Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/6369c11b777fab763473cd439ae44e8c3e83a2a3.roa
File:                     6369c11b777fab763473cd439ae44e8c3e83a2a3.roa (raw, json)
Hash identifier:          rSmvzHlaXkT/NeuTk8+T/TnFbJ67ZWCG0ZUUEA8BsOI=
Subject key identifier:   85:B1:F6:4A:BF:11:3D:7C:D7:A9:4C:8D:C5:58:60:CD:92:27:55:65
Certificate issuer:       /CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
Certificate serial:       193C53
Authority key identifier: 2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/6369c11b777fab763473cd439ae44e8c3e83a2a3.roa
Signing time:             Mon 26 Sep 2022 00:37:13 +0000
ROA not before:           Mon 26 Sep 2022 00:36:25 +0000
ROA not after:            Thu 26 Sep 2024 00:36:25 +0000
asID:                     263703
IP address blocks:        45.186.210.0/24 maxlen: 24
                          45.186.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1653843 (0x193c53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
        Validity
            Not Before: Sep 26 00:36:25 2022 GMT
            Not After : Sep 26 00:36:25 2024 GMT
        Subject: CN=6369c11b777fab763473cd439ae44e8c3e83a2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:fb:3b:56:da:00:0b:60:19:64:e4:17:f0:
                    27:4d:a2:45:36:ad:7b:22:09:fa:21:99:c2:63:9f:
                    53:67:e7:5f:e3:ab:a5:e0:70:f7:6a:d1:35:3c:32:
                    66:79:27:e7:da:38:76:e2:f2:41:69:71:ce:2a:ac:
                    ba:7e:5a:e9:75:c2:d0:89:a6:ce:41:6d:a3:4b:d1:
                    64:e3:2e:7c:6e:66:a0:97:16:9e:ee:ca:90:f2:66:
                    06:e8:f5:37:9d:ed:c6:09:dc:51:3e:22:72:95:5f:
                    ae:1d:b8:5f:64:f2:e7:6d:58:74:ce:4c:c2:b1:a3:
                    83:2f:fd:47:4f:ef:cb:b8:96:91:8c:d1:6f:f0:3a:
                    ab:86:ee:c1:c7:d5:87:1e:1c:f8:3d:fe:45:1d:35:
                    cf:2a:12:79:25:8f:2f:99:96:3a:61:cb:cd:ec:55:
                    5d:b1:6a:52:cd:11:d7:02:e5:37:dd:4a:d8:e2:7b:
                    76:70:2e:cd:03:71:2d:c3:dc:3f:fc:cb:c3:fb:b3:
                    be:97:b2:3e:9a:2a:27:0f:45:09:37:8a:40:c0:c3:
                    4e:18:c3:34:6d:7e:a8:8d:0d:d5:e3:a0:2d:74:8b:
                    94:de:a6:2c:be:d1:4e:c9:64:50:be:4f:3b:79:13:
                    31:e9:d9:34:c0:be:0d:58:96:15:63:ad:82:2e:27:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B1:F6:4A:BF:11:3D:7C:D7:A9:4C:8D:C5:58:60:CD:92:27:55:65
            X509v3 Authority Key Identifier:
                keyid:2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/6369c11b777fab763473cd439ae44e8c3e83a2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:e4:6e:57:ee:ab:47:80:1d:54:07:e8:63:b2:b4:ab:ae:43:
         bf:6c:38:4f:c9:d1:ea:2c:75:80:0b:70:e1:e5:d5:65:82:14:
         3f:42:a4:b1:cb:b0:27:f6:e1:99:02:9b:f8:2d:39:02:08:2a:
         da:6e:28:b6:08:fc:5c:5e:38:44:45:5d:02:49:f0:82:2e:f0:
         13:fb:47:05:e9:2b:27:72:21:c9:22:71:26:b2:26:d0:ec:eb:
         13:53:ea:4a:52:04:64:a7:54:4b:52:39:37:35:69:6c:d6:af:
         cc:c2:4b:1f:e4:fa:01:60:65:55:49:22:88:8b:e6:cb:07:81:
         6d:a3:1e:41:73:b5:b3:d2:46:c3:9f:a2:9b:c6:df:7b:18:5a:
         a4:20:3e:e6:da:80:09:2d:5f:06:5d:3c:7c:36:b2:4e:03:f3:
         d9:21:2a:4c:b6:6e:74:0b:e9:f7:29:77:3f:41:99:09:2f:04:
         1f:3f:34:b9:15:9d:16:e2:16:15:02:b8:bd:65:e9:bf:43:97:
         72:f3:3e:57:68:b6:71:83:5b:d3:3f:66:c2:2d:05:53:43:7f:
         60:ce:34:36:2b:0f:3f:92:21:f1:51:b0:9e:d1:a4:34:b3:03:
         be:00:85:82:c5:60:81:5e:bd:f2:48:5a:3e:5e:48:7b:ff:a5:
         fd:a6:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-ams.rpki-client.org