Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40dd351c-cfcb-44e3-98ca-413b9fc35950/07a795667544ed07dbc891c143b08f1e3cf164b3.roa
File:                     07a795667544ed07dbc891c143b08f1e3cf164b3.roa (raw, json)
Hash identifier:          rTuD8HZfD0Gc4ScG9TWW1+iScYJG1XWcsQ86/DG6l7A=
Subject key identifier:   8B:64:24:A1:57:90:63:D7:6D:B2:AF:25:3E:E8:7E:38:DD:46:83:6E
Certificate issuer:       /CN=a77c14a35ce76168c220a6f261b4440c65ee7c38
Certificate serial:       044B
Authority key identifier: F2:D4:DC:38:7A:56:75:6E:22:B9:75:AF:55:69:B4:A7:38:CD:85:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a77c14a35ce76168c220a6f261b4440c65ee7c38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40dd351c-cfcb-44e3-98ca-413b9fc35950/07a795667544ed07dbc891c143b08f1e3cf164b3.roa
Signing time:             Mon 07 Jun 2021 18:36:48 +0000
ROA not before:           Mon 07 Jun 2021 03:00:00 +0000
ROA not after:            Mon 30 Nov 2026 03:00:00 +0000
asID:                     52373
IP address blocks:        201.217.244.0/22 maxlen: 24
                          2803:e400::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1099 (0x44b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77c14a35ce76168c220a6f261b4440c65ee7c38
        Validity
            Not Before: Jun  7 03:00:00 2021 GMT
            Not After : Nov 30 03:00:00 2026 GMT
        Subject: CN=07a795667544ed07dbc891c143b08f1e3cf164b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b6:17:0b:5a:8a:0b:8f:57:f1:d8:c3:14:44:
                    4b:f7:40:09:64:6b:a5:8e:b3:3f:0d:da:2a:54:d2:
                    33:98:2a:24:a7:a0:57:4f:59:c4:5e:1d:31:4f:2e:
                    ad:66:d1:ab:e1:88:44:e4:8a:ff:74:1e:94:c6:6f:
                    f3:e8:47:01:bb:0e:96:b3:b2:26:a8:ad:89:a8:21:
                    f7:2e:14:a3:34:c2:85:61:5a:00:67:97:89:4f:68:
                    47:58:65:45:e4:3f:44:0c:ba:3c:4c:cd:82:9f:a7:
                    93:e6:cf:10:38:68:93:2b:ce:d2:c3:ce:b1:98:39:
                    67:a9:8f:e0:92:49:e0:c3:81:94:df:61:6b:b1:e1:
                    78:5d:95:21:43:18:93:7f:20:87:8a:12:38:2f:73:
                    3b:88:24:e5:17:c3:0d:d5:e8:2d:56:f0:4a:f7:3b:
                    d7:8a:e3:e2:0c:d4:93:b6:f2:eb:e9:97:c9:70:8f:
                    27:2e:e9:9e:cd:7f:97:69:6f:6d:33:b6:67:0c:ec:
                    24:1b:08:5a:46:9c:df:02:43:ec:c8:7b:bc:e8:ab:
                    a9:62:fa:c9:52:f9:6a:28:2e:2c:26:15:cc:c2:6e:
                    51:d1:44:d8:80:bd:4d:da:ec:21:90:4f:f2:80:2f:
                    56:a4:89:c2:7b:69:78:4e:aa:03:b8:84:3b:82:15:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:64:24:A1:57:90:63:D7:6D:B2:AF:25:3E:E8:7E:38:DD:46:83:6E
            X509v3 Authority Key Identifier:
                keyid:F2:D4:DC:38:7A:56:75:6E:22:B9:75:AF:55:69:B4:A7:38:CD:85:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a77c14a35ce76168c220a6f261b4440c65ee7c38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40dd351c-cfcb-44e3-98ca-413b9fc35950/07a795667544ed07dbc891c143b08f1e3cf164b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40dd351c-cfcb-44e3-98ca-413b9fc35950/a77c14a35ce76168c220a6f261b4440c65ee7c38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.244.0/22
                IPv6:
                  2803:e400::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:3c:d5:b8:59:8b:ea:f0:43:e7:a9:77:c0:80:78:9d:40:83:
         e6:30:2c:7e:15:ac:8c:f2:9b:29:3b:18:5b:b2:88:19:cc:05:
         d1:52:29:ab:87:7d:37:eb:91:45:66:1e:3b:6d:09:f1:67:b4:
         e0:9e:8b:79:cd:96:4c:fb:16:e8:9d:8c:23:ba:70:96:3d:7b:
         f0:a8:49:97:03:8c:17:8e:4e:df:a1:90:ab:e3:c3:8b:5c:01:
         ff:14:14:c9:f7:b4:5b:ec:e9:60:b8:8b:64:12:a6:29:9c:e5:
         13:30:c6:98:9d:57:64:b7:39:71:25:21:3b:9d:4f:4d:74:46:
         9f:31:91:e3:ff:e2:48:f7:ab:ae:4e:1d:bb:d5:fe:d1:1d:df:
         89:52:f6:a0:2e:46:1a:a5:0f:49:0d:94:e0:80:49:01:d8:93:
         ef:bf:d5:ed:aa:78:cf:db:22:f4:20:90:57:7b:dd:27:bc:52:
         86:da:6a:8f:f7:bb:54:7f:f0:de:3f:e9:27:1d:49:17:fc:76:
         8a:d2:84:ab:e9:b2:6d:46:68:12:b3:a9:ff:2c:2c:cd:7a:eb:
         4b:ac:62:be:93:e9:58:1c:10:08:06:81:62:46:b9:c3:0e:8a:
         32:8a:57:a0:96:9e:57:d2:fd:ea:b8:2c:e4:98:0f:2b:28:a9:
         01:49:ae:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 10:51:28 2023 by rpki-client on console-ams.rpki-client.org