Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/687caf8046312deb94ed24df75fa8d65f73f5b30.roa
File:                     687caf8046312deb94ed24df75fa8d65f73f5b30.roa (raw, json)
Hash identifier:          yh4U/KU/YKZoxXHHAUc7OuqzxAYX/FqmPiRBuCyTvXo=
Subject key identifier:   3E:E5:87:26:C6:E4:09:25:4A:9F:D3:81:8B:CE:FF:1E:12:53:DC:73
Certificate issuer:       /CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
Certificate serial:       0D9E4D
Authority key identifier: E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/687caf8046312deb94ed24df75fa8d65f73f5b30.roa
Signing time:             Wed 24 Mar 2021 14:31:19 +0000
ROA not before:           Wed 24 Mar 2021 14:31:19 +0000
ROA not after:            Tue 24 Mar 2026 14:31:19 +0000
asID:                     265750
IP address blocks:        170.150.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892493 (0xd9e4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
        Validity
            Not Before: Mar 24 14:31:19 2021 GMT
            Not After : Mar 24 14:31:19 2026 GMT
        Subject: CN=687caf8046312deb94ed24df75fa8d65f73f5b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:f8:0b:4b:ec:f6:74:46:56:64:d1:86:e4:
                    71:39:31:3a:92:2e:30:88:7e:27:2f:c8:2e:40:ce:
                    2b:11:2a:29:75:38:8f:b8:48:a9:4e:94:bf:a5:33:
                    33:e3:63:ff:a9:ea:ea:03:d8:2a:ec:ae:72:bf:2d:
                    13:7d:1e:59:bd:15:86:a5:bb:ac:f6:cf:83:65:8e:
                    c3:dd:08:16:1f:36:02:0d:89:10:a2:b6:c2:fe:76:
                    09:c1:fe:f5:f0:ff:6b:c4:9f:2a:76:ee:8b:43:1d:
                    fd:fb:96:6b:ae:99:07:3a:58:23:07:9b:e5:a0:8f:
                    0c:2f:d1:64:c2:ed:03:b7:5f:c7:29:aa:e9:4a:6a:
                    9d:ed:6f:1f:da:1a:c8:5b:93:93:3d:72:74:8e:5b:
                    dc:c7:78:66:a6:57:e0:9a:2d:64:b4:d8:8f:03:51:
                    ac:70:34:5d:65:66:b1:bb:2f:44:2c:1b:88:c7:0a:
                    31:b4:e4:b5:5c:d6:02:b8:d5:f3:61:20:cb:aa:f9:
                    bc:c2:5d:54:2f:6c:53:c9:7a:9b:ca:1e:3e:46:84:
                    1f:d0:06:2b:a7:f6:d8:33:8b:c5:14:f0:f8:1f:37:
                    73:2c:b7:2e:4b:62:dd:93:c5:ac:27:28:b5:63:9d:
                    d0:d6:79:6e:11:d8:d7:b9:5c:43:c6:f8:00:2b:22:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E5:87:26:C6:E4:09:25:4A:9F:D3:81:8B:CE:FF:1E:12:53:DC:73
            X509v3 Authority Key Identifier:
                keyid:E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/687caf8046312deb94ed24df75fa8d65f73f5b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:a4:be:5b:f5:9c:c9:8c:9b:69:5a:1c:f9:1a:ce:4c:0a:14:
         83:4f:6c:19:89:a0:ff:23:30:26:e7:8c:a7:7a:30:22:06:b9:
         21:a1:ce:7a:ac:04:35:1f:53:e8:af:60:86:b6:59:44:1e:bd:
         39:a7:0c:69:83:0b:7d:fc:9b:23:42:9a:fd:bf:78:9f:53:2c:
         21:55:e2:71:44:5e:6d:25:22:e8:f3:2e:fd:b3:4e:e2:4a:42:
         74:95:52:e5:cf:45:7a:99:94:2c:6a:b6:2d:87:1c:56:9a:1b:
         b7:1b:5f:83:8f:95:11:79:68:65:99:66:e0:4a:c5:01:b0:13:
         b5:19:aa:23:97:8d:53:1b:cb:41:a2:46:fa:68:e9:67:2e:5f:
         4e:99:04:62:89:01:03:4a:d4:ed:7a:d0:08:3f:7d:9b:cf:fd:
         0d:3d:c2:97:1f:b1:eb:1e:fc:17:c9:49:6a:61:06:46:93:91:
         e0:1b:f3:42:3a:f0:dd:69:44:00:ee:bc:93:ff:54:44:24:2d:
         74:17:03:c6:3a:c6:bf:1c:f6:62:f1:58:f7:61:f4:d2:0b:80:
         5e:68:4f:be:38:0a:fe:93:17:b9:58:04:88:07:e5:3e:d3:f9:
         78:d5:e2:38:8a:ba:07:de:48:5b:e7:55:5f:84:ec:c8:f8:d3:
         c4:70:c4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org