Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/026f6c912fb0fabd9142d34d54570b254d04fa6b.roa
File:                     026f6c912fb0fabd9142d34d54570b254d04fa6b.roa (raw, json)
Hash identifier:          KnRF4jLOngi8gb4tchXMojv5adxeLYfYoHWnMHjAL0o=
Subject key identifier:   8D:DF:72:5A:D0:8A:A4:86:0D:DC:5C:0E:3E:C7:14:9A:50:5F:FF:40
Certificate issuer:       /CN=8e9cf41123ed6894a352817e4249195f52cfe85e
Certificate serial:       0331
Authority key identifier: B1:EB:E3:06:23:F7:F0:5D:51:4C:29:EA:72:46:CC:D0:F8:30:E7:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e9cf41123ed6894a352817e4249195f52cfe85e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/026f6c912fb0fabd9142d34d54570b254d04fa6b.roa
Signing time:             Fri 17 Sep 2021 15:23:53 +0000
ROA not before:           Fri 17 Sep 2021 03:00:00 +0000
ROA not after:            Sun 17 Sep 2023 03:00:00 +0000
asID:                     266769
IP address blocks:        45.234.32.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817 (0x331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9cf41123ed6894a352817e4249195f52cfe85e
        Validity
            Not Before: Sep 17 03:00:00 2021 GMT
            Not After : Sep 17 03:00:00 2023 GMT
        Subject: CN=026f6c912fb0fabd9142d34d54570b254d04fa6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:a0:50:56:68:22:49:08:df:c6:d8:98:a6:
                    f5:61:b6:30:e7:b6:00:f7:f7:18:80:fc:df:90:d6:
                    b9:9a:54:65:4c:a2:77:1b:dc:e6:8a:41:0d:25:b4:
                    15:6f:65:7e:0d:0e:dc:9e:29:fb:21:19:2c:c1:43:
                    6c:58:40:81:68:78:6c:c1:6d:72:9a:5d:d9:da:55:
                    67:16:d5:68:3c:5b:0f:29:36:bc:16:3a:1b:91:40:
                    02:01:92:b1:c4:d1:ca:1c:39:d8:92:06:54:41:e2:
                    8f:05:4f:eb:9b:66:af:d1:9e:42:80:4a:a4:98:ec:
                    76:ba:f7:07:17:d1:2a:ba:9c:cd:b5:6a:12:ac:7d:
                    97:19:7c:0c:7c:66:70:bd:fa:2d:83:55:1c:13:23:
                    1f:79:e3:88:53:9a:23:eb:99:e9:b6:7e:71:28:25:
                    46:0c:98:ae:30:d7:42:96:80:f3:64:a4:57:be:9d:
                    00:e5:37:54:97:56:1a:1d:c2:7d:ed:99:14:7c:00:
                    9b:3b:4a:35:9c:e5:08:4b:70:bf:16:7b:18:55:0c:
                    a6:dd:2d:f5:7a:87:b1:35:38:9b:fa:68:fb:bb:6a:
                    5a:fd:99:be:7e:57:5e:e9:bd:01:39:7f:0c:eb:87:
                    e3:8c:f4:04:b5:14:75:d2:38:55:ec:3c:00:7b:74:
                    0c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DF:72:5A:D0:8A:A4:86:0D:DC:5C:0E:3E:C7:14:9A:50:5F:FF:40
            X509v3 Authority Key Identifier:
                keyid:B1:EB:E3:06:23:F7:F0:5D:51:4C:29:EA:72:46:CC:D0:F8:30:E7:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e9cf41123ed6894a352817e4249195f52cfe85e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/026f6c912fb0fabd9142d34d54570b254d04fa6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:e9:4f:cf:e2:ab:aa:2e:3e:16:7b:8a:77:51:29:d0:04:0b:
         66:3c:c3:01:35:8e:08:67:15:b2:82:58:89:44:44:c3:25:e7:
         59:dc:c6:8a:2f:ad:59:65:2c:98:33:0c:92:52:09:27:80:61:
         38:8f:e9:ba:8b:5a:a3:db:01:fe:38:d6:68:14:09:46:95:88:
         c2:7e:4a:da:f8:56:22:5f:00:da:9d:32:31:6d:4b:56:2b:1b:
         29:04:00:94:f5:c0:7a:e7:9b:16:62:05:01:32:7b:a2:cf:0e:
         9f:ab:bc:cb:68:e2:69:d5:58:ab:0f:95:8b:03:dd:02:b6:79:
         ad:ed:b0:9f:75:71:ab:61:c5:bc:08:a3:78:5f:90:d7:f7:7a:
         94:b2:39:a1:96:17:62:30:65:e6:08:e1:f7:56:7f:8c:cf:5a:
         1b:cc:68:fb:4f:15:a8:01:76:11:a0:8f:7e:0c:fb:39:53:e6:
         62:aa:4c:e8:ed:94:6b:f1:fa:e1:d6:91:68:90:91:95:61:fb:
         6c:60:a2:c7:49:8f:88:15:19:16:c1:c5:00:04:de:a1:44:ed:
         e1:2b:82:8c:97:05:3f:49:1e:b5:9f:6a:f9:d2:ab:c5:cf:5d:
         a4:89:a4:24:65:b3:9c:23:33:be:13:90:92:00:d3:b5:91:2e:
         f0:1e:e7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org