Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/b32a8359ee0e3fcce4dc69ed5bdca944439cbd4b.roa
File:                     b32a8359ee0e3fcce4dc69ed5bdca944439cbd4b.roa (raw, json)
Hash identifier:          w20vzADLVL0qwKxhzlqgavDt5Z3taVBBCUovMhoBi5s=
Subject key identifier:   66:B6:B9:48:3B:EA:B6:D5:31:2F:DF:76:BA:4D:95:2C:E8:35:DF:A9
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       0DC4E9
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/b32a8359ee0e3fcce4dc69ed5bdca944439cbd4b.roa
Signing time:             Wed 23 Mar 2022 04:22:47 +0000
ROA not before:           Wed 09 Jun 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266816
IP address blocks:        45.179.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902377 (0xdc4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: Jun  9 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=b32a8359ee0e3fcce4dc69ed5bdca944439cbd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d3:4b:16:c1:1d:61:81:20:56:23:0c:85:36:
                    3d:22:a9:e6:b0:60:5a:ac:35:8f:58:88:5c:70:79:
                    30:26:c7:9c:85:3f:9f:b3:ca:dc:83:db:9b:39:d5:
                    44:1b:de:60:8f:16:3c:1b:d8:da:99:12:62:51:8b:
                    ef:dc:d2:38:81:37:50:73:19:7e:f9:bf:a3:2c:ae:
                    78:5d:53:3a:8e:82:7a:c0:e9:91:1a:8a:04:2a:37:
                    bb:f0:f3:a1:99:00:6a:ee:95:6c:aa:42:fb:c8:83:
                    5e:2b:73:6f:43:9d:1b:92:db:b5:11:0c:e1:e2:3a:
                    15:b0:e2:45:91:ed:db:38:17:a3:31:06:09:05:b9:
                    a9:c0:04:08:c9:a6:ed:be:f6:4a:87:15:ef:0d:5b:
                    51:be:e2:3e:c0:82:df:b2:17:c3:72:ac:c9:54:4a:
                    37:8c:15:45:79:84:9c:25:f8:18:7f:fd:0b:4b:7c:
                    d8:6f:a6:cc:cf:db:5e:d1:e8:6a:96:c2:76:b5:1b:
                    03:88:ea:d3:61:c5:95:5f:cc:93:5a:de:fd:63:f6:
                    1f:d0:26:46:d8:27:db:4b:17:0d:9d:fb:38:4e:63:
                    ec:e0:fa:ab:77:c4:38:4a:9d:75:0f:69:b1:7a:7c:
                    45:6a:4f:8c:4e:f2:6f:f5:91:61:84:d6:de:eb:02:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B6:B9:48:3B:EA:B6:D5:31:2F:DF:76:BA:4D:95:2C:E8:35:DF:A9
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/b32a8359ee0e3fcce4dc69ed5bdca944439cbd4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:b1:0e:f1:96:5a:9a:48:c5:fc:c8:00:21:d7:29:97:7e:3e:
         d0:9a:0a:1b:0a:8d:d3:b2:75:2b:0d:f8:45:b6:30:57:1e:70:
         92:e1:73:91:fb:cd:83:09:de:04:31:c0:60:f2:ea:6a:67:aa:
         2f:b5:d7:2b:14:8a:45:cd:ae:30:80:c5:bf:4b:5a:df:98:88:
         b5:39:c8:0c:95:78:5a:11:da:13:37:f0:61:3b:f7:c5:5b:42:
         0f:42:15:1e:52:66:a3:8a:92:43:cc:0d:92:47:6f:bb:84:03:
         9d:10:d1:55:81:a7:8a:e4:2e:e2:ee:9b:84:42:d4:d1:7a:6d:
         9d:a3:b4:b3:c4:db:5e:fd:d8:13:a6:23:39:78:08:93:0f:8b:
         f1:97:3b:47:ac:9f:ed:f9:27:d9:30:5f:05:db:9e:d6:61:d6:
         36:c0:6c:2e:dc:ea:c4:4d:42:9c:e7:58:1f:b7:41:da:7c:aa:
         c4:3f:7e:45:ef:f5:ca:13:f0:5c:43:c4:f4:52:8a:09:c9:09:
         b4:cd:ba:1f:0b:99:b2:6d:46:7b:df:d6:e5:2e:98:4a:32:b8:
         b8:b5:95:30:cd:98:8f:f1:cf:5b:df:e8:2c:1b:ef:78:33:f8:
         7d:53:ba:9e:41:59:3d:a7:27:0f:01:d1:86:0f:73:21:10:9d:
         5a:56:56:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:08 2023 by rpki-client on console-fra.rpki-client.org