Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/767b760bebeb9d17097c4ee3843edd613bd08c5c.roa
File:                     767b760bebeb9d17097c4ee3843edd613bd08c5c.roa (raw, json)
Hash identifier:          ZblJVVab7vIkgzhuqIvD7/W2hg9t6OhzkrorIZlh5zM=
Subject key identifier:   C5:7F:82:55:3E:19:C9:9F:51:03:FA:6A:0C:EA:11:25:E4:51:1C:D6
Certificate issuer:       /CN=89a6b799164b5797d1071c2a1f3f47ce007167fc
Certificate serial:       0A40B6
Authority key identifier: 38:D9:A3:8D:AB:4B:8B:38:B6:8A:D7:F1:15:F1:3E:80:4D:A7:8C:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a6b799164b5797d1071c2a1f3f47ce007167fc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/767b760bebeb9d17097c4ee3843edd613bd08c5c.roa
Signing time:             Wed 24 Mar 2021 22:50:57 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     269875
IP address blocks:        45.190.16.0/23 maxlen: 23
                          45.190.18.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671926 (0xa40b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a6b799164b5797d1071c2a1f3f47ce007167fc
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=767b760bebeb9d17097c4ee3843edd613bd08c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2a:7c:11:06:ca:60:12:36:54:f1:e6:6a:4d:
                    8e:cd:03:a8:1e:61:f3:72:f4:6d:43:ed:7e:78:a1:
                    fe:f7:d4:74:40:2f:bc:bd:d1:e2:10:ca:af:db:81:
                    c8:ec:9a:e3:87:17:d2:73:6d:db:4d:6a:22:88:b1:
                    a1:5b:34:22:c1:ff:4b:13:ce:f1:51:ac:df:6c:74:
                    b1:f2:b0:45:72:6f:da:5e:26:15:c1:9c:78:17:93:
                    bc:eb:02:f3:5f:3e:89:40:da:e7:ca:aa:42:2f:cd:
                    5e:12:ab:7c:29:be:cf:26:83:16:65:e2:90:46:a2:
                    67:b0:bd:f7:1c:14:65:66:bb:90:07:7c:93:48:53:
                    75:5d:29:69:9e:fa:53:87:a2:23:d8:a7:61:9c:18:
                    b0:8b:df:07:c5:30:c5:37:a5:ac:eb:4b:4f:6f:4b:
                    40:ca:9b:50:16:b7:5a:4c:0b:69:f0:94:cd:9c:18:
                    52:7c:2a:b7:62:02:d9:dc:3f:5e:33:3d:0b:f1:9a:
                    4d:c7:ce:4d:08:e3:ed:1e:26:be:a7:02:ce:b5:50:
                    56:20:3c:67:37:15:87:62:d2:55:f2:d7:04:7d:c1:
                    32:38:6c:23:39:35:1a:72:d4:4e:57:de:a5:d0:b3:
                    10:9c:94:ed:8a:12:c7:90:20:aa:91:4d:82:8c:05:
                    f9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7F:82:55:3E:19:C9:9F:51:03:FA:6A:0C:EA:11:25:E4:51:1C:D6
            X509v3 Authority Key Identifier:
                keyid:38:D9:A3:8D:AB:4B:8B:38:B6:8A:D7:F1:15:F1:3E:80:4D:A7:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a6b799164b5797d1071c2a1f3f47ce007167fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/767b760bebeb9d17097c4ee3843edd613bd08c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/89a6b799164b5797d1071c2a1f3f47ce007167fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:95:ad:67:97:9e:54:e3:39:9b:ef:d0:d8:0b:f8:84:79:4e:
         cc:9f:be:fe:f0:48:ec:08:cf:3d:75:64:45:4c:6f:ef:71:9d:
         8b:b9:93:1c:3d:30:95:17:28:71:e1:07:2a:be:0e:81:10:7e:
         66:e9:d2:02:41:a9:7f:2a:b5:cb:d9:43:6b:a5:9d:21:be:34:
         e7:04:82:47:ef:a2:12:01:e9:6b:f6:48:99:5c:a1:e7:63:d2:
         37:29:95:1c:c5:05:8d:0f:c3:2c:3a:7b:61:e7:ea:63:5e:67:
         7d:c0:1c:01:dc:4f:80:e0:07:f5:48:95:89:fa:c1:23:5f:dc:
         2d:b9:8a:0c:fd:a9:4f:0b:18:36:21:29:57:32:87:db:82:98:
         4c:d9:1e:4b:72:61:68:e0:79:21:10:33:48:b0:47:b8:07:12:
         f7:b9:d9:dc:47:a9:83:13:d7:44:b8:34:70:85:25:3e:83:4e:
         ba:38:8f:aa:d8:7f:9b:23:11:3c:c6:d3:f1:c4:d5:08:47:9a:
         82:1e:49:ce:93:99:b0:dc:29:de:be:04:fd:4d:2f:f6:95:45:
         83:7e:17:c1:2b:70:f6:d3:25:8d:78:45:14:9c:62:70:89:ea:
         f2:c4:98:4b:67:44:54:17:48:f1:d8:a2:39:49:98:98:83:08:
         1a:10:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org