Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0e0048c7-0c93-4780-ba69-65d4d6b8bcb1/e64de9ae8dea7c29b68cd6a434f0163331e52cb6.roa
File:                     e64de9ae8dea7c29b68cd6a434f0163331e52cb6.roa (raw, json)
Hash identifier:          owFzqqJUs1d92g/+zJk3xTH7P52pQLTalDbtN711Xkg=
Subject key identifier:   D9:DF:EF:76:38:18:64:A9:59:AE:86:3C:6C:63:59:8E:60:4E:11:C5
Certificate issuer:       /CN=2420066c896d9614c907848b9d0ee8aea8580a78
Certificate serial:       0CA722
Authority key identifier: 50:69:BA:6A:7A:C8:B8:50:4F:5B:AE:6A:97:7F:1F:E1:B8:C1:76:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2420066c896d9614c907848b9d0ee8aea8580a78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0e0048c7-0c93-4780-ba69-65d4d6b8bcb1/e64de9ae8dea7c29b68cd6a434f0163331e52cb6.roa
Signing time:             Fri 09 Apr 2021 19:10:59 +0000
ROA not before:           Fri 09 Apr 2021 03:00:00 +0000
ROA not after:            Sun 09 Apr 2023 03:00:00 +0000
asID:                     267761
IP address blocks:        45.170.32.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 829218 (0xca722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2420066c896d9614c907848b9d0ee8aea8580a78
        Validity
            Not Before: Apr  9 03:00:00 2021 GMT
            Not After : Apr  9 03:00:00 2023 GMT
        Subject: CN=e64de9ae8dea7c29b68cd6a434f0163331e52cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:4c:a0:65:89:d2:c1:b7:7e:44:b5:da:ef:
                    0e:83:fe:6c:39:a7:61:ce:00:20:3e:e2:ac:c9:fa:
                    13:28:be:d1:a8:36:65:4c:b1:6b:0e:72:54:eb:a1:
                    35:b1:ea:09:aa:d2:d7:79:57:ef:d6:e1:87:fa:30:
                    1e:a7:c5:b4:e4:7e:76:cf:9f:cd:f6:df:1e:73:71:
                    7d:3f:a0:ad:de:96:8d:ca:43:6c:db:61:13:0e:4c:
                    50:8e:c6:a7:bf:55:a0:88:b6:8c:c6:ec:a4:db:7e:
                    cd:39:2a:d5:bd:10:ec:2d:4e:5d:dd:96:a3:78:6d:
                    c6:8d:3a:60:43:fc:7d:74:74:38:05:86:43:c1:08:
                    9c:c0:36:a1:4a:3a:83:4e:37:77:8a:8b:5f:97:31:
                    36:34:5c:42:71:50:9d:d1:e2:9d:90:94:01:4f:5a:
                    e6:1a:24:2c:7d:7b:86:e3:83:da:a3:7a:02:58:10:
                    fb:95:c7:a0:94:22:5d:8c:83:f1:54:58:a2:8b:6d:
                    0f:89:fc:df:87:45:8c:fd:b0:7c:5b:32:fa:d9:11:
                    2b:a4:9f:8d:72:32:51:e5:45:f4:92:2e:ad:03:bd:
                    5b:1d:9a:15:5e:82:93:ff:a2:55:58:2c:93:69:c0:
                    e5:34:14:6f:04:a3:51:30:1a:44:4d:96:89:01:85:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DF:EF:76:38:18:64:A9:59:AE:86:3C:6C:63:59:8E:60:4E:11:C5
            X509v3 Authority Key Identifier:
                keyid:50:69:BA:6A:7A:C8:B8:50:4F:5B:AE:6A:97:7F:1F:E1:B8:C1:76:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2420066c896d9614c907848b9d0ee8aea8580a78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0e0048c7-0c93-4780-ba69-65d4d6b8bcb1/e64de9ae8dea7c29b68cd6a434f0163331e52cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0e0048c7-0c93-4780-ba69-65d4d6b8bcb1/2420066c896d9614c907848b9d0ee8aea8580a78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:ac:c5:9c:e8:5f:7c:61:11:91:ee:a2:d3:37:cb:a7:1c:
         cb:17:62:47:de:c4:4e:36:39:d6:4b:de:ce:0c:42:99:58:11:
         a8:74:7e:e9:8d:7e:ad:03:5b:f5:5d:73:f0:9a:bf:fd:a5:fa:
         8d:80:e3:7f:f4:0b:4e:e3:1d:25:41:dc:59:bc:b5:2e:f7:af:
         bc:f4:c5:57:2a:ee:bc:a2:40:a7:ec:0d:39:eb:a2:72:26:61:
         22:e6:82:a0:92:43:bb:84:4b:24:1e:17:15:fd:f9:1e:8e:26:
         8b:aa:47:b3:ed:f2:72:c1:d4:70:83:a2:e1:b5:75:5e:1e:4e:
         5d:43:a0:b4:32:a6:18:d6:58:44:e3:73:a8:1f:ed:ff:84:cc:
         ec:43:48:8d:f0:dd:b4:42:79:65:88:13:06:71:69:fb:d0:04:
         5d:b4:a7:12:74:a9:86:0f:5d:2c:99:50:1e:e8:b5:68:18:0f:
         15:9a:21:60:02:d3:46:1e:78:b7:b6:6e:46:07:34:a9:0f:73:
         7a:19:6a:0b:2e:a8:e8:a8:b9:b7:67:00:7d:37:99:89:48:fc:
         31:08:b6:80:b4:05:52:99:51:fa:65:05:3d:12:38:40:8f:08:
         7a:59:21:90:25:09:21:ea:af:05:60:da:51:24:28:06:44:c8:
         6e:94:1f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org