Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390c9fc1-e60d-45b5-8d70-106dc5f45fa4/0c96bed6f962a50463e7e03e63da4f51103a235e.roa
File:                     0c96bed6f962a50463e7e03e63da4f51103a235e.roa (raw, json)
Hash identifier:          GPLxlA7ZlE9uGY7Jk6/dQkkewIi488Z7MxohRtFAbnc=
Subject key identifier:   02:0D:47:17:7E:5B:CD:9F:95:12:51:4E:CE:39:20:CE:7C:BB:D5:FC
Certificate issuer:       /CN=56e0dad1bc274e191f17c10f2a85105ac8ad8244
Certificate serial:       10D952
Authority key identifier: 6E:E3:DA:CA:61:74:C0:CA:DF:18:50:60:A0:17:00:76:66:93:B1:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56e0dad1bc274e191f17c10f2a85105ac8ad8244.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390c9fc1-e60d-45b5-8d70-106dc5f45fa4/0c96bed6f962a50463e7e03e63da4f51103a235e.roa
Signing time:             Tue 05 Oct 2021 00:06:25 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     263244
IP address blocks:        45.182.112.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104210 (0x10d952)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e0dad1bc274e191f17c10f2a85105ac8ad8244
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=0c96bed6f962a50463e7e03e63da4f51103a235e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:be:4d:b7:bf:c7:2c:c2:f1:e9:c6:83:2a:
                    78:8e:2d:4b:a0:9f:71:f6:2a:e9:0a:7c:ea:21:a2:
                    f9:88:07:b3:d4:a8:73:50:61:ee:d5:fe:94:fe:81:
                    8b:6d:8c:44:98:a8:8d:0a:b5:a5:f7:ac:9d:d9:0c:
                    8f:34:d9:dd:75:70:19:b0:b2:b9:1a:24:71:63:4b:
                    e3:64:a5:df:72:73:36:8d:68:7b:ee:ae:b4:13:2f:
                    b7:55:e8:11:18:0e:1d:50:b3:42:df:7a:16:4c:0d:
                    00:ef:9a:2c:93:1b:38:f7:3f:2b:b3:08:6b:7a:43:
                    0d:bf:4b:a8:83:d7:f5:1c:2e:e1:1f:c5:8a:ef:88:
                    41:32:c1:bc:5f:40:f7:df:7f:42:eb:dc:3e:cc:aa:
                    5b:fd:35:9d:6f:02:2b:fa:b6:2f:96:45:29:8e:14:
                    1b:8e:e9:de:61:af:1a:be:af:66:ff:16:04:e6:d3:
                    f3:81:3d:06:bb:6b:d6:74:58:a7:10:22:ef:39:b5:
                    13:9a:33:db:e5:30:31:26:b1:fb:f8:0c:2d:35:f9:
                    a2:4a:2e:e4:50:26:23:6a:1d:01:fb:b2:f1:81:69:
                    d5:64:ee:f5:32:ec:c7:0d:75:d2:bb:7e:5f:1f:16:
                    b8:cc:b0:63:fe:cb:79:55:c5:f4:f0:2a:d4:dc:4d:
                    dd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0D:47:17:7E:5B:CD:9F:95:12:51:4E:CE:39:20:CE:7C:BB:D5:FC
            X509v3 Authority Key Identifier:
                keyid:6E:E3:DA:CA:61:74:C0:CA:DF:18:50:60:A0:17:00:76:66:93:B1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56e0dad1bc274e191f17c10f2a85105ac8ad8244.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390c9fc1-e60d-45b5-8d70-106dc5f45fa4/0c96bed6f962a50463e7e03e63da4f51103a235e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390c9fc1-e60d-45b5-8d70-106dc5f45fa4/56e0dad1bc274e191f17c10f2a85105ac8ad8244.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:8d:12:3b:c9:32:64:f2:d1:08:3e:bb:9f:8d:35:e0:97:8e:
         66:2f:da:18:15:e9:be:ee:8f:ab:6f:59:45:83:ea:8b:53:84:
         3e:8f:0d:9a:63:77:b8:46:b5:ec:60:d2:9a:3f:cb:99:a8:73:
         9b:a0:51:b4:ae:1c:90:2c:29:f0:73:54:9d:13:aa:d4:b7:3f:
         e9:ab:e2:74:23:29:0d:a9:c5:65:e5:94:1a:f4:b2:32:d2:15:
         6e:54:5e:e9:fc:18:62:8c:1e:54:b4:dd:e5:44:3d:78:d8:ca:
         3c:a4:f6:ab:0c:c5:3d:c1:2e:a3:80:69:e2:1d:05:5f:39:d9:
         48:0c:81:72:c3:aa:86:49:f0:9c:fa:71:36:ef:da:2e:12:26:
         67:57:e4:af:90:d9:23:39:d4:d4:49:44:f1:e7:f3:ae:6d:cf:
         c4:8f:7d:6a:d6:03:58:69:43:57:98:2d:db:72:7c:f5:d3:c6:
         1e:91:04:e3:98:2c:89:8c:d7:6f:3a:83:2f:ae:c9:74:2d:66:
         db:b7:d7:53:e8:6c:af:92:7e:f4:a4:c6:1d:be:4d:49:c3:79:
         29:d3:80:89:a8:14:5d:c5:69:1d:6b:e0:41:d7:31:f6:c2:25:
         0b:d0:8c:59:b2:98:88:43:1e:44:25:d4:8e:66:01:b6:1c:48:
         6b:5f:3f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 08:55:25 2023 by rpki-client on console-ams.rpki-client.org