Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17a5fff3-ce5c-45bf-8e7b-7c38526167bc/0bdc40f03a82f8ed44c2757a57799957e7329bf8.roa
File:                     0bdc40f03a82f8ed44c2757a57799957e7329bf8.roa (raw, json)
Hash identifier:          h5lUe5HAt7FtQzPeYsGKL4x7QftELP18YA4KRrNF7ws=
Subject key identifier:   C5:0C:DA:90:C9:91:31:F5:FA:AC:75:82:8B:7F:B7:B9:18:41:AA:70
Certificate issuer:       /CN=41d303e19ed96f1a50fe58310ca4f4f2cbdbca2c
Certificate serial:       1BAEFC
Authority key identifier: B2:80:5E:48:A7:88:4C:74:39:F1:4F:AA:54:F3:38:DA:4B:56:60:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d303e19ed96f1a50fe58310ca4f4f2cbdbca2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17a5fff3-ce5c-45bf-8e7b-7c38526167bc/0bdc40f03a82f8ed44c2757a57799957e7329bf8.roa
Signing time:             Tue 08 Nov 2022 15:07:32 +0000
ROA not before:           Sun 11 Apr 2021 03:00:00 +0000
ROA not after:            Wed 13 Apr 2033 03:00:00 +0000
asID:                     266800
IP address blocks:        45.234.120.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1814268 (0x1baefc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d303e19ed96f1a50fe58310ca4f4f2cbdbca2c
        Validity
            Not Before: Apr 11 03:00:00 2021 GMT
            Not After : Apr 13 03:00:00 2033 GMT
        Subject: CN=0bdc40f03a82f8ed44c2757a57799957e7329bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:47:0e:14:ee:16:87:7e:72:75:03:6f:7c:55:
                    8f:ce:75:0f:8a:1a:b6:7e:ba:5c:75:04:13:f9:e1:
                    91:9b:f7:ce:88:ac:ac:ef:a6:7f:71:cd:70:f6:4c:
                    a5:6a:5d:6f:36:04:45:7e:eb:28:fb:81:84:f7:ba:
                    98:39:c5:35:08:f8:dc:b5:32:aa:19:13:9e:22:a6:
                    e0:08:73:21:38:bd:bb:09:33:e7:35:dd:83:66:e2:
                    71:f0:f2:9a:a1:5c:57:d3:4f:40:d1:44:7f:5c:98:
                    eb:12:cb:b7:4b:f5:39:45:5a:e3:3f:b8:7f:55:cf:
                    a3:b2:ae:15:c6:b9:e8:16:c2:97:18:f1:3c:ff:a0:
                    a7:48:3b:64:4d:a3:0f:63:24:30:08:9e:b8:23:9a:
                    45:3c:26:27:0a:a7:9f:47:c2:14:69:9b:ab:be:7e:
                    c0:ef:12:6e:42:28:05:c9:e3:57:e7:b9:f7:e5:aa:
                    fc:63:ac:d8:9c:fb:9d:80:f5:2f:06:c0:a9:02:b3:
                    73:c3:f3:88:a2:52:5a:66:71:9a:08:0e:67:f5:98:
                    db:c1:8c:18:5b:26:43:34:c5:ab:23:94:43:66:a1:
                    a7:f1:c8:41:c6:9c:4f:53:e9:70:49:eb:e4:e7:61:
                    a7:69:c9:b0:37:12:53:dd:5e:de:2a:86:66:68:61:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:DA:90:C9:91:31:F5:FA:AC:75:82:8B:7F:B7:B9:18:41:AA:70
            X509v3 Authority Key Identifier:
                keyid:B2:80:5E:48:A7:88:4C:74:39:F1:4F:AA:54:F3:38:DA:4B:56:60:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d303e19ed96f1a50fe58310ca4f4f2cbdbca2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17a5fff3-ce5c-45bf-8e7b-7c38526167bc/0bdc40f03a82f8ed44c2757a57799957e7329bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17a5fff3-ce5c-45bf-8e7b-7c38526167bc/41d303e19ed96f1a50fe58310ca4f4f2cbdbca2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:84:76:0c:2f:5e:52:f6:52:60:18:21:36:a6:04:02:67:43:
         11:a5:03:70:b8:80:b6:63:68:d8:cf:96:7e:a9:ce:2d:4d:c0:
         f7:8d:a3:3f:c0:ff:92:a2:96:af:54:c3:29:b0:82:fa:31:a6:
         82:c0:4e:af:9b:c3:65:6c:c4:38:5f:f5:c5:a4:99:f3:b1:ee:
         b1:5c:90:e2:cc:b0:ca:ed:c1:99:2e:9f:f4:8d:61:12:2b:d1:
         5a:fe:4d:42:ca:ad:ae:40:90:a4:64:ad:d1:12:05:c5:8b:4e:
         76:4c:1e:65:c9:28:85:da:8d:91:d4:a9:af:5c:b4:de:96:f7:
         59:a5:5b:69:d0:81:65:c9:33:12:6f:38:2d:00:dc:83:68:b8:
         27:fd:4a:20:7a:83:4a:36:f7:ae:3d:9b:ce:42:31:79:f6:a4:
         49:88:03:92:cd:8c:8e:55:a6:38:a8:78:cb:3c:20:76:5e:88:
         7c:d4:f1:75:96:bc:61:66:3d:07:94:a6:8e:15:38:eb:e6:95:
         a5:0a:34:60:42:1e:d7:47:b1:87:fc:4a:99:46:ad:b6:1f:97:
         88:56:29:c1:88:aa:e3:4b:be:d8:74:83:ac:a3:6f:16:a9:32:
         72:72:b5:9f:b2:f0:46:69:71:5a:43:3c:db:a8:3b:b9:eb:87:
         5b:5a:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org