Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/6e47be00feeead7f180e11a6db8e8cbaa47d6d50.roa
File:                     6e47be00feeead7f180e11a6db8e8cbaa47d6d50.roa (raw, json)
Hash identifier:          8IaSw2+XiSPNqGd+x44GMgEcbXZKtTGKX5qIMYFomwc=
Subject key identifier:   4C:19:5F:6F:EF:89:2C:FC:45:54:25:05:5E:74:09:F7:09:69:A6:29
Certificate issuer:       /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial:       22346D
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/6e47be00feeead7f180e11a6db8e8cbaa47d6d50.roa
Signing time:             Fri 14 Jul 2023 20:39:21 +0000
ROA not before:           Thu 13 Jul 2023 20:39:21 +0000
ROA not after:            Mon 14 Jul 2025 20:39:21 +0000
asID:                     264836
IP address blocks:        66.231.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241645 (0x22346d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
        Validity
            Not Before: Jul 13 20:39:21 2023 GMT
            Not After : Jul 14 20:39:21 2025 GMT
        Subject: CN=6e47be00feeead7f180e11a6db8e8cbaa47d6d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:17:ef:11:f5:0c:97:4b:e6:55:16:24:c4:85:
                    b4:d7:8d:b0:05:c6:a1:59:0b:27:1d:52:19:0d:e9:
                    03:99:2d:df:93:a1:e1:80:e2:2d:4d:00:f7:26:1e:
                    ea:5e:e3:9c:dc:1a:f0:dc:1a:66:f7:c1:cd:36:6e:
                    26:01:ce:cd:1a:f7:0e:5a:bd:1b:5f:91:af:d4:bf:
                    c9:c4:0a:5d:aa:af:f1:3a:4b:f4:66:28:00:c3:0e:
                    f1:ec:fd:3a:7c:b9:e4:46:73:96:04:a5:fc:a4:13:
                    0c:45:20:ca:08:b2:d7:74:da:0b:18:1d:90:5e:9a:
                    5f:35:7d:44:60:03:29:67:4f:30:0c:99:c7:64:9b:
                    90:80:5d:50:e8:08:76:02:ba:ca:5a:1f:8c:4c:40:
                    d8:8e:64:29:14:83:68:01:96:96:ba:39:1b:d7:68:
                    5d:93:7f:ed:82:12:a6:71:34:06:a4:df:04:eb:b5:
                    70:fd:08:a7:9f:6e:78:5c:4b:33:17:2c:bb:93:7e:
                    30:cd:44:48:8d:49:a3:a9:e1:be:98:44:90:ea:20:
                    a2:65:d8:4b:09:40:93:cb:98:e6:b2:33:1a:ca:75:
                    75:c5:d9:7e:87:f1:4f:f5:21:d0:42:26:aa:6f:62:
                    bc:3d:f7:fb:0b:a9:93:fb:bc:a9:b2:8b:2f:aa:21:
                    5b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:19:5F:6F:EF:89:2C:FC:45:54:25:05:5E:74:09:F7:09:69:A6:29
            X509v3 Authority Key Identifier:
                keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/6e47be00feeead7f180e11a6db8e8cbaa47d6d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d8:d3:e4:31:e3:99:15:78:85:b3:4e:83:ba:89:b5:44:50:
         68:99:cc:da:44:f7:28:d3:45:60:13:89:45:b5:bc:a8:c9:a3:
         06:40:2b:c9:6a:ef:2e:d1:97:99:23:67:8f:e7:a7:f3:03:ae:
         ea:7b:f7:b7:6d:7c:a2:d6:61:1c:c4:ce:dc:a0:b3:18:73:14:
         8d:d0:83:d2:22:95:7b:38:d4:7d:4d:be:65:9f:b1:62:65:71:
         e9:63:5e:fe:4f:dd:ee:ed:c1:e4:0a:6f:d4:c5:b0:13:6f:84:
         a6:aa:0b:fa:95:1c:6d:92:ff:b0:2b:5a:50:0e:a7:40:95:1f:
         06:4b:94:46:c8:14:8c:fa:91:96:47:9f:88:9b:55:bd:76:d6:
         bd:6b:d2:8a:4d:52:10:6c:40:28:b7:ec:15:14:06:1c:be:8e:
         b2:dc:40:4d:28:28:37:9d:44:bb:fe:22:88:ec:3a:d6:02:be:
         7d:3b:59:fd:fc:3a:b8:c4:4e:d0:73:6f:ab:c0:3c:9a:41:9c:
         72:56:69:c3:69:84:f2:09:91:b0:14:a8:29:f8:4b:89:c2:ed:
         14:67:b9:25:58:8f:b6:c3:6d:01:e3:dc:f6:c8:8a:93:66:39:
         b7:6d:a5:93:8c:ff:88:4d:71:9a:c2:61:1d:07:86:a7:37:ac:
         bd:1b:f4:8d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIjRtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
NjRlMjU3ZWFlMDRlZTI2ZDhlYjMzOWYxNDg3OTFiMzFjYzA4NzUwHhcNMjMwNzEz
MjAzOTIxWhcNMjUwNzE0MjAzOTIxWjAzMTEwLwYDVQQDEyg2ZTQ3YmUwMGZlZWVh
ZDdmMTgwZTExYTZkYjhlOGNiYWE0N2Q2ZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArRfvEfUMl0vmVRYkxIW0142wBcahWQsnHVIZDekDmS3fk6Hh
gOItTQD3Jh7qXuOc3Brw3Bpm98HNNm4mAc7NGvcOWr0bX5Gv1L/JxApdqq/xOkv0
ZigAww7x7P06fLnkRnOWBKX8pBMMRSDKCLLXdNoLGB2QXppfNX1EYAMpZ08wDJnH
ZJuQgF1Q6Ah2ArrKWh+MTEDYjmQpFINoAZaWujkb12hdk3/tghKmcTQGpN8E67Vw
/Qinn254XEszFyy7k34wzURIjUmjqeG+mESQ6iCiZdhLCUCTy5jmsjMaynV1xdl+
h/FP9SHQQiaqb2K8Pff7C6mT+7ypsosvqiFbTQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEwZX2/viSz8RVQlBV50CfcJaaYpMB8GA1UdIwQYMBaAFGfGO6RHojXSKBwz
PpqDhyUXpLG+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2U2NGUy
NTdlYWUwNGVlMjZkOGViMzM5ZjE0ODc5MWIzMWNjMDg3NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjViNjM3YzYtY2RjZi00MjNkLThjMGMtY2Q2MTVh
Yjk4YTI0LzZlNDdiZTAwZmVlZWFkN2YxODBlMTFhNmRiOGU4Y2JhYTQ3ZDZkNTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNWI2MzdjNi1jZGNmLTQyM2QtOGMwYy1jZDYx
NWFiOThhMjQvY2U2NGUyNTdlYWUwNGVlMjZkOGViMzM5ZjE0ODc5MWIzMWNjMDg3
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAELnTzANBgkqhkiG9w0BAQsFAAOCAQEAL9jT5DHjmRV4hbNO
g7qJtURQaJnM2kT3KNNFYBOJRbW8qMmjBkAryWrvLtGXmSNnj+en8wOu6nv3t218
otZhHMTO3KCzGHMUjdCD0iKVezjUfU2+ZZ+xYmVx6WNe/k/d7u3B5Apv1MWwE2+E
pqoL+pUcbZL/sCtaUA6nQJUfBkuURsgUjPqRlkefiJtVvXbWvWvSik1SEGxAKLfs
FRQGHL6OstxATSgoN51Eu/4iiOw61gK+fTtZ/fw6uMRO0HNvq8A8mkGcclZpw2mE
8gmRsBSoKfhLicLtFGe5JViPtsNtAePc9siKk2Y5t22lk4z/iE1xmsJhHQeGpzes
vRv0jQ==
-----END CERTIFICATE-----
Generated at Tue Aug 1 09:41:19 2023 by rpki-client on console-fra.rpki-client.org