Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/0a41f33e291e0facd56d92cf2d70311f82f15381.roa
File:                     0a41f33e291e0facd56d92cf2d70311f82f15381.roa (raw, json)
Hash identifier:          j+i/kcXNh/uZOyVss6Y01Tf8gKtlXCrZNq3IVl6sN+M=
Subject key identifier:   34:66:CE:EC:B4:F4:06:F7:B5:CD:90:14:AB:E3:7A:4A:6A:CD:A3:F4
Certificate issuer:       /CN=7cd1ba1c4f2170f7f3f283070d2f069edc42eeef
Certificate serial:       0595
Authority key identifier: 8F:31:10:80:6C:2F:2C:5B:E3:65:90:C1:B5:59:B5:9F:E3:15:DC:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd1ba1c4f2170f7f3f283070d2f069edc42eeef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/0a41f33e291e0facd56d92cf2d70311f82f15381.roa
Signing time:             Fri 07 Oct 2022 22:14:06 +0000
ROA not before:           Fri 07 Oct 2022 22:13:33 +0000
ROA not after:            Mon 07 Oct 2024 22:13:33 +0000
asID:                     10778
IP address blocks:        168.196.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd1ba1c4f2170f7f3f283070d2f069edc42eeef
        Validity
            Not Before: Oct  7 22:13:33 2022 GMT
            Not After : Oct  7 22:13:33 2024 GMT
        Subject: CN=0a41f33e291e0facd56d92cf2d70311f82f15381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:b7:0e:dd:20:88:da:c5:3f:7c:e6:d7:fb:
                    d9:46:53:94:bd:51:18:8f:fb:46:5d:98:d3:d8:e9:
                    20:2b:77:08:5e:c5:c7:75:a7:9d:7e:3c:22:4b:51:
                    ca:38:4d:12:37:c2:a7:b0:01:17:61:1b:f1:08:1a:
                    e8:3a:38:c9:74:96:ef:b1:04:22:27:11:dc:23:48:
                    ed:27:a9:5a:24:cb:f4:ef:d8:8a:0b:4c:c9:91:5a:
                    20:7a:11:3b:2a:36:3f:97:9f:5d:db:25:5a:40:9d:
                    e7:3d:7c:35:c2:0e:42:70:cc:94:f6:08:62:73:a7:
                    5c:77:ab:66:09:1f:cc:af:85:0c:31:16:1a:e2:0d:
                    92:5f:ba:cd:8c:8f:0d:09:6f:ea:a7:2b:6c:ef:4b:
                    57:4c:86:d5:84:85:23:22:e1:38:44:11:37:d4:f7:
                    e8:74:c1:61:77:a4:66:98:3e:65:27:6f:fd:1d:5a:
                    62:dd:e3:50:96:be:94:dd:fb:58:55:be:67:d1:f7:
                    4b:e4:1d:45:9c:78:6b:a7:6d:56:69:e4:f1:93:ae:
                    47:8f:4c:ec:ff:2b:ba:bc:56:ba:50:32:95:21:6f:
                    0a:b7:d4:23:8e:2c:10:5d:e9:65:3c:43:eb:c1:19:
                    82:4b:c1:98:5f:70:51:65:7f:94:b9:28:e2:bf:2b:
                    d9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:66:CE:EC:B4:F4:06:F7:B5:CD:90:14:AB:E3:7A:4A:6A:CD:A3:F4
            X509v3 Authority Key Identifier:
                keyid:8F:31:10:80:6C:2F:2C:5B:E3:65:90:C1:B5:59:B5:9F:E3:15:DC:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd1ba1c4f2170f7f3f283070d2f069edc42eeef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/0a41f33e291e0facd56d92cf2d70311f82f15381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/7cd1ba1c4f2170f7f3f283070d2f069edc42eeef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:19:69:7c:e7:bf:e7:e7:7f:3a:1f:09:f7:b0:ad:77:02:90:
         8f:d4:14:9e:61:b4:87:40:d0:26:52:b4:c2:01:ac:f9:46:ec:
         a8:80:4b:66:80:b1:35:c7:53:7f:d1:0c:a4:c8:1a:ad:34:6e:
         36:3f:62:c1:20:be:5d:6f:b4:01:84:96:61:e5:05:51:cd:3e:
         17:a7:42:21:fd:ca:04:1f:02:b2:55:39:d0:51:05:c5:3a:a2:
         77:1c:41:3e:1a:cd:52:43:9c:46:03:98:0a:ab:6d:64:e9:50:
         bc:b9:a2:eb:62:5c:00:05:db:dc:f3:bf:89:92:5b:86:6b:89:
         91:8d:24:4d:5f:e8:d2:77:d4:eb:a1:ee:6b:8c:3a:9e:8c:af:
         8e:e4:bb:50:9a:90:d2:9f:9b:42:88:c1:a2:32:0e:b7:be:b9:
         6b:28:51:32:d1:76:e9:e7:62:2e:ea:fe:0a:81:5b:79:3d:75:
         9c:64:d7:b8:d6:0c:5f:a3:0e:50:57:95:f1:bc:38:bd:b5:48:
         8a:29:c4:a2:a0:01:05:b8:aa:31:ed:56:47:22:52:79:ed:eb:
         99:7c:ff:22:cf:42:21:4e:e7:80:c9:77:a7:bf:09:de:3a:42:
         1f:fc:50:03:67:09:be:ea:16:89:9e:43:b4:b4:72:08:48:e4:
         e6:1b:ea:77
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN2Nk
MWJhMWM0ZjIxNzBmN2YzZjI4MzA3MGQyZjA2OWVkYzQyZWVlZjAeFw0yMjEwMDcy
MjEzMzNaFw0yNDEwMDcyMjEzMzNaMDMxMTAvBgNVBAMTKDBhNDFmMzNlMjkxZTBm
YWNkNTZkOTJjZjJkNzAzMTFmODJmMTUzODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJjbcO3SCI2sU/fObX+9lGU5S9URiP+0ZdmNPY6SArdwhexcd1
p51+PCJLUco4TRI3wqewARdhG/EIGug6OMl0lu+xBCInEdwjSO0nqVoky/Tv2IoL
TMmRWiB6ETsqNj+Xn13bJVpAnec9fDXCDkJwzJT2CGJzp1x3q2YJH8yvhQwxFhri
DZJfus2Mjw0Jb+qnK2zvS1dMhtWEhSMi4ThEETfU9+h0wWF3pGaYPmUnb/0dWmLd
41CWvpTd+1hVvmfR90vkHUWceGunbVZp5PGTrkePTOz/K7q8VrpQMpUhbwq31COO
LBBd6WU8Q+vBGYJLwZhfcFFlf5S5KOK/K9kxAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUNGbO7LT0Bve1zZAUq+N6SmrNo/QwHwYDVR0jBBgwFoAUjzEQgGwvLFvjZZDB
tVm1n+MV3OcwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS83Y2QxYmEx
YzRmMjE3MGY3ZjNmMjgzMDcwZDJmMDY5ZWRjNDJlZWVmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8yZWE3YTQ1MC04OTE4LTQ4N2QtYTAxZS02ZDU5ZWYz
M2UxYTAvMGE0MWYzM2UyOTFlMGZhY2Q1NmQ5MmNmMmQ3MDMxMWY4MmYxNTM4MS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzJlYTdhNDUwLTg5MTgtNDg3ZC1hMDFlLTZkNTll
ZjMzZTFhMC83Y2QxYmExYzRmMjE3MGY3ZjNmMjgzMDcwZDJmMDY5ZWRjNDJlZWVm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCqMS4MA0GCSqGSIb3DQEBCwUAA4IBAQDBGWl857/n5386Hwn3
sK13ApCP1BSeYbSHQNAmUrTCAaz5RuyogEtmgLE1x1N/0QykyBqtNG42P2LBIL5d
b7QBhJZh5QVRzT4Xp0Ih/coEHwKyVTnQUQXFOqJ3HEE+Gs1SQ5xGA5gKq21k6VC8
uaLrYlwABdvc87+JkluGa4mRjSRNX+jSd9Troe5rjDqejK+O5LtQmpDSn5tCiMGi
Mg63vrlrKFEy0Xbp52Iu6v4KgVt5PXWcZNe41gxfow5QV5XxvDi9tUiKKcSioAEF
uKox7VZHIlJ57euZfP8iz0IhTueAyXenvwneOkIf/FADZwm+6haJnkO0tHIISOTm
G+p3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:13 2023 by rpki-client on console-fra.rpki-client.org