Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/1d2eba6dbe34a4c2a0d789c9ce1cf7f08341540a.roa
File:                     1d2eba6dbe34a4c2a0d789c9ce1cf7f08341540a.roa (raw, json)
Hash identifier:          QET0nZU2gPy1n0PSO8f+eKXMlpYSHGbYs7LKjGdE6hw=
Subject key identifier:   64:98:BA:C4:40:26:A9:6C:70:65:E8:B9:72:04:B6:3E:2C:B1:C3:1C
Certificate issuer:       /CN=f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99
Certificate serial:       0D90D3
Authority key identifier: 35:B1:6D:7A:72:65:78:D7:94:68:40:DA:52:E6:EF:EA:FF:C5:C9:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/1d2eba6dbe34a4c2a0d789c9ce1cf7f08341540a.roa
Signing time:             Wed 24 Mar 2021 14:38:29 +0000
ROA not before:           Wed 24 Mar 2021 14:38:29 +0000
ROA not after:            Tue 24 Mar 2026 14:38:29 +0000
asID:                     270016
IP address blocks:        131.196.60.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889043 (0xd90d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99
        Validity
            Not Before: Mar 24 14:38:29 2021 GMT
            Not After : Mar 24 14:38:29 2026 GMT
        Subject: CN=1d2eba6dbe34a4c2a0d789c9ce1cf7f08341540a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:a9:b0:b9:ea:74:55:e7:03:81:f9:0f:a3:
                    e4:a5:d4:d9:ee:f4:9e:37:dd:2d:59:6e:4e:a3:56:
                    99:6d:c3:49:1a:4b:77:f7:9c:82:9c:ef:fb:94:29:
                    21:1a:87:9e:aa:67:77:35:47:d2:55:f1:c0:30:d4:
                    71:51:eb:ca:d4:ac:9f:eb:f9:76:90:67:71:f4:de:
                    8d:14:7a:f4:84:8a:1e:14:66:89:a3:40:b1:81:4b:
                    a8:f4:35:a2:f9:54:b8:98:e0:c2:62:35:f2:99:32:
                    76:8a:3c:d8:ae:8b:5f:f2:33:3d:49:d2:b6:89:7d:
                    73:2a:53:c0:e5:ac:46:1f:ce:a1:ad:96:36:8e:92:
                    3d:ba:e8:83:98:fd:99:4d:56:94:b3:de:c1:83:42:
                    2d:66:29:91:35:41:21:79:60:77:bf:96:3f:fd:a5:
                    b6:b0:b7:b0:21:53:14:87:62:21:a8:fb:b6:e5:4a:
                    f8:d6:f7:68:b4:2e:cd:c7:2c:cf:72:ab:df:fd:0d:
                    63:9b:85:b9:04:0e:cf:7d:86:92:87:11:03:2a:42:
                    6f:f2:6a:df:40:a1:07:a1:21:16:c2:8b:d4:af:ad:
                    9c:67:7f:59:52:06:7d:32:f3:22:e2:84:17:98:a3:
                    25:64:38:56:db:76:bb:5c:46:db:63:35:65:81:01:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:98:BA:C4:40:26:A9:6C:70:65:E8:B9:72:04:B6:3E:2C:B1:C3:1C
            X509v3 Authority Key Identifier:
                keyid:35:B1:6D:7A:72:65:78:D7:94:68:40:DA:52:E6:EF:EA:FF:C5:C9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/1d2eba6dbe34a4c2a0d789c9ce1cf7f08341540a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:76:df:ed:5d:1e:b7:8f:48:18:8f:01:4d:8c:79:34:b7:4b:
         a8:ff:ca:3b:53:e3:49:08:79:be:3c:78:64:76:81:75:da:a0:
         b6:db:8d:e5:10:19:26:b6:73:12:09:4a:d4:b2:ee:11:4b:ca:
         6a:79:85:5c:b0:c1:b2:80:0f:ca:2e:18:5a:c4:ba:b9:6a:55:
         45:37:2b:30:90:da:e4:59:e0:25:d3:c8:1f:5e:43:8a:da:68:
         0a:e2:6f:06:b4:6c:7b:8b:6a:90:60:69:9d:6c:48:31:fa:e9:
         cb:3a:63:d6:c2:1b:30:0e:00:64:bd:ef:b5:be:f6:a8:7f:a1:
         6b:a6:84:ee:e9:96:96:2f:4b:28:0a:1b:51:6f:e0:7a:87:46:
         e8:e4:21:47:1d:58:1e:1a:d2:c2:93:db:e5:ff:44:4e:01:03:
         14:ab:53:33:44:e8:ac:14:e0:fa:35:11:1b:99:c7:06:30:e6:
         46:93:d2:87:b5:88:76:5d:91:76:fc:8b:83:6a:a4:17:97:15:
         aa:23:fb:39:ea:41:e1:59:c7:dd:88:60:b9:09:29:3b:a8:d8:
         1d:9b:83:2c:70:6c:e7:73:dd:05:85:ec:c2:8e:3e:b4:30:1f:
         79:7b:7c:0f:6c:d6:c4:46:c9:9e:ab:df:21:8f:6a:28:b0:46:
         47:ae:0f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 22:10:04 2023 by rpki-client on console-ams.rpki-client.org