Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/48db64c426660c3ced376b2b10dd362f0c92dae9.roa
File:                     48db64c426660c3ced376b2b10dd362f0c92dae9.roa (raw, json)
Hash identifier:          RHCfyC5mXIhVyag9n31xf6XNH41umlFouPQKdD6YHEI=
Subject key identifier:   47:89:33:3A:BA:9A:5F:27:3A:73:04:FF:39:65:0E:D9:5D:5A:37:A0
Certificate issuer:       /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial:       23BB9F
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/48db64c426660c3ced376b2b10dd362f0c92dae9.roa
Signing time:             Sat 07 Oct 2023 08:30:03 +0000
ROA not before:           Fri 06 Oct 2023 08:30:03 +0000
ROA not after:            Sun 05 Oct 2025 08:30:03 +0000
asID:                     263781
IP address blocks:        138.118.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341791 (0x23bb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
        Validity
            Not Before: Oct  6 08:30:03 2023 GMT
            Not After : Oct  5 08:30:03 2025 GMT
        Subject: CN=48db64c426660c3ced376b2b10dd362f0c92dae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:96:25:65:9c:42:b5:c0:36:8d:68:06:9c:5d:
                    eb:5f:35:2f:9f:d5:af:72:47:25:8a:4f:08:0d:e2:
                    aa:14:57:24:6f:40:7c:6b:ff:7e:dc:38:14:1e:ba:
                    69:94:10:03:af:ec:02:ed:25:df:16:74:7a:40:ad:
                    5b:d8:69:1e:bd:3b:a0:a7:b5:20:4c:d8:0b:0b:f4:
                    21:69:8b:2f:35:24:98:2a:ee:b5:4b:7c:c4:f0:28:
                    1f:cd:21:db:cd:4d:0e:c1:b3:1c:2d:1e:38:16:51:
                    9f:39:3e:be:c4:ca:77:4c:4b:c1:38:1c:d6:c8:59:
                    32:04:34:0f:5c:bc:5d:da:85:f8:1c:27:af:56:64:
                    d1:25:2a:db:2b:d4:eb:cd:80:4d:21:68:cd:01:87:
                    7a:4e:2d:5a:33:c3:af:57:e6:b0:94:eb:df:12:aa:
                    b1:b2:45:96:0b:cb:d7:29:4f:09:1c:ad:4b:92:7a:
                    20:a5:cb:8b:eb:78:49:66:ff:ce:ad:72:34:11:de:
                    7a:7c:79:ea:dd:ce:8d:44:ed:1e:a9:70:34:06:56:
                    1c:dd:39:71:fc:72:cd:a0:63:26:61:71:ec:eb:c3:
                    6f:ce:9a:e9:5b:24:10:ed:a1:4d:63:eb:f7:e1:18:
                    f1:99:a4:be:54:8f:8f:af:fa:5f:e0:85:4b:34:48:
                    58:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:89:33:3A:BA:9A:5F:27:3A:73:04:FF:39:65:0E:D9:5D:5A:37:A0
            X509v3 Authority Key Identifier:
                keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/48db64c426660c3ced376b2b10dd362f0c92dae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:c7:18:d4:41:1c:04:0c:52:4d:06:fc:b4:8f:fb:57:a0:8c:
         2f:11:12:3e:11:ca:33:0e:5e:2d:bf:ae:cd:b8:16:1e:68:ce:
         85:f3:e1:05:a5:ec:26:eb:2f:13:ff:9d:9c:25:bd:23:23:60:
         c5:e0:b0:85:6b:11:d8:6e:8c:0b:bd:bc:6e:70:61:1a:14:10:
         15:5f:ad:6b:bd:18:b9:4b:09:05:90:80:74:f2:8f:a9:f1:26:
         af:6a:ca:8d:9d:48:33:d1:96:95:b2:81:f7:11:fc:93:db:3b:
         36:e2:a3:46:29:ba:aa:d2:61:8b:2b:72:16:90:7d:7e:12:d8:
         92:41:c0:1a:7e:26:2b:ac:58:bf:3b:ce:3d:63:4e:63:4f:21:
         d0:b8:e5:07:7a:ef:d2:20:b8:71:4a:3b:a3:19:4f:3b:5d:6c:
         ab:b6:68:d2:2e:ac:2d:fa:fb:ac:4f:78:c8:51:70:3a:ff:75:
         f0:6a:92:43:c3:30:2a:67:0e:81:97:04:04:90:86:29:0c:c3:
         0f:ae:e1:ff:67:35:81:43:07:4e:b5:04:5e:32:7d:73:8b:70:
         a0:aa:e4:d4:e8:56:19:c3:4a:06:7d:e6:f9:03:3d:fd:d7:45:
         d2:45:d3:56:58:e2:a7:de:ef:d8:59:a9:27:ac:97:43:93:81:
         b0:ed:e8:b5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI7ufMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEy
NDg4ODJlYjFjOGU2NmFiNWMyM2Y2NjczNjI1NjdlNmQ3ZGI2NzEwHhcNMjMxMDA2
MDgzMDAzWhcNMjUxMDA1MDgzMDAzWjAzMTEwLwYDVQQDEyg0OGRiNjRjNDI2NjYw
YzNjZWQzNzZiMmIxMGRkMzYyZjBjOTJkYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnpYlZZxCtcA2jWgGnF3rXzUvn9Wvckclik8IDeKqFFckb0B8
a/9+3DgUHrpplBADr+wC7SXfFnR6QK1b2GkevTugp7UgTNgLC/QhaYsvNSSYKu61
S3zE8CgfzSHbzU0OwbMcLR44FlGfOT6+xMp3TEvBOBzWyFkyBDQPXLxd2oX4HCev
VmTRJSrbK9TrzYBNIWjNAYd6Ti1aM8OvV+awlOvfEqqxskWWC8vXKU8JHK1Lknog
pcuL63hJZv/OrXI0Ed56fHnq3c6NRO0eqXA0BlYc3Tlx/HLNoGMmYXHs68Nvzprp
WyQQ7aFNY+v34RjxmaS+VI+Pr/pf4IVLNEhYeQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEeJMzq6ml8nOnME/zllDtldWjegMB8GA1UdIwQYMBaAFF697Iy1u+wGFl6M
Od28euJhkYp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTI0ODg4
MmViMWM4ZTY2YWI1YzIzZjY2NzM2MjU2N2U2ZDdkYjY3MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGNlZTI5OWQtZjgyMi00ZjlkLThmMTktNTY4N2My
MDAyN2JkLzQ4ZGI2NGM0MjY2NjBjM2NlZDM3NmIyYjEwZGQzNjJmMGM5MmRhZTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wY2VlMjk5ZC1mODIyLTRmOWQtOGYxOS01Njg3
YzIwMDI3YmQvMTI0ODg4MmViMWM4ZTY2YWI1YzIzZjY2NzM2MjU2N2U2ZDdkYjY3
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIp2aTANBgkqhkiG9w0BAQsFAAOCAQEAs8cY1EEcBAxSTQb8
tI/7V6CMLxESPhHKMw5eLb+uzbgWHmjOhfPhBaXsJusvE/+dnCW9IyNgxeCwhWsR
2G6MC728bnBhGhQQFV+ta70YuUsJBZCAdPKPqfEmr2rKjZ1IM9GWlbKB9xH8k9s7
NuKjRim6qtJhiytyFpB9fhLYkkHAGn4mK6xYvzvOPWNOY08h0LjlB3rv0iC4cUo7
oxlPO11sq7Zo0i6sLfr7rE94yFFwOv918GqSQ8MwKmcOgZcEBJCGKQzDD67h/2c1
gUMHTrUEXjJ9c4twoKrk1OhWGcNKBn3m+QM9/ddF0kXTVljip97v2FmpJ6yXQ5OB
sO3otQ==
-----END CERTIFICATE-----
Generated at Fri Nov 3 19:26:39 2023 by rpki-client on console-fra.rpki-client.org