Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/1cf4c339002349f34b38b80aac861c6fa9590c6c.roa
File:                     1cf4c339002349f34b38b80aac861c6fa9590c6c.roa (raw, json)
Hash identifier:          PYgbKcA1kRH2JVjslUVD0HHADlNo7fSue26XgL+GVQo=
Subject key identifier:   04:F8:C9:81:4A:BE:00:FA:CE:6B:5E:CD:6C:18:37:72:F5:0F:BE:F2
Certificate issuer:       /CN=d4877474e56b45c3da892e4dfb3b84f2df97d32f
Certificate serial:       06AE
Authority key identifier: 63:4F:AE:99:6B:51:24:AD:E3:54:51:31:12:CE:7E:3F:5F:3B:E9:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4877474e56b45c3da892e4dfb3b84f2df97d32f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/1cf4c339002349f34b38b80aac861c6fa9590c6c.roa
Signing time:             Mon 10 May 2021 19:44:42 +0000
ROA not before:           Mon 10 May 2021 03:00:00 +0000
ROA not after:            Sat 10 May 2025 03:00:00 +0000
asID:                     271794
IP address blocks:        164.163.186.0/23 maxlen: 24
                          179.0.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1710 (0x6ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4877474e56b45c3da892e4dfb3b84f2df97d32f
        Validity
            Not Before: May 10 03:00:00 2021 GMT
            Not After : May 10 03:00:00 2025 GMT
        Subject: CN=1cf4c339002349f34b38b80aac861c6fa9590c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bd:69:bf:dc:ef:eb:c6:09:08:ff:12:9e:37:
                    b8:e9:d7:64:32:74:c6:f6:07:21:de:45:20:d5:95:
                    fb:7d:7a:21:43:59:b5:3d:1d:d1:8d:14:72:4f:81:
                    24:70:77:9e:4d:12:4e:bb:82:b8:3a:49:f3:b4:e0:
                    4e:6d:67:18:f8:8c:d1:ee:20:b1:17:ab:cb:04:2a:
                    7d:d4:09:dd:3c:fc:c5:41:93:4b:f0:f8:1b:2b:9b:
                    4b:09:62:24:19:11:82:9c:dd:3d:a3:f2:7d:bf:a3:
                    b3:2f:67:67:48:21:26:b8:2f:62:a6:81:04:9d:85:
                    97:7c:fa:a8:c2:9a:78:cd:1d:04:a4:fe:15:89:da:
                    5d:d0:05:bb:66:f9:4e:c3:4b:c6:5f:a4:86:53:05:
                    58:d5:87:28:23:5c:85:f8:c8:bd:30:78:51:7a:21:
                    a7:89:df:92:94:8c:58:8e:ac:55:04:d2:49:db:2d:
                    46:16:22:3a:1b:68:3c:72:ed:f3:16:b6:83:b1:ba:
                    52:99:a6:3f:03:1a:bd:3c:ee:29:d2:1d:5a:59:46:
                    54:c8:1f:7b:8c:66:34:60:87:6e:9a:be:81:8f:3f:
                    34:e5:47:e4:6f:0b:3e:1b:76:e6:70:9d:62:00:a9:
                    51:be:c4:32:6c:1b:cd:46:7b:6d:c8:8b:f3:a8:ba:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F8:C9:81:4A:BE:00:FA:CE:6B:5E:CD:6C:18:37:72:F5:0F:BE:F2
            X509v3 Authority Key Identifier:
                keyid:63:4F:AE:99:6B:51:24:AD:E3:54:51:31:12:CE:7E:3F:5F:3B:E9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4877474e56b45c3da892e4dfb3b84f2df97d32f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/1cf4c339002349f34b38b80aac861c6fa9590c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/d4877474e56b45c3da892e4dfb3b84f2df97d32f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.186.0/23
                  179.0.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:e4:41:7a:60:03:12:c4:f4:d2:71:69:63:5f:08:f7:13:e4:
         46:aa:fd:b4:6f:37:6c:11:cc:34:e0:ea:b2:14:16:a3:37:93:
         ce:c4:da:a6:6e:de:e7:49:c1:5f:23:a7:cc:ec:2d:da:92:58:
         b2:68:8c:c8:ac:fa:71:77:40:e0:98:29:aa:6d:63:34:69:3b:
         fd:62:22:4f:f2:b6:96:e8:95:bf:09:0b:07:ec:ba:5e:76:d1:
         19:56:2b:13:57:3b:08:da:78:ef:b9:90:13:cb:69:eb:a7:12:
         68:b2:dc:b0:01:e9:7d:c8:28:1c:fe:5c:42:53:50:22:61:19:
         4b:a7:42:8d:15:5d:4b:39:13:62:f0:d4:9e:08:9b:cb:ee:09:
         29:b0:3a:45:d1:be:98:83:9c:85:56:2c:cf:54:51:e0:e0:66:
         d8:30:d0:95:b0:bc:25:63:a5:d4:2c:ef:df:aa:e3:85:90:85:
         f1:ac:0d:1e:f4:12:13:62:19:bb:00:6f:bd:50:75:16:37:b4:
         ac:66:3d:c1:fb:d8:9c:3c:27:05:ef:3c:4d:16:69:ab:76:c3:
         7e:0f:30:e8:57:5a:d1:97:19:3b:01:5e:d1:34:5d:18:9c:c1:
         4d:a3:46:9a:20:2a:1e:76:f8:c7:f2:97:93:49:97:36:f1:42:
         e8:8b:40:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 22:33:58 2023 by rpki-client on console-fra.rpki-client.org