Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/d9ed2db9a518a3d9b14c6c54261c9821bea9fc24.roa
File:                     d9ed2db9a518a3d9b14c6c54261c9821bea9fc24.roa (raw, json)
Hash identifier:          hbvNHLZKsWWc7kEofeUqZrED0i698uxyph2xB31A02U=
Subject key identifier:   11:19:52:C9:93:C0:1E:87:AA:82:7B:4D:AB:40:44:DE:23:2A:88:15
Certificate issuer:       /CN=d87cacea641658717abecb35689ebe8932f40ead
Certificate serial:       0A6A
Authority key identifier: 50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87cacea641658717abecb35689ebe8932f40ead.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/d9ed2db9a518a3d9b14c6c54261c9821bea9fc24.roa
Signing time:             Thu 21 Apr 2022 14:28:47 +0000
ROA not before:           Thu 21 Apr 2022 03:00:00 +0000
ROA not after:            Sun 21 Apr 2024 03:00:00 +0000
asID:                     267796
IP address blocks:        45.172.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666 (0xa6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87cacea641658717abecb35689ebe8932f40ead
        Validity
            Not Before: Apr 21 03:00:00 2022 GMT
            Not After : Apr 21 03:00:00 2024 GMT
        Subject: CN=d9ed2db9a518a3d9b14c6c54261c9821bea9fc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:23:1b:a3:65:a2:89:43:fe:ce:0a:75:f8:0b:
                    24:97:dc:c3:94:95:b0:06:70:b0:84:0c:d1:03:cd:
                    ec:9e:9e:f7:f8:12:59:39:75:30:da:19:94:5d:0b:
                    0b:a0:69:78:c6:7f:c7:f6:0e:62:ca:c5:f4:fa:5d:
                    25:b7:24:2a:b8:36:a4:73:8e:a1:00:2d:2a:f9:b8:
                    a9:24:bd:6a:06:ab:a0:5d:5e:46:48:c6:7f:b2:2b:
                    e4:b8:99:e0:f9:65:d1:7b:5f:cf:ea:99:c8:f8:b4:
                    3d:c0:bd:34:fe:ba:81:8d:93:a9:13:84:ac:69:4f:
                    f1:8c:ef:c8:ee:1f:c7:cd:61:0f:7a:36:7c:c5:f5:
                    0b:a9:05:b8:54:4f:b2:fd:b1:37:c1:59:ea:9b:bf:
                    bb:b9:46:9c:c6:3a:23:dc:07:50:fb:f8:55:4a:fb:
                    43:ac:73:ce:85:18:d9:61:d8:a8:3d:64:96:10:af:
                    d6:8a:49:d2:4e:fe:f2:cd:97:0d:9b:00:eb:0a:b2:
                    5e:d8:4e:31:38:29:fc:01:dd:69:79:f6:ea:87:54:
                    3e:e4:e7:df:dd:24:8e:99:5d:4b:39:0a:fc:99:4e:
                    0c:da:08:ab:9d:7e:c7:dd:82:d1:b8:b9:d2:0f:09:
                    d2:66:8d:fc:66:a1:21:c3:40:f4:9c:f6:4a:f2:f4:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:19:52:C9:93:C0:1E:87:AA:82:7B:4D:AB:40:44:DE:23:2A:88:15
            X509v3 Authority Key Identifier:
                keyid:50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87cacea641658717abecb35689ebe8932f40ead.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/d9ed2db9a518a3d9b14c6c54261c9821bea9fc24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/d87cacea641658717abecb35689ebe8932f40ead.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:db:53:19:30:2e:71:a7:79:0a:16:19:6c:ea:3d:0c:fc:89:
         87:cb:e2:08:fd:ff:4e:e8:3d:a1:10:96:1e:09:a7:98:28:40:
         f4:ef:d1:25:26:3f:45:6b:f7:f5:96:54:91:ae:e0:1d:a9:b7:
         be:aa:ab:8f:ea:6f:92:a7:cb:9e:dd:48:7c:8c:eb:65:aa:eb:
         5c:89:06:84:1e:0f:a3:83:41:83:70:fe:2a:f5:9a:a5:fb:90:
         65:7e:53:0c:1a:8e:0f:78:3c:43:e2:78:d6:53:00:db:61:cf:
         7d:fd:40:6e:8c:c3:4f:3b:06:63:09:3a:d4:56:76:bd:36:e8:
         43:5a:6c:1a:0a:b4:67:a6:4b:8b:0e:ca:c7:b7:91:aa:f2:0d:
         bc:b0:01:6f:72:42:7a:a9:31:d2:e7:fd:d0:ae:72:da:fd:b5:
         81:f5:64:b0:04:2f:e8:a6:4a:44:ee:78:14:39:e3:7f:b3:00:
         14:34:31:45:95:94:51:d6:15:36:87:b7:35:15:65:40:1d:93:
         42:b7:16:9a:e2:39:34:5f:44:3f:95:3e:89:58:2e:14:ae:cf:
         dd:29:6e:44:fe:1c:b4:82:ec:7a:83:d3:d2:e0:99:52:df:20:
         33:0d:88:95:c4:07:11:0c:15:d0:4c:14:bf:a8:b2:83:52:33:
         c4:46:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org