Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/7d71bf4cd4d3cf9b6f849bb7251ef1c51784a4b6.roa
File:                     7d71bf4cd4d3cf9b6f849bb7251ef1c51784a4b6.roa (raw, json)
Hash identifier:          u0UnO+oCL9B5aKdXVWZJYOFBxlwBN4LjTSqB7SDMWg0=
Subject key identifier:   90:DE:AD:53:51:C6:6E:3F:09:85:52:32:08:C6:E7:51:4A:9E:28:A6
Certificate issuer:       /CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
Certificate serial:       157B9B
Authority key identifier: 2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/7d71bf4cd4d3cf9b6f849bb7251ef1c51784a4b6.roa
Signing time:             Wed 27 Apr 2022 19:04:26 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269827
IP address blocks:        45.186.208.0/22 maxlen: 24
                          2803:d760::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407899 (0x157b9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=7d71bf4cd4d3cf9b6f849bb7251ef1c51784a4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:f7:17:d1:ab:ec:f8:0f:73:be:ba:0a:37:
                    b6:f5:8a:0b:10:57:59:dd:85:9d:55:53:bf:8c:4d:
                    49:30:2a:5a:f6:a4:28:4d:bc:bf:86:aa:79:fb:3a:
                    a4:1d:57:1e:50:95:7f:9e:b9:38:38:88:7a:9e:30:
                    79:ea:e7:88:ec:71:88:16:6a:e7:af:9c:cc:b7:8d:
                    74:fd:c1:41:e3:b4:fc:0d:66:6e:72:8b:1f:9d:fd:
                    68:24:6a:93:54:59:6e:c4:0e:5d:d9:ef:3b:c6:4e:
                    c3:07:91:4d:7c:d1:d8:ae:85:6b:88:ff:38:af:7c:
                    2b:bf:b4:0d:7d:87:82:fe:18:68:fd:41:0e:1f:73:
                    b6:94:4b:d3:4a:11:ab:e3:f8:c3:4f:63:35:d4:49:
                    c8:c9:74:2e:d5:80:8d:94:56:60:61:85:38:54:67:
                    16:88:82:8c:ca:9d:f5:2d:bb:11:81:a6:40:14:ea:
                    5f:8e:d3:11:22:2d:08:0f:9d:bd:11:76:61:c2:2f:
                    ab:87:b8:00:cf:80:81:f5:27:58:77:b0:d0:fe:2b:
                    73:f0:45:63:89:04:5a:30:4d:82:ae:ee:05:19:dd:
                    5b:24:0b:91:74:51:82:8a:4a:e6:64:2b:64:d2:73:
                    0c:b1:20:f2:40:7a:46:f1:61:61:94:31:4b:f5:79:
                    de:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DE:AD:53:51:C6:6E:3F:09:85:52:32:08:C6:E7:51:4A:9E:28:A6
            X509v3 Authority Key Identifier:
                keyid:2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/7d71bf4cd4d3cf9b6f849bb7251ef1c51784a4b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.208.0/22
                IPv6:
                  2803:d760::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:2b:a9:76:05:94:80:15:32:4f:4a:5f:5b:bc:c5:a4:d5:1a:
         70:93:d5:04:a1:ca:e2:a6:13:25:9f:66:1f:67:b0:7c:3a:66:
         d8:aa:38:c2:1f:c0:03:0a:07:30:cc:3a:49:2b:47:90:6b:19:
         62:5a:33:e1:48:af:cf:b1:52:59:a9:63:a9:53:d0:61:b6:79:
         83:f9:f3:f5:d5:98:dc:1f:e6:2c:95:69:e3:cc:37:6e:b5:51:
         19:76:15:dd:b4:6f:76:bc:47:16:b5:b3:12:81:7a:29:d3:c5:
         13:f2:cc:e1:67:47:ac:ca:f5:cc:2f:9c:8f:48:fa:22:b0:35:
         0d:58:c0:75:fe:1a:02:37:34:26:1a:71:13:eb:eb:dc:4e:56:
         47:e3:89:7f:30:67:ea:2e:0b:d7:16:19:da:46:c7:b6:fa:8f:
         87:39:23:a6:0f:e4:f9:f0:ee:d2:9c:eb:73:76:b7:14:4c:dc:
         0a:fa:2d:00:56:98:fc:d9:7f:a8:5e:4e:2d:92:68:5c:f4:c0:
         f5:09:cf:92:42:d8:68:ff:6f:c1:53:2b:0d:08:89:0b:12:41:
         fc:82:21:b0:f8:c6:59:54:65:f7:d1:bc:4f:fb:62:e2:5a:72:
         3f:fa:05:78:9c:bc:db:d3:cb:f2:8d:60:ed:9c:03:2e:62:60:
         27:e3:70:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-ams.rpki-client.org