Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/886d4d782537e08d8c165660819ad1cc7c53e659.roa
File:                     886d4d782537e08d8c165660819ad1cc7c53e659.roa (raw, json)
Hash identifier:          210ZS2Wbc5mMzeNpWeC8SLymBL/NXTn07440VGGfu34=
Subject key identifier:   EC:3A:F5:DC:4E:B1:83:85:EB:99:80:97:D8:70:E7:41:8A:71:45:26
Certificate issuer:       /CN=110912d812a3612d5635fe6be68c37d72afb24e2
Certificate serial:       159E5B
Authority key identifier: 8C:F3:4C:B8:EE:8E:AF:7E:15:A8:52:DC:E3:41:01:EC:7F:FC:04:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110912d812a3612d5635fe6be68c37d72afb24e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/886d4d782537e08d8c165660819ad1cc7c53e659.roa
Signing time:             Sat 08 Oct 2022 16:34:59 +0000
ROA not before:           Fri 16 Jul 2021 03:00:00 +0000
ROA not after:            Sun 16 Jul 2023 03:00:00 +0000
asID:                     267785
IP address blocks:        45.172.16.0/24 maxlen: 24
                          45.172.17.0/24 maxlen: 24
                          45.172.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1416795 (0x159e5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110912d812a3612d5635fe6be68c37d72afb24e2
        Validity
            Not Before: Jul 16 03:00:00 2021 GMT
            Not After : Jul 16 03:00:00 2023 GMT
        Subject: CN=886d4d782537e08d8c165660819ad1cc7c53e659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:5d:ad:7e:3c:ea:af:12:c6:ed:58:8e:b8:
                    2f:ac:a8:97:e7:88:d8:f4:66:d6:a4:35:75:8c:b8:
                    c5:2b:c3:c6:bc:62:e8:00:e6:c2:97:ff:b7:99:92:
                    af:e1:cd:75:d3:ad:ef:2b:10:3e:f0:e3:b0:8e:2c:
                    1a:66:99:b5:1f:16:bf:f1:38:b5:aa:b4:f9:cc:2f:
                    b7:e5:bd:e7:a3:fe:f3:1c:d0:fc:ce:04:14:08:4f:
                    c0:b6:77:3f:df:f8:dd:23:e5:29:47:33:8a:31:c3:
                    7e:ae:b7:2f:37:40:cf:f8:7b:88:45:bc:fe:74:fb:
                    e2:cb:ca:52:34:a9:f0:4e:35:68:7e:73:4e:1f:32:
                    da:4b:3f:3e:ee:b1:96:1c:7a:7f:20:24:24:80:5f:
                    19:03:93:06:ca:41:0f:12:4c:a1:2a:c9:2b:11:26:
                    15:23:06:18:37:fe:b3:59:bd:be:ee:76:3c:d3:7d:
                    99:07:56:c4:a6:3b:5d:ab:1b:6e:9d:75:bb:28:90:
                    78:fa:9b:31:3b:ea:9d:c8:cd:ae:1d:4a:8f:bc:d5:
                    4d:02:68:a3:bf:db:3b:90:12:cd:47:e6:d3:08:8b:
                    bb:b8:54:9e:c9:9f:f1:de:7a:98:3d:74:e4:40:d3:
                    ef:cd:56:d5:f8:0c:06:37:ce:59:6e:78:63:bd:2e:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3A:F5:DC:4E:B1:83:85:EB:99:80:97:D8:70:E7:41:8A:71:45:26
            X509v3 Authority Key Identifier:
                keyid:8C:F3:4C:B8:EE:8E:AF:7E:15:A8:52:DC:E3:41:01:EC:7F:FC:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110912d812a3612d5635fe6be68c37d72afb24e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/886d4d782537e08d8c165660819ad1cc7c53e659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/110912d812a3612d5635fe6be68c37d72afb24e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.16.0-45.172.18.255

    Signature Algorithm: sha256WithRSAEncryption
         83:bb:ee:85:0b:42:2b:c3:25:a9:4b:d6:8e:ce:af:68:00:5b:
         b3:87:4b:c6:df:5d:61:10:85:24:61:0f:a4:b4:34:37:68:fa:
         50:30:1f:ee:a3:1c:42:6c:98:f0:4c:20:56:e9:7f:06:f9:3a:
         eb:eb:db:37:92:53:1d:f5:1c:95:03:bc:0b:92:ea:78:22:23:
         ba:90:0b:80:25:f1:71:f4:21:21:f2:7c:e1:c9:5b:ed:55:d1:
         73:5b:66:01:1c:82:d0:47:df:ec:8a:13:59:83:76:19:2c:81:
         e5:b5:22:e4:3f:11:e2:a9:92:43:e3:b4:95:aa:15:c4:0b:ed:
         2a:22:58:6c:47:ac:fe:7d:3a:cb:70:44:c4:17:72:93:e3:6f:
         32:65:d2:eb:39:04:db:9f:94:ef:d3:e4:ef:33:66:22:dd:cd:
         65:4e:04:92:31:1a:6d:6f:4b:1d:fe:81:44:ee:8f:fe:b3:be:
         d0:aa:41:46:2c:3e:63:d8:d5:10:87:97:69:29:d1:d0:b5:07:
         34:bb:8f:bb:40:62:f7:ef:3b:7e:04:ad:f2:45:ee:09:95:ce:
         7e:15:03:18:41:ec:61:9a:9d:09:b0:cf:10:cb:46:c1:6e:d9:
         c5:81:b3:3c:b8:ef:db:4e:11:93:56:05:0e:af:28:bc:1a:5d:
         5b:0a:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org