Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/6cca8906b894d94222c13df66c49da5cff5e7f4e.roa
File:                     6cca8906b894d94222c13df66c49da5cff5e7f4e.roa (raw, json)
Hash identifier:          xDBPvyH1BY1j3ynhsyAsU4wS0Xy6COYR10s4GPFzAMc=
Subject key identifier:   D0:8C:06:53:CB:E0:22:23:93:EB:7B:A9:76:91:2F:CE:08:C5:50:54
Certificate issuer:       /CN=cb177be6b76d82ba1ff6275ec50fecb39b73b104
Certificate serial:       157DFB
Authority key identifier: E1:E2:4B:6D:C9:FB:C2:50:72:EC:C0:34:9A:10:6B:E1:94:45:C2:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb177be6b76d82ba1ff6275ec50fecb39b73b104.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/6cca8906b894d94222c13df66c49da5cff5e7f4e.roa
Signing time:             Fri 25 Mar 2022 05:16:16 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266755
IP address blocks:        45.233.64.0/24 maxlen: 24
                          45.233.65.0/24 maxlen: 24
                          45.233.66.0/24 maxlen: 24
                          2803:8720::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408507 (0x157dfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb177be6b76d82ba1ff6275ec50fecb39b73b104
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=6cca8906b894d94222c13df66c49da5cff5e7f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:6d:a5:84:c4:76:af:c1:46:30:72:01:30:
                    b9:ac:38:f4:c4:48:dc:de:73:7f:81:14:20:ea:c8:
                    98:df:59:39:cf:ca:f3:8e:66:30:a8:32:c0:6b:93:
                    1c:6a:7d:b5:d1:f1:25:02:60:09:dd:ae:06:8c:1c:
                    95:a5:2b:1e:c0:5c:30:1c:1b:ed:77:76:0b:f2:49:
                    1a:2e:44:42:b1:91:86:eb:2d:cc:7b:30:39:c8:f1:
                    f3:60:4e:11:98:fe:8e:05:b5:c2:6c:5f:26:d2:3f:
                    e8:e0:2b:07:2d:09:2c:6f:da:39:7f:2c:e0:67:c1:
                    41:6f:c2:66:ec:da:3e:60:92:38:cb:64:1a:b8:42:
                    2e:23:40:44:c6:65:1b:d5:da:df:79:fe:67:cf:ef:
                    ce:31:95:f1:02:fc:c7:90:a8:25:d2:4b:68:80:a0:
                    50:2e:e0:2d:2b:54:0c:d7:ad:e6:e1:20:f6:90:b7:
                    b2:27:d3:43:59:5e:d1:9e:4f:d9:d7:21:d8:cf:33:
                    20:84:6a:36:8d:d6:9e:aa:64:78:20:3d:2b:c8:17:
                    50:07:12:85:9a:7c:07:fb:c4:5c:f1:96:ab:a8:6d:
                    5f:1e:77:ce:bd:ac:2e:4e:8e:07:f6:5f:c0:21:98:
                    f5:3d:96:4e:51:1b:a5:8e:b6:f8:3c:5e:8a:ee:30:
                    83:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8C:06:53:CB:E0:22:23:93:EB:7B:A9:76:91:2F:CE:08:C5:50:54
            X509v3 Authority Key Identifier:
                keyid:E1:E2:4B:6D:C9:FB:C2:50:72:EC:C0:34:9A:10:6B:E1:94:45:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb177be6b76d82ba1ff6275ec50fecb39b73b104.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/6cca8906b894d94222c13df66c49da5cff5e7f4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/cb177be6b76d82ba1ff6275ec50fecb39b73b104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.64.0-45.233.66.255
                IPv6:
                  2803:8720::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:11:ac:1b:cc:55:7d:14:8d:66:8c:70:83:49:71:6b:21:8d:
         42:d0:8c:99:c3:f8:ad:76:05:23:d7:25:69:aa:8f:8f:1d:a5:
         69:8d:64:49:85:d8:5a:67:65:f1:62:6f:21:c9:05:53:1b:7d:
         5b:99:eb:55:b8:38:33:43:72:49:36:43:e0:59:78:40:2a:58:
         b2:53:88:8a:99:72:86:76:c2:97:7e:49:56:0a:0f:29:34:8d:
         6f:4b:17:a6:84:4d:d2:20:48:92:34:a3:de:d7:f6:df:d8:85:
         2d:d5:db:4c:dd:35:26:2c:8f:61:49:6b:c6:6e:f6:ee:13:2a:
         13:fc:57:92:8f:b6:43:40:48:50:95:49:5a:ad:b1:52:7c:dc:
         8a:09:44:dc:42:64:9e:a7:a9:4c:db:a2:9b:9a:cd:cc:d1:01:
         cd:a5:c8:47:ff:89:54:9b:1c:bc:58:01:54:84:33:8b:23:1e:
         33:b8:37:81:59:82:55:88:c6:4a:e0:be:7f:93:8d:93:1d:13:
         0c:bb:ca:a5:3a:04:0c:a6:bf:e0:5d:94:59:d0:a7:b1:37:d5:
         81:a9:63:57:a6:b1:1d:96:97:6c:75:14:59:ae:4d:9e:14:67:
         6a:33:ba:8e:8f:1c:ed:49:dc:58:56:1e:10:92:4c:c0:4f:bf:
         e7:f3:e2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org