Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/a19f93b9aa2e29c9a7646bd46e91daccd2e20951.roa
File:                     a19f93b9aa2e29c9a7646bd46e91daccd2e20951.roa (raw, json)
Hash identifier:          6REAvHsPfYEAwkPDlCpMYr2UR5vCrfrwt9Iof0WYO4s=
Subject key identifier:   4B:9E:D6:CB:BE:DD:94:1A:EF:82:16:BC:C2:9B:FF:F4:4F:7C:DC:82
Certificate issuer:       /CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
Certificate serial:       0D623F
Authority key identifier: E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/a19f93b9aa2e29c9a7646bd46e91daccd2e20951.roa
Signing time:             Wed 24 Mar 2021 14:40:34 +0000
ROA not before:           Wed 24 Mar 2021 14:40:34 +0000
ROA not after:            Tue 24 Mar 2026 14:40:34 +0000
asID:                     264668
IP address blocks:        45.70.202.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877119 (0xd623f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
        Validity
            Not Before: Mar 24 14:40:34 2021 GMT
            Not After : Mar 24 14:40:34 2026 GMT
        Subject: CN=a19f93b9aa2e29c9a7646bd46e91daccd2e20951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:a8:3a:50:2f:b6:55:b2:68:9e:04:d9:e9:
                    8b:dc:be:63:97:01:85:83:27:df:99:08:8a:6b:2e:
                    fc:69:1c:23:0a:ca:e1:e8:53:58:f1:00:66:60:09:
                    fa:c3:54:2c:bb:95:4d:a6:67:2b:b3:d1:5e:91:c4:
                    b7:16:a9:a1:c9:20:fe:00:6e:ca:06:10:cc:8e:74:
                    26:79:38:4b:96:07:31:a1:9a:97:1b:2b:f4:9e:15:
                    68:a1:d2:5d:5d:8d:72:1d:e1:b3:eb:94:ad:c2:37:
                    96:59:54:47:50:88:91:a6:04:28:67:45:2d:bd:d1:
                    a4:93:10:9e:82:91:ac:05:0c:73:70:78:2c:e9:8a:
                    93:21:43:88:a7:dc:77:29:d5:63:9b:89:a6:0e:71:
                    62:cf:c6:ce:1e:cb:16:15:f7:dd:cb:17:84:e5:72:
                    ec:fc:23:d4:61:f8:36:1e:6b:ab:45:40:30:cd:6d:
                    0a:b2:76:ae:65:ee:36:b2:d2:02:c6:24:9a:3d:8f:
                    64:ba:d1:d5:b0:62:16:4d:d1:00:73:54:43:1b:4d:
                    b6:2f:1a:77:f7:e9:72:81:3a:86:9b:c1:d9:26:de:
                    56:8c:2f:d6:50:51:91:fd:d4:5d:96:90:f5:b1:c6:
                    37:77:9c:4e:ba:ee:94:54:4e:27:9d:a1:2c:a5:6e:
                    54:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9E:D6:CB:BE:DD:94:1A:EF:82:16:BC:C2:9B:FF:F4:4F:7C:DC:82
            X509v3 Authority Key Identifier:
                keyid:E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/a19f93b9aa2e29c9a7646bd46e91daccd2e20951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:95:9b:dc:50:04:f0:f4:af:56:8f:17:5c:a4:2c:78:53:72:
         ef:cc:f5:0e:38:06:d4:b7:ac:77:00:fc:95:51:4d:4a:1b:d4:
         f4:66:75:65:dd:08:7d:89:9b:74:8b:23:81:47:c3:0c:4a:87:
         24:9f:4a:e5:a9:a8:37:fc:96:aa:91:96:9e:1a:7a:50:b5:7b:
         51:e1:0d:0e:ba:19:94:60:e2:bc:8f:73:42:a3:53:f9:c1:36:
         68:ec:18:fb:5e:5a:d2:be:47:78:85:50:1e:34:5a:93:00:1c:
         7d:ea:60:69:59:dd:8c:26:bc:66:79:8a:f8:81:b8:c7:36:69:
         da:81:85:84:a6:ab:14:75:de:ab:33:95:d4:35:1b:b4:ae:78:
         1c:1f:9e:30:ab:90:23:13:c5:53:ee:47:70:53:4f:e5:58:1f:
         75:b3:04:70:e1:7f:23:fb:02:d2:e5:83:93:fa:a5:69:15:28:
         e8:50:c5:89:c7:bb:db:ab:b4:da:e2:b0:83:79:af:01:4c:10:
         60:cc:4e:ff:42:07:78:90:0a:06:3f:56:ca:bb:bb:be:74:9b:
         b7:b1:7d:10:ca:d6:43:59:68:51:e2:92:84:b2:17:9f:ca:36:
         d0:65:af:37:c5:25:b9:a6:f0:0e:fa:88:06:68:f4:53:d0:c5:
         1b:ac:aa:d6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDWI/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
YTdhZGU5MWRhN2Y1ZmNiNWMwMTEyMThjMGM5YjM5YWRhNjgyM2IwHhcNMjEwMzI0
MTQ0MDM0WhcNMjYwMzI0MTQ0MDM0WjAzMTEwLwYDVQQDEyhhMTlmOTNiOWFhMmUy
OWM5YTc2NDZiZDQ2ZTkxZGFjY2QyZTIwOTUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmdSoOlAvtlWyaJ4E2emL3L5jlwGFgyffmQiKay78aRwjCsrh
6FNY8QBmYAn6w1Qsu5VNpmcrs9FekcS3FqmhySD+AG7KBhDMjnQmeThLlgcxoZqX
Gyv0nhVoodJdXY1yHeGz65StwjeWWVRHUIiRpgQoZ0UtvdGkkxCegpGsBQxzcHgs
6YqTIUOIp9x3KdVjm4mmDnFiz8bOHssWFffdyxeE5XLs/CPUYfg2HmurRUAwzW0K
snauZe42stICxiSaPY9kutHVsGIWTdEAc1RDG022Lxp39+lygTqGm8HZJt5WjC/W
UFGR/dRdlpD1scY3d5xOuu6UVE4nnaEspW5UmQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEue1su+3ZQa74IWvMKb//RPfNyCMB8GA1UdIwQYMBaAFOEPn/rTXPQWpbO0
MPOaiAOvbW7dMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVhN2Fk
ZTkxZGE3ZjVmY2I1YzAxMTIxOGMwYzliMzlhZGE2ODIzYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmRjMTRkYjktN2JhNi00ODFmLWE4OTctODhlZGVh
MTkzODUzL2ExOWY5M2I5YWEyZTI5YzlhNzY0NmJkNDZlOTFkYWNjZDJlMjA5NTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZGMxNGRiOS03YmE2LTQ4MWYtYTg5Ny04OGVk
ZWExOTM4NTMvMDVhN2FkZTkxZGE3ZjVmY2I1YzAxMTIxOGMwYzliMzlhZGE2ODIz
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS1GyjANBgkqhkiG9w0BAQsFAAOCAQEAiJWb3FAE8PSvVo8X
XKQseFNy78z1DjgG1LesdwD8lVFNShvU9GZ1Zd0IfYmbdIsjgUfDDEqHJJ9K5amo
N/yWqpGWnhp6ULV7UeENDroZlGDivI9zQqNT+cE2aOwY+15a0r5HeIVQHjRakwAc
fepgaVndjCa8ZnmK+IG4xzZp2oGFhKarFHXeqzOV1DUbtK54HB+eMKuQIxPFU+5H
cFNP5VgfdbMEcOF/I/sC0uWDk/qlaRUo6FDFice726u02uKwg3mvAUwQYMxO/0IH
eJAKBj9Wyru7vnSbt7F9EMrWQ1loUeKShLIXn8o20GWvN8UluabwDvqIBmj0U9DF
G6yq1g==
-----END CERTIFICATE-----
Generated at Thu Sep 14 21:47:18 2023 by rpki-client on console-ams.rpki-client.org