Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/c1436bf86304ef0103b2160875a5ba5846926856.roa
File:                     c1436bf86304ef0103b2160875a5ba5846926856.roa (raw, json)
Hash identifier:          pPg+4ro8sAJPVzjoohAhDq29k11rKH8Hxl7DuYS8L4o=
Subject key identifier:   DD:F3:06:3A:62:7E:E0:B1:6E:52:7F:0B:14:5A:C3:6C:AA:6A:F7:0D
Certificate issuer:       /CN=b237ad19586522bd4228c8593de2f297c35868d7
Certificate serial:       131F26
Authority key identifier: EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/c1436bf86304ef0103b2160875a5ba5846926856.roa
Signing time:             Thu 04 Aug 2022 19:58:06 +0000
ROA not before:           Thu 04 Aug 2022 19:56:53 +0000
ROA not after:            Sun 04 Aug 2024 19:56:53 +0000
asID:                     266845
IP address blocks:        45.239.32.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253158 (0x131f26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b237ad19586522bd4228c8593de2f297c35868d7
        Validity
            Not Before: Aug  4 19:56:53 2022 GMT
            Not After : Aug  4 19:56:53 2024 GMT
        Subject: CN=c1436bf86304ef0103b2160875a5ba5846926856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:77:3f:10:e9:db:3c:76:01:1f:32:ef:4a:5c:
                    5a:2d:20:8a:8f:06:75:b9:a7:d4:df:af:0d:34:06:
                    b4:ae:24:07:3e:1a:87:10:01:ad:a0:c3:88:e6:c8:
                    23:c9:89:03:9d:b6:cf:48:ca:b3:00:e9:54:0b:01:
                    eb:03:2b:46:be:e1:79:9d:f9:d6:e4:f3:43:f0:dc:
                    ec:1c:ae:b6:72:ad:01:bb:50:25:dd:87:ed:d1:fb:
                    59:ec:40:ed:05:c4:c0:f2:a2:d7:e6:fa:00:c0:f5:
                    d7:cc:33:1c:ca:42:64:f3:b0:a5:52:16:9c:27:bf:
                    7a:7d:3c:f0:79:36:41:e1:97:3e:14:17:5d:aa:46:
                    24:df:59:da:a5:79:dd:82:74:5b:b4:8e:5e:68:d7:
                    0a:2c:b9:d3:c2:32:72:03:df:fa:42:32:db:c3:90:
                    8e:7f:14:c6:6c:67:8b:09:b7:46:90:70:ef:d6:ba:
                    c9:43:97:cb:fc:93:68:67:f3:9e:90:fc:ee:3b:51:
                    b3:e0:26:2f:24:1f:2f:fc:73:ab:39:ff:53:61:8f:
                    85:55:f2:cc:73:e7:ce:56:33:46:fc:cf:08:54:b5:
                    e9:46:e3:b2:f7:b1:b0:0f:2f:c3:f0:86:7a:94:99:
                    26:9e:df:4c:85:66:83:a5:3d:f0:04:6d:e5:1f:67:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F3:06:3A:62:7E:E0:B1:6E:52:7F:0B:14:5A:C3:6C:AA:6A:F7:0D
            X509v3 Authority Key Identifier:
                keyid:EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/c1436bf86304ef0103b2160875a5ba5846926856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:c7:15:40:9e:69:d2:f8:91:45:30:35:9e:f0:18:75:fa:50:
         c2:a9:88:08:5c:f1:0d:ba:e1:2c:e5:3d:df:d6:49:b1:ae:c2:
         80:18:50:de:64:a9:d2:2d:95:db:fd:60:6a:a1:ae:2b:42:0d:
         cb:64:4e:26:25:f7:45:69:30:d2:6c:ed:8c:d6:23:84:2f:95:
         d5:93:11:ba:6d:39:34:f6:66:91:4b:21:ce:a9:cc:61:4b:7d:
         8a:d1:96:2e:4f:69:43:4d:9b:75:b2:f0:3f:0d:32:bc:e2:f8:
         86:b7:aa:e4:53:9c:68:12:3a:91:06:b3:b4:a5:34:5e:3b:3b:
         7d:a2:8d:a1:6d:14:aa:c0:5a:19:2c:6c:95:7a:54:d1:6a:44:
         a2:a4:28:ea:69:12:db:61:68:7e:2b:1d:c1:e0:c1:81:b8:0c:
         36:25:08:e0:b4:67:4a:42:c7:53:96:e3:70:54:17:61:43:e1:
         af:d2:41:e5:d4:c0:7c:bb:c3:00:b0:e2:b8:bd:72:7a:75:94:
         03:c6:70:f7:eb:4a:fc:68:2d:e9:93:9b:38:81:ea:75:7b:62:
         7a:10:cb:51:2f:42:a4:0e:e7:b1:13:6e:d1:49:4e:dc:d1:f7:
         a5:71:88:95:1e:f2:db:2d:36:4a:66:8a:c7:7d:ab:95:c8:77:
         8a:e7:20:21
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEx8mMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIy
MzdhZDE5NTg2NTIyYmQ0MjI4Yzg1OTNkZTJmMjk3YzM1ODY4ZDcwHhcNMjIwODA0
MTk1NjUzWhcNMjQwODA0MTk1NjUzWjAzMTEwLwYDVQQDEyhjMTQzNmJmODYzMDRl
ZjAxMDNiMjE2MDg3NWE1YmE1ODQ2OTI2ODU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAznc/EOnbPHYBHzLvSlxaLSCKjwZ1uafU368NNAa0riQHPhqH
EAGtoMOI5sgjyYkDnbbPSMqzAOlUCwHrAytGvuF5nfnW5PND8NzsHK62cq0Bu1Al
3Yft0ftZ7EDtBcTA8qLX5voAwPXXzDMcykJk87ClUhacJ796fTzweTZB4Zc+FBdd
qkYk31napXndgnRbtI5eaNcKLLnTwjJyA9/6QjLbw5COfxTGbGeLCbdGkHDv1rrJ
Q5fL/JNoZ/OekPzuO1Gz4CYvJB8v/HOrOf9TYY+FVfLMc+fOVjNG/M8IVLXpRuOy
97GwDy/D8IZ6lJkmnt9MhWaDpT3wBG3lH2doPQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFN3zBjpifuCxblJ/CxRaw2yqavcNMB8GA1UdIwQYMBaAFOyuN1nh7553WWN0
oOaxT/ydEzM/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjIzN2Fk
MTk1ODY1MjJiZDQyMjhjODU5M2RlMmYyOTdjMzU4NjhkNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDIxOWQ1ZTgtNTNiNy00ZjFjLTk2YzEtZTk3MTcy
M2E2ZmFiL2MxNDM2YmY4NjMwNGVmMDEwM2IyMTYwODc1YTViYTU4NDY5MjY4NTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MjE5ZDVlOC01M2I3LTRmMWMtOTZjMS1lOTcx
NzIzYTZmYWIvYjIzN2FkMTk1ODY1MjJiZDQyMjhjODU5M2RlMmYyOTdjMzU4Njhk
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3vIDANBgkqhkiG9w0BAQsFAAOCAQEAGccVQJ5p0viRRTA1
nvAYdfpQwqmICFzxDbrhLOU939ZJsa7CgBhQ3mSp0i2V2/1gaqGuK0INy2ROJiX3
RWkw0mztjNYjhC+V1ZMRum05NPZmkUshzqnMYUt9itGWLk9pQ02bdbLwPw0yvOL4
hreq5FOcaBI6kQaztKU0Xjs7faKNoW0UqsBaGSxslXpU0WpEoqQo6mkS22Fofisd
weDBgbgMNiUI4LRnSkLHU5bjcFQXYUPhr9JB5dTAfLvDALDiuL1yenWUA8Zw9+tK
/Ggt6ZObOIHqdXtiehDLUS9CpA7nsRNu0UlO3NH3pXGIlR7y2y02SmaKx32rlch3
iucgIQ==
-----END CERTIFICATE-----
Generated at Wed Dec 13 04:48:12 2023 by rpki-client on console-ams.rpki-client.org