Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03efe43f-f1e5-4542-b99a-8f07fad1d4d1/c49473337e0affc96285188160d564c5bd85ec26.roa
File:                     c49473337e0affc96285188160d564c5bd85ec26.roa (raw, json)
Hash identifier:          cBsZveY1fTsk/KOrW36g3xaHPpiSChFdujSd+ZtOs1A=
Subject key identifier:   C6:10:54:F9:74:B9:A5:A5:06:54:42:F8:44:9C:F2:23:1D:C8:44:9A
Certificate issuer:       /CN=73c54cefdcda0c2f8f7a0b8822f7e92c8f371519
Certificate serial:       0DFA66
Authority key identifier: E5:AF:26:E5:C8:C4:04:C9:ED:A7:DB:5B:6D:AE:F8:16:A2:71:0A:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c54cefdcda0c2f8f7a0b8822f7e92c8f371519.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03efe43f-f1e5-4542-b99a-8f07fad1d4d1/c49473337e0affc96285188160d564c5bd85ec26.roa
Signing time:             Wed 24 Mar 2021 14:30:13 +0000
ROA not before:           Wed 24 Mar 2021 14:30:13 +0000
ROA not after:            Tue 24 Mar 2026 14:30:13 +0000
asID:                     28073
IP address blocks:        170.84.128.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916070 (0xdfa66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c54cefdcda0c2f8f7a0b8822f7e92c8f371519
        Validity
            Not Before: Mar 24 14:30:13 2021 GMT
            Not After : Mar 24 14:30:13 2026 GMT
        Subject: CN=c49473337e0affc96285188160d564c5bd85ec26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:be:1e:26:22:6f:e0:e7:d4:d4:5b:0e:79:4c:
                    fe:e1:e2:6b:37:76:61:3d:86:56:52:b0:83:cd:ff:
                    3a:b2:5e:b3:16:c8:7f:7c:ae:00:b0:8d:d8:47:f8:
                    65:bc:41:e1:e8:3f:0b:0f:a9:09:8d:cb:0c:0d:7b:
                    90:fd:f9:ce:27:f9:51:db:9e:f6:2a:f7:e1:a0:96:
                    51:44:5e:50:04:dc:ed:ff:fd:cd:68:60:c1:c6:52:
                    d2:0d:94:9b:75:18:97:1d:4f:90:96:45:7c:62:fa:
                    ae:f6:e8:01:3d:15:04:3f:d7:8b:bc:e0:ca:13:d5:
                    24:33:84:79:a0:f5:69:8b:99:0a:27:f6:76:b4:c1:
                    49:72:ce:58:74:41:67:22:c9:c4:f8:d7:2d:13:0d:
                    e9:55:61:22:39:88:26:04:c1:2d:16:9b:33:5d:24:
                    c7:dc:12:2a:e3:4b:96:51:68:30:48:c7:d5:a1:e1:
                    46:34:cd:23:e6:16:f1:05:59:ee:59:b5:4e:7c:7c:
                    d7:47:c9:58:d5:f5:fc:dc:72:0e:68:e2:37:a8:da:
                    ca:4d:7e:13:11:d6:c8:1e:29:f7:fc:20:18:4d:4b:
                    9d:27:7c:91:fd:51:50:15:23:e5:2a:2d:6e:20:d5:
                    cb:e4:32:9b:b9:75:03:d7:de:c7:ca:25:62:65:19:
                    cf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:10:54:F9:74:B9:A5:A5:06:54:42:F8:44:9C:F2:23:1D:C8:44:9A
            X509v3 Authority Key Identifier:
                keyid:E5:AF:26:E5:C8:C4:04:C9:ED:A7:DB:5B:6D:AE:F8:16:A2:71:0A:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c54cefdcda0c2f8f7a0b8822f7e92c8f371519.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03efe43f-f1e5-4542-b99a-8f07fad1d4d1/c49473337e0affc96285188160d564c5bd85ec26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03efe43f-f1e5-4542-b99a-8f07fad1d4d1/73c54cefdcda0c2f8f7a0b8822f7e92c8f371519.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:71:b2:65:b1:5a:43:4d:53:77:da:9d:ee:ed:fa:32:31:fe:
         45:18:dc:4e:0d:ca:a3:8e:ea:1c:77:2a:fc:14:75:fa:03:b4:
         bd:80:9f:9e:bf:56:51:4d:87:70:49:f1:9e:c5:26:e3:bb:c9:
         63:bb:83:17:a5:16:4c:ef:72:0e:df:e7:c6:7c:6b:44:bf:ee:
         02:7e:89:3c:0c:23:cf:96:0d:5d:20:0e:6f:a8:92:58:e4:0a:
         0f:be:a6:f7:b6:87:c8:e8:c0:a3:56:9c:78:fb:f1:73:07:fb:
         f9:0d:c8:32:e0:26:e2:c3:7b:fb:69:0a:e2:69:b7:2a:8b:8f:
         01:f8:af:22:7e:8a:14:ce:94:fb:00:be:6a:ad:65:6c:fc:51:
         b8:46:f2:ac:3a:91:b4:86:69:a8:4b:e9:18:ec:e9:76:e4:d5:
         41:8a:bd:d2:fa:13:37:4e:ff:32:a7:1d:05:72:4c:6e:cc:56:
         31:eb:49:eb:25:19:ec:14:bf:12:2d:b1:6c:75:a8:57:03:15:
         30:8f:fc:02:3a:65:4b:10:0b:aa:cd:93:60:28:35:79:50:91:
         c0:3e:43:a4:18:47:19:80:8a:d2:f4:2a:04:51:d4:ff:30:c9:
         d3:23:11:78:62:46:75:84:e3:e3:6a:fe:34:a3:c2:0f:7b:c3:
         fd:63:45:4a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDfpmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcz
YzU0Y2VmZGNkYTBjMmY4ZjdhMGI4ODIyZjdlOTJjOGYzNzE1MTkwHhcNMjEwMzI0
MTQzMDEzWhcNMjYwMzI0MTQzMDEzWjAzMTEwLwYDVQQDEyhjNDk0NzMzMzdlMGFm
ZmM5NjI4NTE4ODE2MGQ1NjRjNWJkODVlYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7L4eJiJv4OfU1FsOeUz+4eJrN3ZhPYZWUrCDzf86sl6zFsh/
fK4AsI3YR/hlvEHh6D8LD6kJjcsMDXuQ/fnOJ/lR2572KvfhoJZRRF5QBNzt//3N
aGDBxlLSDZSbdRiXHU+QlkV8Yvqu9ugBPRUEP9eLvODKE9UkM4R5oPVpi5kKJ/Z2
tMFJcs5YdEFnIsnE+NctEw3pVWEiOYgmBMEtFpszXSTH3BIq40uWUWgwSMfVoeFG
NM0j5hbxBVnuWbVOfHzXR8lY1fX83HIOaOI3qNrKTX4TEdbIHin3/CAYTUudJ3yR
/VFQFSPlKi1uINXL5DKbuXUD197HyiViZRnPjQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMYQVPl0uaWlBlRC+ESc8iMdyESaMB8GA1UdIwQYMBaAFOWvJuXIxATJ7afb
W22u+BaicQqZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzNjNTRj
ZWZkY2RhMGMyZjhmN2EwYjg4MjJmN2U5MmM4ZjM3MTUxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDNlZmU0M2YtZjFlNS00NTQyLWI5OWEtOGYwN2Zh
ZDFkNGQxL2M0OTQ3MzMzN2UwYWZmYzk2Mjg1MTg4MTYwZDU2NGM1YmQ4NWVjMjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wM2VmZTQzZi1mMWU1LTQ1NDItYjk5YS04ZjA3
ZmFkMWQ0ZDEvNzNjNTRjZWZkY2RhMGMyZjhmN2EwYjg4MjJmN2U5MmM4ZjM3MTUx
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqpUgDANBgkqhkiG9w0BAQsFAAOCAQEAV3GyZbFaQ01Td9qd
7u36MjH+RRjcTg3Ko47qHHcq/BR1+gO0vYCfnr9WUU2HcEnxnsUm47vJY7uDF6UW
TO9yDt/nxnxrRL/uAn6JPAwjz5YNXSAOb6iSWOQKD76m97aHyOjAo1acePvxcwf7
+Q3IMuAm4sN7+2kK4mm3KouPAfivIn6KFM6U+wC+aq1lbPxRuEbyrDqRtIZpqEvp
GOzpduTVQYq90voTN07/MqcdBXJMbsxWMetJ6yUZ7BS/Ei2xbHWoVwMVMI/8Ajpl
SxALqs2TYCg1eVCRwD5DpBhHGYCK0vQqBFHU/zDJ0yMReGJGdYTj42r+NKPCD3vD
/WNFSg==
-----END CERTIFICATE-----
Generated at Mon Sep 18 11:34:50 2023 by rpki-client on console-ams.rpki-client.org