Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/00a4f52109fb861a657bdcad5aee8ec3de2eb482.roa
File:                     00a4f52109fb861a657bdcad5aee8ec3de2eb482.roa (raw, json)
Hash identifier:          UCNK4Q7dAnf7RQWtR5L2TdOgLJlYKBX+cYO2KLwYDYA=
Subject key identifier:   90:35:6B:8A:6D:7E:85:9A:EB:AE:68:A8:51:EF:C7:1E:5F:C7:F1:C6
Certificate issuer:       /CN=6ff75e9cde86b5c490d171a8993267e23270787a
Certificate serial:       117A6A
Authority key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/00a4f52109fb861a657bdcad5aee8ec3de2eb482.roa
Signing time:             Tue 07 Mar 2023 17:11:47 +0000
ROA not before:           Sun 05 Mar 2023 17:10:57 +0000
ROA not after:            Fri 07 Mar 2025 17:10:57 +0000
asID:                     14593
IP address blocks:        149.19.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145450 (0x117a6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff75e9cde86b5c490d171a8993267e23270787a
        Validity
            Not Before: Mar  5 17:10:57 2023 GMT
            Not After : Mar  7 17:10:57 2025 GMT
        Subject: CN=00a4f52109fb861a657bdcad5aee8ec3de2eb482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b8:54:a3:8d:b6:25:97:db:87:93:b1:2b:f5:
                    16:d0:ce:e3:14:f6:f6:7c:94:7e:d3:d3:54:af:ed:
                    4a:13:3a:d1:4e:aa:1b:5e:69:6e:29:35:1c:5e:1a:
                    52:e1:35:27:f5:e9:d9:e4:1a:5a:3f:1d:c5:3a:94:
                    d6:3a:c6:0c:e0:57:4f:57:96:cf:ea:3e:61:e2:bb:
                    12:b6:76:79:ad:2f:1b:4b:6f:0d:13:dc:6c:e5:9b:
                    39:53:07:dc:db:a1:e9:c1:11:48:f5:4e:ed:c4:ad:
                    16:a4:9b:bb:f8:b5:7b:af:fc:ec:35:ca:61:74:36:
                    08:fa:5c:c1:2e:66:f7:1c:c0:d7:01:49:53:b7:5f:
                    3d:94:fe:c6:0b:8c:3a:0d:51:e9:19:fe:44:7a:ea:
                    0f:70:46:bc:1e:43:18:71:ce:3e:8d:7a:0a:2c:34:
                    92:a1:90:c2:42:63:8b:fd:63:54:de:63:46:bf:5b:
                    c6:aa:ab:9d:91:6c:a3:9c:2f:cc:ad:7b:a5:8e:d5:
                    37:98:1d:b3:d1:90:8e:f7:11:4f:6a:d1:e6:29:a8:
                    6e:20:bf:16:9c:94:6f:49:7a:90:eb:32:ca:e5:10:
                    9f:85:f9:c6:42:2c:0f:3d:c0:04:c1:e8:4d:d1:34:
                    8a:53:58:1e:33:06:eb:82:86:e8:fa:64:df:6c:53:
                    91:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:35:6B:8A:6D:7E:85:9A:EB:AE:68:A8:51:EF:C7:1E:5F:C7:F1:C6
            X509v3 Authority Key Identifier:
                keyid:95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/00a4f52109fb861a657bdcad5aee8ec3de2eb482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:f7:da:84:ac:27:bb:67:fb:82:b2:c8:5e:b9:4b:55:b5:77:
         99:d8:f8:7a:1d:b3:a4:a3:09:90:27:0c:c3:e7:b1:f1:21:e6:
         99:06:76:d4:45:5b:dc:dd:b4:66:c8:d9:ce:95:9d:7d:08:28:
         a3:be:d5:74:54:c3:20:08:72:89:18:7b:c0:f9:31:1a:82:1c:
         c2:d2:91:16:35:db:72:85:fa:e3:a7:ec:94:2f:63:7c:b2:40:
         1a:1b:b3:ce:33:b5:03:8e:1f:56:89:8b:23:1d:52:3d:a2:1b:
         0e:9c:95:b9:04:3c:b9:8b:4a:8b:f2:bc:4b:47:c7:06:37:67:
         65:44:f4:c3:32:6a:39:61:ee:d3:8e:a5:46:4d:bd:b7:81:8c:
         fa:6d:4b:05:d3:fd:cf:5c:08:4e:07:23:47:35:90:49:e8:cb:
         36:dc:41:f5:b1:17:05:06:c5:a5:93:29:e6:3f:ed:cf:d5:e0:
         59:54:41:93:21:ff:41:7c:06:c4:0e:19:a1:a4:39:67:34:f7:
         9b:8e:fa:4e:c4:11:02:33:01:7c:73:86:c8:44:42:b8:f1:4d:
         99:98:f5:74:0f:4f:4e:74:3f:31:50:12:1c:96:53:1e:5d:a2:
         44:d5:9f:fe:8a:b6:73:3b:92:66:ac:e4:8c:fe:cc:34:01:e2:
         ab:97:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:13 2023 by rpki-client on console-fra.rpki-client.org