        Validity
            Not Before: Jul 15 03:00:00 2021 GMT
            Not After : Jul 16 03:00:00 2023 GMT
        Subject: CN=557ecc034de51f13cc1eaa1ecf0a673c57284a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:32:35:21:6c:a3:53:69:76:6f:6e:83:0e:
                    90:75:89:56:b1:bd:10:63:0b:19:11:81:bc:01:0e:
                    62:95:17:9f:40:e1:d9:93:ad:ef:a3:27:2b:63:e0:
                    b4:15:e0:1b:37:f7:4c:52:a8:c7:61:cd:d6:0e:6e:
                    b4:7d:aa:d6:73:87:6b:a7:64:5e:ad:e6:78:50:e6:
                    11:35:58:a8:4a:50:7a:27:c6:55:5a:db:40:a6:9b:
                    e3:28:64:da:1d:65:d2:29:44:97:7a:be:d7:23:7f:
                    2d:c3:77:2c:e2:dc:2b:a8:24:73:38:34:99:61:72:
                    b1:9d:71:8a:5a:5f:50:ec:4e:03:2a:87:fc:a9:25:
                    f4:9f:70:35:c1:99:77:64:86:4b:a0:e6:3b:56:0b:
                    f3:eb:bd:74:43:07:2c:4b:14:b7:56:4f:73:94:56:
                    66:cb:6e:a3:2d:92:c6:70:44:42:0d:b6:5b:a4:31:
                    02:7f:91:6d:03:fa:6d:cb:aa:4e:d3:f8:e9:33:30:
                    43:be:ae:1c:ee:99:13:26:d3:3a:e4:17:71:44:4f:
                    f7:83:34:f7:93:2b:d6:22:72:a9:79:ef:e9:a1:4a:
                    23:03:35:7a:83:5b:d6:5e:f2:2a:7c:ad:b9:53:c5:
                    07:92:ca:6c:f9:c2:8b:06:b8:45:ac:5f:bb:80:8a:
                    c1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:75:91:A9:24:51:0E:3C:B3:8A:4F:61:47:60:C3:CF:D2:CC:97:F2
            X509v3 Authority Key Identifier:
                keyid:8C:F3:4C:B8:EE:8E:AF:7E:15:A8:52:DC:E3:41:01:EC:7F:FC:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110912d812a3612d5635fe6be68c37d72afb24e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/557ecc034de51f13cc1eaa1ecf0a673c57284a64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/110912d812a3612d5635fe6be68c37d72afb24e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.16.0-45.172.18.255

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:a1:e9:61:08:5e:05:01:7c:4c:9e:a0:68:b3:b8:2a:f8:
         cd:66:81:28:66:4e:fc:b1:69:6e:71:2c:f3:1a:f4:39:8d:9e:
         dc:35:9b:53:d6:16:a7:b5:14:f2:82:f5:87:57:d8:e6:07:4f:
         e6:3f:60:0b:c9:6d:b4:ca:27:a9:e9:a7:ac:88:bf:1f:cf:40:
         00:ca:44:77:bf:11:75:51:20:52:89:7f:b0:e9:0c:70:f2:d1:
         6e:f2:3e:3d:19:60:3d:4f:37:70:3b:50:a0:9e:f2:71:e9:fb:
         33:57:3e:ce:ec:c1:4f:4f:dd:16:9d:1a:f6:8b:0c:27:b6:d4:
         da:90:ad:bf:d1:db:00:94:05:7a:d2:a9:cd:2b:de:c2:d6:4e:
         3f:04:c9:0e:6c:12:e7:34:6e:16:ed:d2:3e:3b:c3:a6:45:09:
         56:30:f8:52:44:5f:73:92:45:e6:20:18:1e:4e:69:da:24:d4:
         ea:1c:cc:ad:e1:ba:23:22:12:46:3e:cb:87:95:c1:ef:90:00:
         70:c3:dd:14:83:a8:ad:4f:36:fe:70:e1:a7:0d:f1:1c:97:d0:
         d2:62:bd:76:2b:36:86:bf:7b:b8:cd:b7:7f:89:6c:fe:d2:f7:
         d4:49:af:f1:2d:7e:fc:19:c9:91:15:57:81:1d:30:06:58:25:
         bc:fd:6f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org