Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/9644bfdea1e2893c1aeb7817963e02fa8c628e89.roa
File:                     9644bfdea1e2893c1aeb7817963e02fa8c628e89.roa (raw, json)
Hash identifier:          Q9kjc2xOuuOfJxF9O04FDzn4E0gsRzAMui1rlwcyhVc=
Subject key identifier:   F3:DA:82:87:B9:2E:1B:68:1A:50:F6:E8:71:70:86:72:77:BA:ED:88
Certificate issuer:       /CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
Certificate serial:       103D67
Authority key identifier: F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/9644bfdea1e2893c1aeb7817963e02fa8c628e89.roa
Signing time:             Fri 26 Nov 2021 20:49:26 +0000
ROA not before:           Fri 26 Nov 2021 03:00:00 +0000
ROA not after:            Sun 26 Nov 2023 03:00:00 +0000
asID:                     262186
IP address blocks:        45.191.74.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064295 (0x103d67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
        Validity
            Not Before: Nov 26 03:00:00 2021 GMT
            Not After : Nov 26 03:00:00 2023 GMT
        Subject: CN=9644bfdea1e2893c1aeb7817963e02fa8c628e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:31:c5:91:c4:a5:1f:6f:83:6a:85:94:c2:84:
                    f5:15:6c:96:37:64:2b:c6:58:2f:eb:73:7f:69:b1:
                    ce:f8:d6:33:24:9a:0f:9f:44:d5:b4:7f:3c:88:d0:
                    3a:e8:5c:04:a9:08:19:ca:fc:c1:88:ef:6f:ef:8f:
                    09:72:59:33:b6:a1:24:2d:9b:27:d1:f1:7b:22:ba:
                    96:63:04:37:a9:11:ca:6e:8b:05:0b:07:42:4b:86:
                    46:a8:47:30:e6:69:94:5c:1f:88:3e:76:30:3f:28:
                    a5:19:c7:ed:5b:2a:73:ef:26:bd:27:a1:5e:ad:06:
                    3c:7e:49:eb:c5:19:6a:be:13:14:68:e6:71:e3:d8:
                    15:be:d6:a7:93:8a:e0:87:5b:bb:a6:b1:fe:fb:f7:
                    34:47:c8:14:9f:5c:38:0e:1a:02:d9:68:fa:26:47:
                    c8:4c:ea:bf:37:8f:05:87:db:f6:50:46:f9:0b:5b:
                    0e:98:9e:d7:44:05:ec:72:42:29:2a:4b:a3:7f:11:
                    2a:ee:e5:f4:b2:59:ea:19:55:58:11:1a:5f:9d:42:
                    cd:6a:38:40:03:89:78:4d:23:b9:c7:dd:ef:80:4b:
                    2c:0c:dd:f1:73:1a:cd:ac:65:3e:c5:31:9e:1d:7e:
                    84:61:58:66:36:3f:a7:b8:6a:a2:32:09:b2:17:3c:
                    d9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DA:82:87:B9:2E:1B:68:1A:50:F6:E8:71:70:86:72:77:BA:ED:88
            X509v3 Authority Key Identifier:
                keyid:F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/9644bfdea1e2893c1aeb7817963e02fa8c628e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:9e:59:fd:3c:ab:8b:29:dc:ca:2e:de:bc:c5:77:94:ba:66:
         3a:9d:04:5d:63:7d:09:b0:97:90:41:6c:ca:79:cc:cb:0a:97:
         bf:c2:10:67:0e:6f:a9:43:d4:52:d4:a9:0b:89:b8:4a:f8:01:
         0c:db:39:b1:27:80:18:bf:5f:07:ba:6d:fb:1d:76:a3:78:47:
         ab:11:c7:c8:c4:93:02:d5:26:b6:c5:b0:9f:d6:61:1a:5b:12:
         2d:7f:62:6a:bf:e9:03:3e:38:16:e9:16:47:2d:0c:a1:70:27:
         c5:97:a3:ed:cd:33:90:8f:46:f0:a6:86:2a:d5:6b:52:1c:3f:
         bb:ea:ba:e0:13:e0:a1:c8:f9:48:04:d3:d1:56:2d:de:3a:fd:
         b9:3d:e1:a6:ec:6c:4b:be:5b:2e:85:31:db:9a:22:3b:d8:e2:
         82:36:9f:16:45:60:06:3b:73:cd:8b:1f:77:f7:7e:b4:73:17:
         00:80:d1:d6:79:85:c3:7e:25:f6:c1:f7:7d:2e:7a:e3:70:5d:
         57:0d:d6:ec:8f:08:1d:73:f1:78:f2:c2:d9:50:5e:12:d1:c6:
         e2:dd:d4:2b:fb:eb:75:84:9a:14:0d:cc:39:6f:09:47:9b:f1:
         88:10:a2:22:5d:f0:97:df:f2:62:d0:7c:f7:4b:09:96:22:a5:
         2d:74:f9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org