Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/612a12b8eddf9f4fd08624c8b89582b6571077c7.roa
File:                     612a12b8eddf9f4fd08624c8b89582b6571077c7.roa (raw, json)
Hash identifier:          /uNf9PAbtQtJsaH9zNi5OHUoqwX/msOdOF7fjWRqEhI=
Subject key identifier:   67:40:42:CF:57:65:94:D7:22:B6:B7:90:4B:96:D9:6D:84:A2:33:26
Certificate issuer:       /CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Certificate serial:       157BBA
Authority key identifier: 5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/612a12b8eddf9f4fd08624c8b89582b6571077c7.roa
Signing time:             Fri 18 Mar 2022 21:00:45 +0000
ROA not before:           Fri 18 Mar 2022 03:00:00 +0000
ROA not after:            Mon 18 Mar 2024 03:00:00 +0000
asID:                     14080
IP address blocks:        191.156.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407930 (0x157bba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
        Validity
            Not Before: Mar 18 03:00:00 2022 GMT
            Not After : Mar 18 03:00:00 2024 GMT
        Subject: CN=612a12b8eddf9f4fd08624c8b89582b6571077c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0a:47:8a:d2:52:ec:8c:d6:27:3d:62:dc:d3:
                    f9:35:ca:7a:a2:26:2b:a9:45:83:fc:f1:2f:bb:f0:
                    7d:ff:4c:09:c5:00:e4:b0:2d:30:99:75:be:62:5b:
                    30:eb:cb:ac:f9:d2:1b:95:3f:5e:15:c8:f5:13:24:
                    d5:93:e2:bc:ef:6a:80:b7:fa:f4:1b:41:5b:a1:fd:
                    20:06:c8:86:e6:fa:6f:75:06:f9:2a:00:51:4f:5b:
                    e2:2d:5f:e8:6d:86:ff:7f:80:c4:23:ed:9e:c4:1a:
                    a4:b6:e2:7f:8e:a4:a1:88:2d:51:95:a0:c3:cc:e1:
                    89:fc:b7:52:7c:f1:2d:63:68:58:f7:80:70:8f:c4:
                    15:5f:78:d7:91:a8:ed:15:bd:61:21:e8:41:3a:cf:
                    2f:25:3b:f0:09:f7:a0:e8:71:87:05:df:c3:96:02:
                    36:0f:0c:7d:3b:e6:dc:6b:30:1e:4a:2d:66:12:8b:
                    37:5d:ea:d8:bc:85:81:44:2d:4d:73:e3:14:a7:d2:
                    10:3b:55:07:78:19:9e:17:26:ca:bc:b0:20:21:54:
                    d5:43:62:61:ce:76:e7:97:4c:63:b6:1a:e8:97:28:
                    10:1f:ea:ae:09:ea:79:45:d0:2c:1b:d9:57:78:44:
                    49:66:2d:85:90:d8:a4:cb:ac:ae:63:2b:3f:7d:79:
                    49:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:40:42:CF:57:65:94:D7:22:B6:B7:90:4B:96:D9:6D:84:A2:33:26
            X509v3 Authority Key Identifier:
                keyid:5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/612a12b8eddf9f4fd08624c8b89582b6571077c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:93:69:d8:9e:df:5e:c4:81:2f:44:b6:b9:7c:2c:44:50:
         14:35:3e:8f:f4:68:28:1e:52:21:9f:4a:e7:c3:c4:0f:09:27:
         ea:b3:5b:1a:01:e2:4b:66:d2:74:89:e6:40:36:87:89:9d:13:
         3c:26:8e:ab:db:bd:52:7e:84:af:52:e6:23:a6:ca:fb:a6:71:
         b5:27:c0:16:09:5f:cc:08:4e:82:68:3b:84:7d:49:2d:4b:2c:
         fa:e9:fd:97:f1:87:12:f7:b6:82:fc:7a:ea:ee:e2:85:eb:dc:
         e0:5f:a8:5a:de:01:03:fe:d4:0b:89:9d:12:82:2d:6a:1a:2d:
         e8:2e:15:f9:44:85:f6:eb:f3:2e:d9:f1:39:a0:b9:0d:7e:a2:
         7c:eb:63:63:f6:7a:88:93:5a:95:bb:3d:a4:7b:12:9f:41:7e:
         cc:ca:6a:c1:f0:b4:86:45:87:73:e9:63:d5:fe:5e:68:50:6a:
         05:69:8a:b0:f4:41:54:a1:37:e4:3b:67:83:30:03:68:50:80:
         9b:0f:98:00:1e:63:01:c8:13:07:39:df:fa:cc:08:c1:24:70:
         be:12:7b:29:9d:c2:c1:ae:7d:7f:5c:ed:08:54:93:21:14:44:
         de:32:cb:74:39:f0:51:b6:33:18:0f:1b:c9:6a:7a:ad:32:8a:
         a6:c5:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org