Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/7ce5c4c5300a5c1fe70f7c5292cde358a8c7ecc9.roa
File:                     7ce5c4c5300a5c1fe70f7c5292cde358a8c7ecc9.roa (raw, json)
Hash identifier:          L0LGySlw8qBs4OplmYluwIj6THJ2eTuD3u87j4jQw0Q=
Subject key identifier:   C7:44:19:43:02:51:36:4A:F9:C2:88:CF:A6:1A:A0:57:7E:44:BA:10
Certificate issuer:       /CN=8cecba4d06719b0701405567ea7739bad8040b51
Certificate serial:       1078B3
Authority key identifier: 80:CB:5A:5C:56:CC:08:65:09:95:00:14:30:A2:11:C1:AE:DF:A4:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cecba4d06719b0701405567ea7739bad8040b51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/7ce5c4c5300a5c1fe70f7c5292cde358a8c7ecc9.roa
Signing time:             Wed 18 Aug 2021 02:11:04 +0000
ROA not before:           Tue 17 Aug 2021 03:00:00 +0000
ROA not after:            Thu 17 Aug 2023 03:00:00 +0000
asID:                     267788
IP address blocks:        170.247.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079475 (0x1078b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cecba4d06719b0701405567ea7739bad8040b51
        Validity
            Not Before: Aug 17 03:00:00 2021 GMT
            Not After : Aug 17 03:00:00 2023 GMT
        Subject: CN=7ce5c4c5300a5c1fe70f7c5292cde358a8c7ecc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:af:3b:50:58:03:52:d4:ba:ff:d4:1a:20:
                    80:e3:e0:c9:4e:55:a9:03:95:8a:fb:b2:f7:86:cb:
                    34:cc:68:a7:21:a5:64:c3:35:c4:0c:78:26:19:cc:
                    19:6b:97:69:8b:dc:0d:22:71:33:57:32:6d:da:45:
                    65:88:2c:93:8c:90:54:e1:83:00:2e:85:23:0f:4b:
                    36:32:f9:1b:72:de:6b:df:1a:f7:0e:9b:42:82:0f:
                    ac:b7:7e:dd:98:10:dc:81:74:7b:d6:ca:a7:e4:27:
                    de:f4:52:12:2c:79:44:d8:a3:a8:6b:1c:7f:4b:fc:
                    45:0b:e1:1c:4d:a2:df:5f:9d:5e:8f:9a:f1:1b:9f:
                    e6:1a:97:0a:f3:23:91:41:53:fc:eb:dd:dc:29:04:
                    a0:ab:43:1e:b8:e3:01:05:65:b8:e6:0b:b1:c2:b1:
                    30:c2:12:01:48:98:3e:a0:c8:fa:af:34:d6:29:f8:
                    f6:9b:83:86:af:fb:99:e5:49:ad:bc:7c:0a:b4:a9:
                    6e:42:8f:61:86:dc:54:f8:c1:06:30:e8:13:2c:17:
                    c6:ef:59:e3:b5:64:a7:9c:43:0e:9f:26:99:ef:82:
                    30:7d:18:07:a2:c0:ed:28:cd:e9:40:8c:73:6d:99:
                    16:4a:7f:02:26:d1:88:be:cc:78:d5:7e:87:18:47:
                    fb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:44:19:43:02:51:36:4A:F9:C2:88:CF:A6:1A:A0:57:7E:44:BA:10
            X509v3 Authority Key Identifier:
                keyid:80:CB:5A:5C:56:CC:08:65:09:95:00:14:30:A2:11:C1:AE:DF:A4:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cecba4d06719b0701405567ea7739bad8040b51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/7ce5c4c5300a5c1fe70f7c5292cde358a8c7ecc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/8cecba4d06719b0701405567ea7739bad8040b51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:81:58:af:a4:cc:6f:71:81:d4:e2:28:c0:47:35:2e:c6:95:
         6b:0e:5d:57:01:bc:85:46:ad:77:28:01:9e:83:4d:bd:c9:53:
         b9:a4:59:40:ed:99:11:c1:cf:30:50:ff:5f:a4:3d:bb:02:75:
         d9:7a:1f:43:86:24:e0:46:6b:81:50:11:20:15:8a:87:d8:60:
         c9:ea:a9:21:a8:35:15:14:b4:4e:44:94:da:df:71:38:4b:82:
         60:da:56:58:54:62:e2:c5:1b:04:76:62:ab:b5:b2:11:b9:8f:
         2c:af:c3:5d:b0:fb:36:d8:8c:80:4f:22:7d:e4:77:22:e1:ca:
         ac:a1:fc:4e:30:21:35:25:88:7c:01:51:d6:a4:2f:4e:bc:87:
         39:90:10:ae:aa:3c:2e:72:00:91:0a:be:4d:97:b5:ec:2d:17:
         9f:66:07:9f:91:d8:7d:25:32:0b:f7:7b:b4:31:6e:51:dc:e5:
         69:dc:e1:3a:9c:9a:d4:2f:e5:c7:8e:72:53:8d:a4:99:d8:77:
         a1:a6:85:78:26:db:c9:03:f2:a6:e7:12:a8:ea:e5:72:ae:e1:
         9a:15:1a:c5:34:78:56:08:50:a1:ae:a1:d5:a2:b9:8a:0b:f9:
         8c:92:7a:76:14:a8:99:a6:9c:da:6a:18:73:d2:bd:f1:c6:d0:
         c8:62:f1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 22:53:58 2023 by rpki-client on console-ams.rpki-client.org