Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/999b9f7a8b3df6ed343dc1388c1a821c95ab4ae1.roa
File:                     999b9f7a8b3df6ed343dc1388c1a821c95ab4ae1.roa (raw, json)
Hash identifier:          H7cuhullMSamXiPIUJ7ZEOH3sxBUSrGGt4j9ByvrNQM=
Subject key identifier:   DF:54:D5:06:B9:BA:6F:EF:93:D3:1A:9A:EE:9C:85:6B:7D:D6:46:EE
Certificate issuer:       /CN=cb177be6b76d82ba1ff6275ec50fecb39b73b104
Certificate serial:       1571CA
Authority key identifier: E1:E2:4B:6D:C9:FB:C2:50:72:EC:C0:34:9A:10:6B:E1:94:45:C2:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb177be6b76d82ba1ff6275ec50fecb39b73b104.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/999b9f7a8b3df6ed343dc1388c1a821c95ab4ae1.roa
Signing time:             Thu 24 Mar 2022 18:51:38 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266755
IP address blocks:        45.233.64.0/24 maxlen: 24
                          45.233.65.0/24 maxlen: 24
                          45.233.66.0/24 maxlen: 24
                          45.233.67.0/24 maxlen: 24
                          2803:8720::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405386 (0x1571ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb177be6b76d82ba1ff6275ec50fecb39b73b104
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=999b9f7a8b3df6ed343dc1388c1a821c95ab4ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:33:ea:4e:42:ce:8f:12:d5:c9:9c:ce:03:76:
                    e2:88:7d:66:b5:fa:65:b6:bb:94:19:a3:fc:ef:39:
                    bb:c1:25:51:fa:44:11:c8:5a:f7:15:1f:9e:e3:ac:
                    30:76:d9:69:f1:2b:0d:d8:e2:3a:af:5d:36:b8:27:
                    45:4d:dc:85:65:9b:2a:cc:f5:ab:1f:5f:84:12:06:
                    41:18:dd:52:03:80:30:cb:3f:39:aa:3f:4e:b1:82:
                    70:c5:8e:1b:ee:22:86:2a:20:d9:73:e5:ae:69:4f:
                    7b:07:b5:7d:65:38:58:1b:32:e5:97:5b:84:e7:22:
                    58:15:31:46:99:66:34:2b:17:c8:dc:60:1c:08:ff:
                    b0:91:6c:1a:bc:7d:d6:61:fa:ba:6d:e1:1f:74:b4:
                    9a:4c:18:2b:dc:8d:e2:83:95:6a:13:15:2a:70:dd:
                    24:ea:20:0c:c1:7f:32:48:8d:9a:eb:73:f8:9f:6b:
                    ff:6e:56:c4:e8:42:d4:bf:07:7d:58:06:e6:4a:a7:
                    ab:08:fe:74:45:da:00:e5:65:c7:b4:6e:9a:e3:22:
                    6c:c2:2d:31:c9:ba:2b:a1:f6:0e:c1:80:e9:44:6a:
                    14:50:e4:df:08:16:d9:e2:7d:90:d2:bd:48:d3:b8:
                    1f:c5:54:ba:49:9b:b5:b0:d3:50:76:68:e2:47:9c:
                    0f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:54:D5:06:B9:BA:6F:EF:93:D3:1A:9A:EE:9C:85:6B:7D:D6:46:EE
            X509v3 Authority Key Identifier:
                keyid:E1:E2:4B:6D:C9:FB:C2:50:72:EC:C0:34:9A:10:6B:E1:94:45:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb177be6b76d82ba1ff6275ec50fecb39b73b104.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/999b9f7a8b3df6ed343dc1388c1a821c95ab4ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/cb177be6b76d82ba1ff6275ec50fecb39b73b104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.64.0/22
                IPv6:
                  2803:8720::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:47:b1:89:63:b2:8d:18:56:2e:52:ae:b1:7c:0c:9c:34:8e:
         a7:fe:3d:e7:ff:12:1c:aa:df:60:9d:f8:a7:54:4b:99:e9:86:
         59:e2:4d:81:c5:d3:f2:e1:07:fb:2e:c8:32:bc:0c:be:42:b3:
         d1:67:53:5c:e1:a8:7e:fe:14:31:d7:9f:1a:82:53:ca:08:b0:
         1f:e9:bf:6c:c2:14:ff:9a:51:ff:0f:86:de:ce:13:8d:61:28:
         d3:36:8c:63:89:3f:38:51:bb:27:1c:7f:52:9e:d6:8e:fc:6c:
         05:c5:bf:83:67:98:69:c3:e3:88:d2:e2:3f:e6:cd:07:29:7a:
         c7:32:6e:b7:74:72:8b:56:f1:f3:0e:06:52:44:f5:af:32:b7:
         4a:e7:4d:df:3b:ba:31:28:02:37:14:1b:75:25:4a:bf:49:38:
         dc:52:e3:84:48:ad:bc:8d:be:49:13:ec:2a:d2:7d:ce:5b:0e:
         63:ad:63:1e:0f:25:ac:a7:89:95:45:af:90:03:fb:a7:9a:e3:
         06:df:35:2c:8c:34:13:60:fa:1e:59:4d:46:ea:34:18:8b:d5:
         bc:bf:f1:ad:93:ff:a9:27:70:c0:96:a2:5c:f8:0b:c8:92:db:
         53:3d:d2:24:f6:b7:02:88:97:07:07:3f:0c:8a:a3:e7:9b:fc:
         ed:6f:40:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org