Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/20030eb2509654e4d2353fff56152f382a962e30.roa
File:                     20030eb2509654e4d2353fff56152f382a962e30.roa (raw, json)
Hash identifier:          w4pgsUfdw57t0wWtTfRYiBVHsnD7xualaAG5D8zRQH8=
Subject key identifier:   74:A1:50:66:E8:B4:59:3F:94:7A:A1:D4:BA:A1:21:D1:2B:08:14:B4
Certificate issuer:       /CN=610a073086b39384e909786d0a194418acd0bd49
Certificate serial:       113D62
Authority key identifier: D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/20030eb2509654e4d2353fff56152f382a962e30.roa
Signing time:             Thu 26 Aug 2021 07:56:51 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     271911
IP address blocks:        45.70.56.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129826 (0x113d62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610a073086b39384e909786d0a194418acd0bd49
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=20030eb2509654e4d2353fff56152f382a962e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:60:6c:58:96:09:9a:3d:d8:d0:52:d3:bd:
                    e3:c6:2a:b2:fd:2d:ad:64:d5:98:bb:b2:b2:b2:81:
                    b6:a8:1b:c0:c2:1e:ff:5f:8e:b6:e4:d9:2a:4b:6b:
                    57:72:31:2c:9b:f8:01:65:fa:9d:72:da:06:69:6f:
                    86:6a:7c:01:aa:14:81:15:7c:4e:a2:14:8c:f7:45:
                    76:67:e5:ab:b7:29:48:bf:90:61:0a:30:30:38:f2:
                    4f:fc:ae:74:14:5b:c1:e4:66:c7:c7:e8:7f:28:9a:
                    c5:31:7a:8f:87:26:fd:06:2f:df:18:cd:01:c1:38:
                    59:82:12:0b:4e:93:93:9d:fe:1a:1e:4a:5f:62:7c:
                    0a:6d:91:39:bd:55:48:69:9d:60:88:51:f0:f0:29:
                    7d:1a:9d:94:d9:9f:84:42:90:fd:2d:53:f6:cc:70:
                    ca:9f:3b:95:12:c9:05:06:67:d6:85:c2:44:d0:4f:
                    61:64:c8:35:29:2e:69:92:49:ba:3c:fe:42:a1:fa:
                    4f:04:f9:cb:2e:86:e7:7c:a0:68:8a:aa:dc:90:77:
                    14:82:8a:f3:62:56:a1:5f:b5:c3:3f:58:6e:39:fb:
                    82:b4:23:5d:be:65:d9:0e:99:91:94:2a:4d:2c:6c:
                    d2:7c:ca:f5:6c:e2:85:a5:a2:23:e2:ce:4f:78:83:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A1:50:66:E8:B4:59:3F:94:7A:A1:D4:BA:A1:21:D1:2B:08:14:B4
            X509v3 Authority Key Identifier:
                keyid:D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/20030eb2509654e4d2353fff56152f382a962e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/610a073086b39384e909786d0a194418acd0bd49.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:75:41:a7:83:89:ee:9b:63:81:2f:0b:22:e4:15:2a:b3:fd:
         d3:60:72:34:18:d6:21:4f:91:49:91:c6:e2:f4:e7:42:5c:2a:
         ce:78:e8:6a:d1:b2:30:fa:95:08:99:e4:3e:1f:d5:d4:9e:37:
         36:0e:76:45:bb:dc:3c:96:04:b1:53:cc:f0:99:82:5b:57:2a:
         8d:35:ce:4e:5a:22:b3:b4:6b:7a:5e:1b:90:e0:ae:4c:6a:bf:
         77:99:1b:e8:a7:a4:3e:0a:8b:03:ae:0b:30:85:15:04:f3:d3:
         9c:e7:31:31:fe:c4:02:7d:b0:09:a2:cb:1b:76:3c:10:b1:7e:
         79:0c:d6:fe:c9:7f:1b:fc:57:d1:45:d3:5a:cb:75:54:72:a1:
         81:17:c1:de:d7:ce:1b:54:b4:cc:f7:a9:9a:52:84:ca:0d:c7:
         56:80:bd:f4:c0:c3:b6:71:a5:eb:d8:e7:bb:d8:f4:79:32:d9:
         5f:08:39:5f:af:72:b3:56:fa:a7:64:2f:44:90:08:ac:84:0f:
         37:07:64:40:ef:b1:e2:70:88:a2:9a:de:bf:33:a2:d8:46:7c:
         1a:1d:40:dc:66:fc:40:01:61:ab:fe:6c:9f:71:51:a9:c0:7e:
         7c:7b:48:70:df:48:b0:4d:12:ee:0b:d3:9f:6e:4b:b7:1b:ff:
         37:af:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 09:05:13 2023 by rpki-client on console-ams.rpki-client.org