Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0aab23bd-f189-4692-9f49-cb5ce34346df/7224b43b3d4444afb7ee79e1c3b5845387165bba.roa
File:                     7224b43b3d4444afb7ee79e1c3b5845387165bba.roa (raw, json)
Hash identifier:          aa18fmigvZhl5ZSSbUu+7VfM7OjfcWE5LuHBj7HZtYk=
Subject key identifier:   15:05:51:F9:81:4C:BA:22:77:D7:76:4E:25:C5:13:13:54:91:FC:62
Certificate issuer:       /CN=9f80f54526bd059d5b93379c083f1134c117b046
Certificate serial:       0288
Authority key identifier: CC:FB:08:0A:BE:F4:CF:C4:89:9E:2E:4E:64:FD:16:A8:A0:62:EE:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f80f54526bd059d5b93379c083f1134c117b046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0aab23bd-f189-4692-9f49-cb5ce34346df/7224b43b3d4444afb7ee79e1c3b5845387165bba.roa
Signing time:             Mon 04 Oct 2021 22:55:25 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     266820
IP address blocks:        45.237.84.0/22 maxlen: 22
                          2803:84a0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f80f54526bd059d5b93379c083f1134c117b046
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=7224b43b3d4444afb7ee79e1c3b5845387165bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:50:77:2e:ab:d2:2f:e8:9a:71:3c:50:90:
                    6b:a0:07:a2:43:e2:8b:4f:67:c8:f7:dc:4d:26:55:
                    20:f2:01:dc:45:28:d2:60:4a:2e:ec:ef:21:57:d1:
                    78:96:26:07:9a:6d:7e:1b:0a:fe:5f:e8:5c:6a:94:
                    fc:61:5d:d3:44:b0:bc:79:28:20:4a:48:8a:5b:d3:
                    9a:e8:fe:84:74:dd:53:e4:dc:b2:cc:69:5f:39:e0:
                    ad:b9:a9:3b:ba:4c:56:49:d6:08:8f:8a:8e:b1:a2:
                    6c:7f:7e:51:d2:ef:5e:7b:1c:fc:0e:44:bd:e3:55:
                    89:a8:12:a4:b1:48:76:7e:1c:03:ec:a3:0a:72:14:
                    af:b3:5d:06:81:52:0c:58:99:85:ab:fb:e7:9a:52:
                    44:6b:34:b7:65:3b:3d:bf:71:95:eb:26:bb:55:fe:
                    18:66:c9:22:f0:6e:c6:71:ae:df:96:85:ed:95:f7:
                    24:68:a6:7e:d2:99:38:a7:70:0d:81:0d:c7:8b:cd:
                    37:e0:ef:ec:f2:fc:c1:80:c2:0d:4d:91:8c:ff:16:
                    08:97:de:03:d5:9d:62:62:ed:0d:5a:d9:af:c8:2c:
                    f4:df:1e:5e:2d:b9:86:9e:b2:e5:c1:af:ef:b9:d8:
                    58:0a:88:f2:88:0a:1a:d7:05:16:f1:d8:bc:29:29:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:05:51:F9:81:4C:BA:22:77:D7:76:4E:25:C5:13:13:54:91:FC:62
            X509v3 Authority Key Identifier:
                keyid:CC:FB:08:0A:BE:F4:CF:C4:89:9E:2E:4E:64:FD:16:A8:A0:62:EE:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f80f54526bd059d5b93379c083f1134c117b046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0aab23bd-f189-4692-9f49-cb5ce34346df/7224b43b3d4444afb7ee79e1c3b5845387165bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0aab23bd-f189-4692-9f49-cb5ce34346df/9f80f54526bd059d5b93379c083f1134c117b046.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.84.0/22
                IPv6:
                  2803:84a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:cd:f0:7f:30:8f:37:4d:c6:99:5a:cd:ec:54:4c:33:e1:b8:
         96:3d:c5:81:89:d4:4a:62:36:64:88:90:aa:ef:0c:d3:49:04:
         be:e9:53:0c:02:11:2a:fa:40:c9:7b:5f:78:83:7c:b1:44:32:
         01:ab:09:78:2c:2d:a7:5e:5d:a3:9e:87:76:ad:64:94:aa:11:
         71:26:5f:2a:c9:cf:0b:9d:15:1f:63:97:c2:d9:60:3e:64:61:
         ad:26:ce:25:2d:f5:3a:20:f6:c3:3e:3e:9a:fd:97:ff:59:f9:
         54:d7:94:2b:24:cb:af:d9:51:32:ec:85:83:93:30:a2:b3:2a:
         21:4a:26:d8:df:10:a3:42:b9:fc:ee:c0:90:97:14:7c:1f:ab:
         38:48:30:54:d3:bf:c7:c1:39:72:61:2e:f2:5a:59:99:44:fd:
         ab:f2:b7:4b:86:a3:54:b5:ac:ea:49:0b:c7:dc:3f:88:46:0e:
         a2:2b:d0:37:96:f5:ea:c7:1d:4e:a3:51:b2:52:0d:cb:31:a3:
         2e:46:8b:09:43:4c:f7:26:17:4a:2a:ec:63:a2:98:4d:c7:69:
         d1:02:fd:f2:c8:2a:1f:9c:41:ef:38:5e:d6:a7:30:4b:32:5a:
         56:7c:60:a0:34:4d:83:a7:dd:9e:fd:1a:6c:25:4a:9a:9d:42:
         93:dc:17:e5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICAogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOWY4
MGY1NDUyNmJkMDU5ZDViOTMzNzljMDgzZjExMzRjMTE3YjA0NjAeFw0yMTEwMDQw
MzAwMDBaFw0yMzEwMDQwMzAwMDBaMDMxMTAvBgNVBAMTKDcyMjRiNDNiM2Q0NDQ0
YWZiN2VlNzllMWMzYjU4NDUzODcxNjViYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/cVB3LqvSL+iacTxQkGugB6JD4otPZ8j33E0mVSDyAdxFKNJg
Si7s7yFX0XiWJgeabX4bCv5f6FxqlPxhXdNEsLx5KCBKSIpb05ro/oR03VPk3LLM
aV854K25qTu6TFZJ1giPio6xomx/flHS7157HPwORL3jVYmoEqSxSHZ+HAPsowpy
FK+zXQaBUgxYmYWr++eaUkRrNLdlOz2/cZXrJrtV/hhmySLwbsZxrt+Whe2V9yRo
pn7SmTincA2BDceLzTfg7+zy/MGAwg1NkYz/FgiX3gPVnWJi7Q1a2a/ILPTfHl4t
uYaesuXBr++52FgKiPKIChrXBRbx2LwpKeRRAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUFQVR+YFMuiJ313ZOJcUTE1SR/GIwHwYDVR0jBBgwFoAUzPsICr70z8SJni5O
ZP0WqKBi7uYwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS85ZjgwZjU0
NTI2YmQwNTlkNWI5MzM3OWMwODNmMTEzNGMxMTdiMDQ2LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wYWFiMjNiZC1mMTg5LTQ2OTItOWY0OS1jYjVjZTM0
MzQ2ZGYvNzIyNGI0M2IzZDQ0NDRhZmI3ZWU3OWUxYzNiNTg0NTM4NzE2NWJiYS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzBhYWIyM2JkLWYxODktNDY5Mi05ZjQ5LWNiNWNl
MzQzNDZkZi85ZjgwZjU0NTI2YmQwNTlkNWI5MzM3OWMwODNmMTEzNGMxMTdiMDQ2
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCLe1UMA0EAgACMAcDBQAoA4SgMA0GCSqGSIb3DQEBCwUAA4IB
AQA7zfB/MI83TcaZWs3sVEwz4biWPcWBidRKYjZkiJCq7wzTSQS+6VMMAhEq+kDJ
e194g3yxRDIBqwl4LC2nXl2jnod2rWSUqhFxJl8qyc8LnRUfY5fC2WA+ZGGtJs4l
LfU6IPbDPj6a/Zf/WflU15QrJMuv2VEy7IWDkzCisyohSibY3xCjQrn87sCQlxR8
H6s4SDBU07/HwTlyYS7yWlmZRP2r8rdLhqNUtazqSQvH3D+IRg6iK9A3lvXqxx1O
o1GyUg3LMaMuRosJQ0z3JhdKKuxjophNx2nRAv3yyCofnEHvOF7WpzBLMlpWfGCg
NE2Dp92e/RpsJUqanUKT3Bfl
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org