Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/12893ff723d081816552700a2968b8b5c4ea0a0e.roa
File:                     12893ff723d081816552700a2968b8b5c4ea0a0e.roa (raw, json)
Hash identifier:          IhL0CPwYsW1gEPRUDiwaALVXvlhh+OaSReN8uUILC/A=
Subject key identifier:   36:20:5E:64:05:5E:51:32:09:AB:7A:E1:3E:92:C4:7E:83:77:0B:DA
Certificate issuer:       /CN=8fd397f8d47b3a369017afd14e695229eb571750
Certificate serial:       0A8372
Authority key identifier: 45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fd397f8d47b3a369017afd14e695229eb571750.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/12893ff723d081816552700a2968b8b5c4ea0a0e.roa
Signing time:             Fri 30 Jul 2021 18:32:30 +0000
ROA not before:           Sat 01 May 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265865
IP address blocks:        138.117.14.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689010 (0xa8372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd397f8d47b3a369017afd14e695229eb571750
        Validity
            Not Before: May  1 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=12893ff723d081816552700a2968b8b5c4ea0a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:fc:68:5a:d1:9a:23:4c:44:83:15:bd:fd:
                    5d:e4:5c:ae:32:2e:e4:b1:d1:1d:a9:95:5e:10:6c:
                    9d:5e:fe:83:7f:70:f3:5b:65:70:b8:c3:e9:2c:33:
                    fa:8d:dd:59:ce:1c:b6:c0:a4:b6:60:e3:60:d4:54:
                    ee:48:9c:6e:f9:77:df:c0:72:4e:4d:f4:5a:4f:d1:
                    fd:25:1b:a9:1e:01:9c:0f:77:15:b8:86:87:5a:24:
                    6e:62:1b:fd:67:6a:3d:81:bc:a6:7f:60:35:b3:e1:
                    b3:b1:e2:82:98:a8:23:40:5c:95:f0:dc:ca:da:57:
                    86:69:b5:3c:63:53:9f:92:30:d5:7d:4d:94:fd:d2:
                    d6:fb:d7:fa:bb:a3:86:17:b2:b4:8f:01:90:92:70:
                    6a:2d:16:56:01:43:00:93:02:31:68:87:63:a0:1a:
                    45:55:ef:e7:ca:91:c6:82:21:49:03:25:73:c6:ed:
                    c2:65:69:14:41:29:46:8d:44:23:bf:21:4c:9c:e4:
                    ce:f2:dc:9f:58:aa:28:33:11:d7:35:d6:3d:4b:1f:
                    37:a4:92:1e:b7:15:ab:78:d6:84:46:b3:b5:8a:15:
                    23:59:47:ee:38:9b:c8:c3:c7:cd:eb:31:3d:1f:30:
                    3e:31:3d:3f:f1:2a:79:ca:e4:7e:03:91:4b:5c:1d:
                    54:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:20:5E:64:05:5E:51:32:09:AB:7A:E1:3E:92:C4:7E:83:77:0B:DA
            X509v3 Authority Key Identifier:
                keyid:45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fd397f8d47b3a369017afd14e695229eb571750.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/12893ff723d081816552700a2968b8b5c4ea0a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/8fd397f8d47b3a369017afd14e695229eb571750.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:50:db:93:25:dc:dc:fe:93:17:a7:9b:03:fe:c0:6f:00:cc:
         44:80:10:00:66:b5:fb:f4:83:cf:8f:0a:da:e1:d3:e7:f4:4d:
         61:ce:12:0a:c7:f0:e9:dd:95:de:f4:9f:12:0c:16:fd:78:44:
         20:10:86:02:ed:0f:ab:b6:a4:aa:ea:4b:1c:f3:38:cd:91:99:
         4a:33:67:10:8e:4f:9b:2b:f3:d7:52:74:85:ad:6e:8d:c0:c1:
         c9:71:ca:9f:4f:2d:ba:94:2f:39:5a:24:83:13:62:d1:63:64:
         bb:50:c9:87:5b:62:f1:57:91:d4:45:a9:b8:04:e4:c0:c8:ba:
         58:85:83:74:0b:00:0c:b1:fc:cf:6f:49:91:6e:81:f9:bd:df:
         6b:88:cf:8f:f4:0b:10:f9:a5:fb:be:45:b7:97:ab:e5:9f:76:
         6c:37:58:5e:44:73:2d:f7:ba:05:60:11:44:4d:61:2f:f8:2d:
         b6:4e:31:c8:46:5e:0d:14:97:1d:96:e1:28:da:60:2b:f0:fa:
         fe:b1:12:55:7c:fc:92:ef:21:39:6e:e6:66:fd:b7:71:d4:32:
         cc:cd:2c:52:36:b3:61:22:c4:01:94:d5:e7:de:23:6a:58:6d:
         46:e8:a7:0a:d0:1a:11:7d:d2:72:95:0a:a8:fd:a6:3b:64:6d:
         d2:2a:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:08 2023 by rpki-client on console-fra.rpki-client.org