Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/d6a4a42b07d657f8d8ad6b68eae1207ff69aae66.roa
File:                     d6a4a42b07d657f8d8ad6b68eae1207ff69aae66.roa (raw, json)
Hash identifier:          YR7BVliOUD01kSylzVN5AaXn2BPtcOs5/LEp8E6ByeQ=
Subject key identifier:   67:47:9C:A8:32:48:C8:78:00:77:91:B6:54:80:21:04:28:1A:C1:89
Certificate issuer:       /CN=cb177be6b76d82ba1ff6275ec50fecb39b73b104
Certificate serial:       0CD542
Authority key identifier: E1:E2:4B:6D:C9:FB:C2:50:72:EC:C0:34:9A:10:6B:E1:94:45:C2:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb177be6b76d82ba1ff6275ec50fecb39b73b104.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/d6a4a42b07d657f8d8ad6b68eae1207ff69aae66.roa
Signing time:             Thu 08 Apr 2021 16:26:13 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266755
IP address blocks:        45.233.64.0/24 maxlen: 24
                          45.233.65.0/24 maxlen: 24
                          45.233.66.0/24 maxlen: 24
                          45.233.67.0/24 maxlen: 24
                          2803:8720::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841026 (0xcd542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb177be6b76d82ba1ff6275ec50fecb39b73b104
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=d6a4a42b07d657f8d8ad6b68eae1207ff69aae66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:54:f9:a9:42:0e:54:5d:bf:ea:06:00:39:
                    e2:f7:49:3d:58:66:b9:e7:f9:68:2d:f9:11:3f:d2:
                    c2:f6:1a:52:f1:ce:2d:00:73:43:20:56:31:a1:b1:
                    66:5d:f5:2f:fd:22:e8:e7:c2:ed:76:ee:03:e9:ef:
                    16:2c:f3:d3:b9:ed:60:a7:5d:95:84:29:0f:76:17:
                    37:05:85:8b:7c:34:e0:dd:c3:b7:c9:42:87:57:23:
                    38:11:89:84:c7:ee:a0:a0:f0:ca:e5:27:5c:42:3d:
                    ed:6c:3c:a1:08:b6:b5:a1:4f:c2:c7:b7:d9:33:c2:
                    a1:dd:88:2a:ed:14:2f:72:df:ed:4c:89:e0:01:f4:
                    88:8b:5b:42:ee:67:98:87:ab:10:22:be:60:cb:9a:
                    48:05:f7:4f:20:6b:38:3b:40:ec:f1:ba:e1:a6:4b:
                    ee:41:3b:18:7c:00:bc:cf:03:41:99:97:43:fb:4e:
                    7e:f3:9f:a5:ab:e2:e3:38:e3:21:43:0b:2a:1b:42:
                    45:b5:34:92:31:6b:23:97:6e:42:74:80:17:94:45:
                    f4:43:45:cb:c8:39:c0:8c:bc:1c:0e:c5:35:c1:8c:
                    a9:44:aa:51:9c:e9:f8:fa:be:98:76:21:aa:f2:2e:
                    d8:4c:c1:a2:02:07:ed:7d:e6:fc:15:c5:97:fc:da:
                    b4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:47:9C:A8:32:48:C8:78:00:77:91:B6:54:80:21:04:28:1A:C1:89
            X509v3 Authority Key Identifier:
                keyid:E1:E2:4B:6D:C9:FB:C2:50:72:EC:C0:34:9A:10:6B:E1:94:45:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb177be6b76d82ba1ff6275ec50fecb39b73b104.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/d6a4a42b07d657f8d8ad6b68eae1207ff69aae66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/cb177be6b76d82ba1ff6275ec50fecb39b73b104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.64.0/22
                IPv6:
                  2803:8720::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:ab:34:81:ad:88:40:8c:78:9b:0d:fe:ac:f2:22:e9:9f:84:
         17:97:a6:9b:c2:de:c1:83:54:af:16:ff:99:c9:bf:6a:b5:30:
         c2:40:0a:35:08:c5:1c:d6:8f:47:6c:9e:b3:54:8a:94:d9:22:
         5b:15:36:93:5b:b6:e1:f3:31:8d:91:82:0f:b8:ec:8f:f5:45:
         8f:62:d2:66:06:3f:e3:1e:72:64:97:b9:a3:7a:01:31:08:58:
         49:13:00:19:dc:81:77:10:e4:91:87:9b:99:51:d6:f1:90:18:
         f8:86:87:1c:45:bb:69:47:d6:77:fb:87:87:3d:fa:4f:4f:78:
         3e:0b:ed:a3:3f:80:88:6c:c7:e8:73:84:33:91:01:ff:eb:04:
         80:aa:07:d9:40:42:b3:f3:0c:23:13:cb:ef:7e:e9:54:a7:09:
         28:01:25:bc:ab:18:56:a7:ce:d4:4c:61:1b:d1:d8:fa:20:2f:
         0b:bb:42:71:1f:ef:5a:d4:63:91:c4:cb:35:d8:1b:2d:38:6c:
         4e:85:66:cb:bc:39:9b:a9:31:7b:60:eb:41:bf:b5:9d:fd:7f:
         d7:d2:ef:0b:97:c8:70:e4:84:fb:f6:2a:66:6c:a3:2c:fc:9d:
         c6:53:b4:fe:ac:7b:50:f4:72:4f:b9:c9:7e:e1:28:de:8e:46:
         6d:6e:d7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org