Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/a2319055441b19b9690b63d22e716a270ccba452.roa
File:                     a2319055441b19b9690b63d22e716a270ccba452.roa (raw, json)
Hash identifier:          t6k685rGuuaCqPZdqJ6/fYzXwhn+SOcfBoq35jdx9j4=
Subject key identifier:   D9:82:D0:C7:FF:15:FE:90:9C:83:F7:1E:54:41:A4:E1:B3:94:98:7D
Certificate issuer:       /CN=d802d1f4519aab3e5793a16a3c9971a640951720
Certificate serial:       12E847
Authority key identifier: 07:D9:8A:D9:50:01:E8:23:10:71:BF:BD:6B:25:1E:14:9A:A4:DD:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d802d1f4519aab3e5793a16a3c9971a640951720.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/a2319055441b19b9690b63d22e716a270ccba452.roa
Signing time:             Wed 20 Oct 2021 16:43:48 +0000
ROA not before:           Wed 20 Oct 2021 03:00:00 +0000
ROA not after:            Fri 20 Oct 2023 03:00:00 +0000
asID:                     263693
IP address blocks:        138.121.160.0/22 maxlen: 24
                          179.60.232.0/22 maxlen: 24
                          2803:3880::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239111 (0x12e847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d802d1f4519aab3e5793a16a3c9971a640951720
        Validity
            Not Before: Oct 20 03:00:00 2021 GMT
            Not After : Oct 20 03:00:00 2023 GMT
        Subject: CN=a2319055441b19b9690b63d22e716a270ccba452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:6b:4b:28:0b:ec:50:ca:dc:15:67:8b:16:
                    95:c3:41:9e:4e:2d:1b:39:28:c5:5c:6b:d6:7b:81:
                    96:0d:33:0d:04:a0:67:40:37:e6:01:0f:f7:f7:5f:
                    31:64:37:21:0f:22:a7:c9:80:33:8a:08:8c:16:0a:
                    32:27:32:54:ce:d6:8c:94:de:74:6c:a0:67:18:ac:
                    ae:84:16:41:50:58:81:26:cf:ec:5b:d7:85:bc:b5:
                    38:51:cf:41:7c:b3:9d:24:23:d2:15:dd:33:0a:0b:
                    29:ed:a3:c1:66:a9:be:b9:35:08:c8:d5:cc:f0:3c:
                    03:b2:d8:40:c4:aa:03:fc:3b:94:0a:3f:72:df:10:
                    67:7e:bc:c0:74:30:bc:1a:89:f2:f4:66:ee:d0:a9:
                    b7:73:5a:7b:27:04:b2:cd:04:15:a9:d7:4b:d8:bd:
                    ae:f7:a1:55:82:40:45:55:39:ca:83:ee:fc:d4:f2:
                    33:86:65:85:12:f7:fd:a1:ac:39:f3:81:11:e6:26:
                    01:dc:77:3d:c4:11:17:94:c7:de:9e:2f:00:d1:1d:
                    c1:2e:89:42:60:1d:25:41:61:33:4d:2b:e6:d1:16:
                    b7:7f:b2:84:e4:e1:77:c5:bc:83:2f:74:b4:8f:ed:
                    00:f5:e8:49:8d:36:35:14:c7:ab:85:3d:3f:be:c7:
                    4e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:82:D0:C7:FF:15:FE:90:9C:83:F7:1E:54:41:A4:E1:B3:94:98:7D
            X509v3 Authority Key Identifier:
                keyid:07:D9:8A:D9:50:01:E8:23:10:71:BF:BD:6B:25:1E:14:9A:A4:DD:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d802d1f4519aab3e5793a16a3c9971a640951720.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/a2319055441b19b9690b63d22e716a270ccba452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/d802d1f4519aab3e5793a16a3c9971a640951720.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.160.0/22
                  179.60.232.0/22
                IPv6:
                  2803:3880::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:0f:7d:a4:71:42:7a:70:4b:fb:b1:e3:c1:62:e9:b4:b3:91:
         86:e8:91:a3:fe:1e:8d:fa:b0:bd:78:b0:21:b0:88:33:88:d9:
         c8:94:d4:59:4a:33:6b:b5:72:af:20:1c:59:81:22:44:fe:8d:
         bd:0b:20:db:e6:91:8f:04:49:c5:b2:63:bb:52:85:48:e9:04:
         74:d8:b7:f3:1e:2d:7d:88:c7:53:8d:ac:67:52:f5:f0:f3:be:
         4b:dc:71:c5:f2:a5:36:e8:1f:33:22:81:8c:27:55:2c:96:0b:
         07:92:65:5b:e2:c9:a5:09:3a:4d:79:94:eb:3d:22:26:5d:56:
         55:e6:1e:39:dd:b1:50:98:56:d4:a3:80:e3:0d:1e:5c:45:4a:
         0b:1f:75:4f:1f:66:e7:00:78:8c:5d:1c:84:a4:e9:1f:7c:de:
         69:0a:6d:3f:38:ad:c4:a6:be:33:61:9e:1d:0f:89:cb:f3:1e:
         01:9a:e4:86:4c:6f:c2:bb:16:62:73:85:a1:5e:33:87:be:3c:
         05:5e:d0:59:cd:f7:03:7a:5f:59:60:90:46:95:58:4e:62:a3:
         a5:04:79:24:b1:e8:7a:4b:70:78:a2:0a:5d:1d:ef:6b:6a:55:
         c5:79:ab:da:90:37:92:22:ec:a9:2c:2d:46:e2:1d:5e:9c:d1:
         b3:23:41:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 08:17:56 2023 by rpki-client on console-fra.rpki-client.org