Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/ae255793f4d1ece0715b1d32f52633dcd793cd23.roa
File:                     ae255793f4d1ece0715b1d32f52633dcd793cd23.roa (raw, json)
Hash identifier:          DxN0ufP1inec8UFHrKbrGk5c4bjbmFHmwRl1HDtvCHY=
Subject key identifier:   F4:A3:28:BB:0A:89:E2:20:92:C9:42:C4:0A:8E:FE:9B:D0:23:EA:57
Certificate issuer:       /CN=8977e71e589f7dff93910384f64766de5bd105bb
Certificate serial:       04A014
Authority key identifier: 1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/ae255793f4d1ece0715b1d32f52633dcd793cd23.roa
Signing time:             Sun 05 Sep 2021 17:06:22 +0000
ROA not before:           Sun 05 Sep 2021 03:00:00 +0000
ROA not after:            Tue 05 Sep 2023 03:00:00 +0000
asID:                     269991
IP address blocks:        191.102.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303124 (0x4a014)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8977e71e589f7dff93910384f64766de5bd105bb
        Validity
            Not Before: Sep  5 03:00:00 2021 GMT
            Not After : Sep  5 03:00:00 2023 GMT
        Subject: CN=ae255793f4d1ece0715b1d32f52633dcd793cd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:28:3a:08:fd:c7:c3:a4:25:eb:86:03:ae:
                    f7:67:a3:ca:b0:79:32:cf:c6:2d:97:81:3f:af:20:
                    15:67:62:5f:e4:18:26:d4:5f:da:2b:81:18:af:b3:
                    19:42:ba:4b:a5:23:55:53:12:88:71:de:7d:0f:f9:
                    20:42:b2:a1:f6:54:fa:26:3f:5d:da:ab:f9:e6:50:
                    d8:27:f8:88:c4:28:4d:e5:d4:22:85:6b:aa:cc:66:
                    d0:8f:2c:56:7d:37:f2:ef:21:8f:a6:cf:80:f1:5a:
                    87:ee:e3:58:e6:d2:b1:19:d6:19:2b:2c:e7:ec:c4:
                    25:2a:48:3c:8d:81:8b:cf:d8:10:ed:91:f7:ed:80:
                    54:ee:4e:6b:3c:e0:c2:2a:c8:cc:ee:6c:b2:6c:bf:
                    55:50:ba:80:08:1d:5f:37:38:cc:03:ae:dd:e1:02:
                    33:cf:29:80:fe:05:90:fd:8a:94:b0:1d:83:bf:db:
                    e2:e3:91:5e:e0:0c:5c:13:6c:f1:b7:41:5e:f2:7d:
                    39:f8:d1:90:64:a1:fc:5d:48:70:97:3f:49:ac:b8:
                    6a:4a:4b:43:32:67:5e:95:5d:cc:87:87:f5:81:b2:
                    75:ac:4d:3b:d2:fc:ea:66:08:64:5d:0c:7a:1a:09:
                    dd:6c:cb:e0:65:aa:c3:06:86:f9:89:36:a1:f6:1f:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A3:28:BB:0A:89:E2:20:92:C9:42:C4:0A:8E:FE:9B:D0:23:EA:57
            X509v3 Authority Key Identifier:
                keyid:1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/ae255793f4d1ece0715b1d32f52633dcd793cd23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/8977e71e589f7dff93910384f64766de5bd105bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:46:0b:70:08:85:59:05:f0:2f:a6:61:a4:b5:f4:4b:bf:a2:
         fa:c2:4c:cb:07:62:b6:6e:dd:c1:c9:00:c2:3f:bd:e4:4c:d3:
         27:cc:32:bc:61:19:7b:88:c5:58:aa:28:c1:fa:e9:e4:02:1a:
         20:0e:8f:5e:4c:69:9a:40:17:f0:20:ee:c3:b3:76:dc:d1:8c:
         b9:2b:d7:ad:a2:cc:6c:4a:4d:64:11:29:c2:d2:32:1f:d8:cc:
         56:1c:db:2b:b1:f7:1e:5d:90:39:fe:45:7b:ff:18:5a:97:96:
         01:c3:66:dd:10:2a:ef:3c:cb:21:51:46:c0:af:c7:ff:ef:85:
         6e:e3:52:40:f8:c3:7a:71:a4:65:de:41:24:91:b2:97:7c:07:
         24:28:53:12:1c:85:04:1d:88:16:5d:10:ad:d0:cf:23:b0:4e:
         b6:d7:f4:24:7b:0b:c9:19:98:09:dc:b7:49:05:9c:47:44:4a:
         75:ec:2a:c4:84:22:40:fd:9b:b5:a3:8e:d7:46:10:93:4b:b0:
         4a:7d:7b:94:86:84:11:45:e9:b4:0c:31:35:a8:66:d0:91:a1:
         ab:75:8d:3e:5a:78:be:36:92:cc:85:0a:8c:6f:aa:38:a5:2d:
         8b:45:8b:90:70:f1:ca:33:d8:ee:4c:98:ea:e1:bf:98:86:55:
         eb:2d:07:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 09:05:43 2023 by rpki-client on console-fra.rpki-client.org