Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/81e3aa2d7f41a00bbd64e8bae5c6831ba6e85d77.roa
File:                     81e3aa2d7f41a00bbd64e8bae5c6831ba6e85d77.roa (raw, json)
Hash identifier:          tgwGBKDXszRg0D+CCKKe3hPnYNZTTh7Y2Ozg19mSjmw=
Subject key identifier:   14:F6:7A:29:CE:D4:4D:9E:77:BB:32:5E:9E:13:DA:0E:D6:D0:B3:29
Certificate issuer:       /CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
Certificate serial:       1A06F3
Authority key identifier: 2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/81e3aa2d7f41a00bbd64e8bae5c6831ba6e85d77.roa
Signing time:             Mon 24 Oct 2022 16:47:23 +0000
ROA not before:           Fri 23 Sep 2022 00:36:25 +0000
ROA not after:            Thu 26 Sep 2024 00:36:25 +0000
asID:                     263703
IP address blocks:        45.186.208.0/22 maxlen: 24
                          45.186.208.0/24 maxlen: 24
                          45.186.209.0/24 maxlen: 24
                          45.186.210.0/24 maxlen: 24
                          45.186.211.0/24 maxlen: 24
                          190.97.224.0/19 maxlen: 24
                          143.255.84.0/22 maxlen: 24
                          2803:7800::/32 maxlen: 48
                          2803:d760::/34 maxlen: 48
                          2803:d760:4000::/34 maxlen: 48
                          2803:d760:8000::/34 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1705715 (0x1a06f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
        Validity
            Not Before: Sep 23 00:36:25 2022 GMT
            Not After : Sep 26 00:36:25 2024 GMT
        Subject: CN=81e3aa2d7f41a00bbd64e8bae5c6831ba6e85d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:23:7e:60:20:57:73:6f:06:89:82:b6:ba:
                    84:e0:16:fb:5a:8b:c1:ff:a1:42:a9:e8:63:7a:47:
                    1d:92:5a:5e:f9:e0:ff:9f:15:30:d2:ee:a9:2a:8d:
                    42:c5:03:5a:66:78:17:67:60:5a:a6:92:bd:ea:50:
                    0e:b7:03:97:64:01:ec:c5:4c:bf:95:6a:16:57:ca:
                    4e:aa:bd:41:8b:af:80:f6:19:ad:11:f1:25:c1:de:
                    bf:fb:54:71:f4:05:e2:30:0e:d7:7c:78:89:0e:06:
                    07:a1:e1:c8:d3:d2:a4:3a:40:40:73:aa:b3:60:2b:
                    d0:c2:15:89:c9:96:42:bf:1f:af:3f:f2:44:a4:8a:
                    9a:0a:85:77:2f:24:72:88:80:c2:b4:79:29:52:5b:
                    29:4f:95:54:c0:72:b9:82:1b:78:f9:57:4f:25:2e:
                    90:f7:4c:11:a2:ac:53:06:5e:36:db:45:89:8c:20:
                    f7:1a:c2:fd:12:8e:94:07:af:8d:b6:c3:43:51:d7:
                    66:51:7c:82:e0:b2:23:d6:39:0b:99:f3:fa:a2:55:
                    e9:ba:a2:2a:1d:02:bd:b3:db:73:2e:01:33:8b:73:
                    5c:54:76:94:ce:83:13:b1:b2:63:13:36:82:0f:8e:
                    0b:fd:46:79:e0:1b:cc:8e:9c:a9:18:0a:d5:e1:b4:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F6:7A:29:CE:D4:4D:9E:77:BB:32:5E:9E:13:DA:0E:D6:D0:B3:29
            X509v3 Authority Key Identifier:
                keyid:2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/81e3aa2d7f41a00bbd64e8bae5c6831ba6e85d77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.208.0/22
                  143.255.84.0/22
                  190.97.224.0/19
                IPv6:
                  2803:7800::/32
                  2803:d760::-2803:d760:bfff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         19:76:f8:5c:b2:6d:ee:bc:d1:3c:70:b6:1d:28:21:ad:b0:28:
         cd:78:d1:d3:91:57:e7:81:76:35:07:81:81:82:58:fb:f2:12:
         c2:cb:c1:85:13:8e:a3:74:a9:6e:db:6a:fe:66:a7:19:06:d2:
         0d:c5:5c:6b:5d:49:fc:3c:73:e0:d9:6b:69:40:ee:14:95:c9:
         98:31:bb:41:10:a1:fc:f0:e6:c7:d4:30:29:a8:28:68:03:9f:
         d0:4c:16:c9:d5:0d:a6:d8:9c:5e:b4:1c:8d:70:14:45:6d:88:
         b5:b1:02:27:ba:5b:79:9b:b0:a1:b1:6f:68:19:51:b6:04:fd:
         18:b9:b0:38:2f:29:a5:59:28:d5:fe:9c:09:0d:70:bf:f1:5f:
         b9:e6:d9:17:76:ff:c1:ab:33:06:d1:2b:45:55:62:0c:72:96:
         0f:8b:40:b2:31:be:1d:0e:0d:b7:3b:32:9b:3c:83:45:fc:a2:
         c9:9d:99:78:2a:4f:4a:e5:60:a4:c0:4a:57:6a:d5:bd:60:30:
         e1:e4:e6:a3:60:4a:84:1f:40:62:52:4e:c4:d6:89:ec:29:72:
         5e:ab:b0:5a:7c:04:62:53:13:05:19:33:2f:4b:39:65:2f:d7:
         0e:4a:ed:d7:36:a9:93:78:53:7e:2e:5e:6f:43:a7:c8:24:78:
         a0:16:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org