Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/00dc8959ce8c1e22f5cdfb98f5182e8b3acbb22c.roa
File:                     00dc8959ce8c1e22f5cdfb98f5182e8b3acbb22c.roa (raw, json)
Hash identifier:          SZlrV0mXGCF78crLHt/mrahs7f4TTjN9SfaSS9MKX88=
Subject key identifier:   65:34:56:F2:66:FB:7A:DB:22:B2:4A:7F:35:94:40:BE:43:CA:B7:8F
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E611A
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/00dc8959ce8c1e22f5cdfb98f5182e8b3acbb22c.roa
Signing time:             Wed 24 Mar 2021 14:30:56 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     27951
IP address blocks:        190.217.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942362 (0xe611a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=00dc8959ce8c1e22f5cdfb98f5182e8b3acbb22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:35:5c:7e:dc:3f:b5:c8:0d:31:c3:5d:b3:72:
                    b9:46:cd:76:dd:e6:af:f3:2f:cf:15:43:84:bb:2b:
                    ca:ce:66:0e:6a:9e:32:f5:85:ed:1d:50:1e:e2:5c:
                    88:41:d6:c2:fb:39:2d:fe:86:ba:cf:3f:6b:23:c4:
                    65:dd:63:23:29:fe:12:6c:76:5d:7f:36:66:b7:f3:
                    48:83:fb:48:7b:1b:c0:d9:04:fb:14:75:f3:f8:a0:
                    27:d4:c8:5d:32:da:25:65:9b:5a:e5:0d:db:3a:a7:
                    a3:29:27:58:5f:c9:39:58:94:91:97:66:e1:f2:5b:
                    f3:59:cc:05:69:1c:10:5c:40:01:a3:2a:c2:a4:de:
                    1b:2e:de:fb:4a:17:1a:49:7e:73:7f:97:05:89:0a:
                    18:b0:f2:1f:fe:68:b2:41:00:51:a7:10:a1:c8:98:
                    33:3d:96:40:39:14:96:b7:f5:58:3e:e8:52:12:28:
                    5f:2f:46:a1:a8:3f:d8:38:1f:2c:c9:29:b4:26:3f:
                    a5:28:79:a6:29:4c:6d:74:1a:73:83:cc:41:cd:46:
                    29:2e:56:b3:35:0f:c8:30:f5:ba:ff:f3:62:e7:6d:
                    f9:a0:e6:f4:c1:d2:e5:99:5c:55:15:45:13:21:2d:
                    08:e1:dc:8c:55:b4:2e:82:72:ca:a9:d2:95:06:4d:
                    fe:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:34:56:F2:66:FB:7A:DB:22:B2:4A:7F:35:94:40:BE:43:CA:B7:8F
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/00dc8959ce8c1e22f5cdfb98f5182e8b3acbb22c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:b6:e1:e4:89:fe:94:ed:35:36:08:23:4c:0b:67:5b:e2:
         90:61:8c:49:52:a3:1a:3d:41:66:9c:28:bb:7f:97:33:a6:ad:
         11:e2:7c:75:a2:e8:3f:a5:04:2d:bf:f0:9b:fe:fc:84:43:2e:
         60:8b:33:f0:f8:5e:ad:0b:fd:34:b4:11:aa:f3:4c:93:46:8c:
         76:ea:ca:9d:25:1b:a3:97:5a:83:47:af:f4:fa:0f:be:9a:e2:
         5f:39:03:56:ed:3a:f8:3b:17:d6:10:78:5c:d3:45:a9:9d:ee:
         92:78:71:fa:07:9b:b5:9c:01:c5:ac:e6:eb:7f:35:db:91:25:
         09:b2:5e:48:61:e6:63:71:12:25:d5:af:df:d8:bd:e6:00:ad:
         6c:48:e6:8e:40:39:35:f4:e5:26:20:93:09:27:4f:a0:d4:4e:
         50:9d:37:e2:20:d2:a0:fb:d9:c8:95:b9:37:57:5c:c4:8b:d4:
         ee:73:b8:ad:13:fb:7e:84:d9:95:fb:00:9b:d6:af:29:44:7b:
         29:e2:b7:55:d4:07:fc:2a:98:84:ad:fb:2e:13:aa:41:04:bd:
         6d:d0:64:1a:84:d5:3c:11:5b:8f:2f:da:f7:8b:86:a3:e4:eb:
         36:13:85:66:ed:2f:64:b3:9d:58:e9:c1:ac:39:b4:36:8f:ac:
         df:d1:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 21:31:50 2023 by rpki-client on console-fra.rpki-client.org