Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/d385a78ba104c8a8ecee6bd082df70200f164c32.roa
File:                     d385a78ba104c8a8ecee6bd082df70200f164c32.roa (raw, json)
Hash identifier:          thfGv8MQgXeKReA5HPuMIObq3yLQU+R9x/SFpt8bf+E=
Subject key identifier:   DF:FA:E5:3F:D3:BB:16:9E:DF:20:E7:EE:F3:B0:FE:2B:02:CB:2C:AD
Certificate issuer:       /CN=6b09d9684795d8fdec4bb4afe6ca536e0a856f30
Certificate serial:       2AF4
Authority key identifier: E6:B5:8F:28:11:C5:2A:8B:44:B3:F3:77:C5:FD:0E:72:1A:99:DA:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/d385a78ba104c8a8ecee6bd082df70200f164c32.roa
Signing time:             Mon 03 Oct 2022 17:42:29 +0000
ROA not before:           Mon 03 Oct 2022 17:42:03 +0000
ROA not after:            Thu 03 Oct 2024 18:42:03 +0000
asID:                     267735
IP address blocks:        45.167.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10996 (0x2af4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b09d9684795d8fdec4bb4afe6ca536e0a856f30
        Validity
            Not Before: Oct  3 17:42:03 2022 GMT
            Not After : Oct  3 18:42:03 2024 GMT
        Subject: CN=d385a78ba104c8a8ecee6bd082df70200f164c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:69:8c:d5:89:b0:ef:b4:35:6d:9b:16:61:
                    01:a1:d6:0f:ed:69:33:6e:74:22:9f:86:ef:e8:d2:
                    75:db:ae:53:5c:37:6a:cc:85:3a:b8:0d:47:b8:df:
                    c7:68:ee:a8:7a:0d:65:46:e7:42:fe:f0:c1:2f:a3:
                    98:47:43:de:6d:c2:07:e6:a9:66:14:a2:09:9b:3c:
                    1b:b5:d8:17:29:39:dc:1f:0e:c6:e6:cd:c2:6e:19:
                    7c:c9:07:91:77:a7:4d:67:6c:15:f0:92:99:24:fe:
                    d5:9e:d0:46:a6:a2:1f:7f:86:4b:f4:f7:e3:6d:91:
                    72:9c:67:7a:84:70:a6:d4:50:6c:9a:bf:93:66:bc:
                    66:a4:69:ae:b0:7a:9e:e3:37:7c:04:34:c6:47:5a:
                    d9:fb:54:35:93:8a:1d:dc:a6:fd:fb:1b:89:ea:76:
                    87:6d:67:e8:dc:03:d2:00:3d:8a:9f:4d:2a:8e:be:
                    ff:31:fe:93:ed:fa:a9:bc:9d:20:92:54:d9:94:e3:
                    f1:08:24:cb:13:a3:0f:43:bd:a7:0f:72:7c:c0:a6:
                    c1:c4:0c:d9:c5:59:5e:ef:26:f9:55:e1:ca:49:25:
                    05:55:1a:da:24:7c:dc:7d:ed:bd:81:5c:09:7d:03:
                    9e:39:f8:60:6d:b5:16:e1:b3:21:d8:49:11:22:a1:
                    c5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FA:E5:3F:D3:BB:16:9E:DF:20:E7:EE:F3:B0:FE:2B:02:CB:2C:AD
            X509v3 Authority Key Identifier:
                keyid:E6:B5:8F:28:11:C5:2A:8B:44:B3:F3:77:C5:FD:0E:72:1A:99:DA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/d385a78ba104c8a8ecee6bd082df70200f164c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:2a:6d:0f:9c:70:94:c4:22:cd:5f:ef:cb:1f:a5:02:87:61:
         3f:28:2d:66:6d:1e:9b:5f:6f:b0:2d:3a:e7:de:a0:97:7d:da:
         a6:64:64:f8:e2:7e:f4:86:53:c3:45:b5:56:12:8e:f3:44:dd:
         96:27:b2:d8:66:f8:b2:86:be:bc:a9:27:5a:e4:ec:4b:fb:b1:
         bc:72:cf:39:2f:ce:99:fd:6f:c0:18:03:7e:25:4c:92:11:91:
         10:40:91:a2:60:6e:bf:5f:8f:b0:4a:1a:46:6c:7d:d3:5a:9b:
         bc:53:dc:fd:47:40:58:33:26:94:04:7c:a9:91:d5:2f:d4:76:
         a9:7a:4f:bc:f8:3d:6f:f7:d1:0d:5c:03:e7:4a:99:b8:81:d8:
         af:50:04:da:79:84:25:51:6d:59:74:d0:bf:91:cc:dd:05:4b:
         50:20:ec:67:3d:72:0b:15:0f:83:3c:47:aa:29:77:d0:8d:56:
         5a:de:ae:3a:0e:47:a8:cb:f7:09:ad:5d:81:ef:51:e0:99:72:
         ae:67:3b:f0:da:f2:78:58:23:37:03:88:2d:1e:2f:ab:c4:52:
         82:af:dd:3d:b0:d0:29:69:f8:14:fa:63:11:f8:04:cc:71:90:
         d2:8f:3e:b4:27:e8:43:55:71:1d:ba:2f:41:d6:06:c5:e6:29:
         c5:62:05:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org