Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/c7c2bfa6333ebafece960d84bc87ab08abe9ce46.roa
File:                     c7c2bfa6333ebafece960d84bc87ab08abe9ce46.roa (raw, json)
Hash identifier:          CRyVqhzxfe31kiryD0l8j7hUtCXlwHR9GnO14XdW/NQ=
Subject key identifier:   47:77:7D:36:C9:23:5A:3B:5C:EE:AD:79:07:92:ED:A5:76:A1:B9:E2
Certificate issuer:       /CN=d6c012e30dc831b6875f6cfcb5639d3f391769b7
Certificate serial:       0B74A6
Authority key identifier: A2:0A:0E:B5:5E:9B:EA:B8:C3:64:EC:92:FE:56:D1:1E:5A:67:14:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6c012e30dc831b6875f6cfcb5639d3f391769b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/c7c2bfa6333ebafece960d84bc87ab08abe9ce46.roa
Signing time:             Wed 24 Mar 2021 14:46:32 +0000
ROA not before:           Wed 24 Mar 2021 14:46:32 +0000
ROA not after:            Tue 24 Mar 2026 14:46:32 +0000
asID:                     269783
IP address blocks:        45.184.108.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750758 (0xb74a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c012e30dc831b6875f6cfcb5639d3f391769b7
        Validity
            Not Before: Mar 24 14:46:32 2021 GMT
            Not After : Mar 24 14:46:32 2026 GMT
        Subject: CN=c7c2bfa6333ebafece960d84bc87ab08abe9ce46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:06:be:65:d2:28:c4:58:f1:bb:cf:ea:f4:98:
                    f8:0f:1f:10:64:42:87:37:f1:df:22:32:08:61:3d:
                    63:ab:fe:ff:e0:43:75:c1:8f:23:a7:99:96:63:40:
                    70:f5:4e:94:16:fb:d5:fb:cc:13:a5:1b:7d:db:8d:
                    c8:f2:fb:59:5b:1c:ca:9d:e2:02:b8:13:17:bc:8d:
                    6f:34:44:cc:a7:ba:f1:86:7e:12:c2:6f:95:b9:38:
                    8b:76:bd:62:c5:fe:9c:eb:44:35:59:55:31:bf:aa:
                    11:28:2d:00:e7:e5:e4:af:28:b1:a9:e4:dc:37:93:
                    c8:12:a7:76:9f:5d:25:0c:ef:27:b5:0a:60:96:68:
                    74:f9:71:40:39:e2:77:92:84:61:bf:fa:ea:b2:38:
                    63:c7:44:d0:8a:44:fc:4b:3e:25:60:8d:a1:64:4b:
                    ca:de:10:63:4d:4d:6b:3f:ef:1d:a2:6d:d9:dd:5a:
                    23:2a:2e:83:7b:7e:e8:34:5d:ed:b3:4a:97:d4:76:
                    f9:a7:d1:97:e5:66:c9:77:38:03:3a:7e:77:40:6a:
                    5d:2b:27:18:54:3c:4e:55:7d:c4:91:a9:85:57:07:
                    4e:df:ad:ab:62:b1:6b:c5:0d:ce:d0:bb:70:0c:16:
                    41:43:bd:4a:2c:c9:8d:da:4d:2c:83:b8:72:52:73:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:77:7D:36:C9:23:5A:3B:5C:EE:AD:79:07:92:ED:A5:76:A1:B9:E2
            X509v3 Authority Key Identifier:
                keyid:A2:0A:0E:B5:5E:9B:EA:B8:C3:64:EC:92:FE:56:D1:1E:5A:67:14:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6c012e30dc831b6875f6cfcb5639d3f391769b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/c7c2bfa6333ebafece960d84bc87ab08abe9ce46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/d6c012e30dc831b6875f6cfcb5639d3f391769b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:20:e3:b4:a2:87:25:6d:b8:28:85:f9:d3:a4:8c:cb:f0:53:
         4b:5e:52:8c:37:dd:18:15:b8:4b:54:b4:11:60:cb:db:5c:3d:
         a0:39:86:05:01:9f:ed:1b:09:9f:fc:8e:b9:e9:33:54:23:14:
         df:42:53:6c:2c:35:49:b3:eb:ca:71:b8:88:67:6b:36:9a:d3:
         3e:1e:1a:a2:2c:e0:9c:ce:22:e3:19:1b:9a:61:ef:61:77:43:
         64:d2:7e:95:62:89:0d:26:90:4e:54:6f:f0:7e:80:65:7e:13:
         5f:35:5a:5a:20:4a:ca:ea:c0:76:c3:fe:6c:39:00:2c:db:1b:
         2b:fe:10:4c:0c:cf:91:bd:0f:3a:b7:e3:ad:2a:6e:a6:e1:c0:
         2d:70:a7:61:fc:b8:f9:c1:fa:e0:95:b6:32:92:1f:f2:89:e7:
         57:5c:da:a1:10:50:41:f0:b4:3b:40:7c:cf:e7:a4:77:9e:f7:
         cc:33:b2:08:28:fd:da:e0:16:8d:db:f4:d9:2c:d7:1c:d0:ba:
         57:52:b1:b1:ca:5a:f3:e5:53:db:6d:7c:2b:48:c8:4a:0b:e1:
         82:53:a2:59:03:1b:4d:05:c0:6a:3d:b9:5b:e5:13:52:72:dc:
         f7:07:e2:07:1f:f8:6e:9c:85:34:d4:e7:b2:6d:27:75:aa:b8:
         7c:4f:fc:a0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC3SmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2
YzAxMmUzMGRjODMxYjY4NzVmNmNmY2I1NjM5ZDNmMzkxNzY5YjcwHhcNMjEwMzI0
MTQ0NjMyWhcNMjYwMzI0MTQ0NjMyWjAzMTEwLwYDVQQDEyhjN2MyYmZhNjMzM2Vi
YWZlY2U5NjBkODRiYzg3YWIwOGFiZTljZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgwa+ZdIoxFjxu8/q9Jj4Dx8QZEKHN/HfIjIIYT1jq/7/4EN1
wY8jp5mWY0Bw9U6UFvvV+8wTpRt9243I8vtZWxzKneICuBMXvI1vNETMp7rxhn4S
wm+VuTiLdr1ixf6c60Q1WVUxv6oRKC0A5+XkryixqeTcN5PIEqd2n10lDO8ntQpg
lmh0+XFAOeJ3koRhv/rqsjhjx0TQikT8Sz4lYI2hZEvK3hBjTU1rP+8dom3Z3Voj
Ki6De37oNF3ts0qX1Hb5p9GX5WbJdzgDOn53QGpdKycYVDxOVX3EkamFVwdO362r
YrFrxQ3O0LtwDBZBQ71KLMmN2k0sg7hyUnMplQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEd3fTbJI1o7XO6teQeS7aV2obniMB8GA1UdIwQYMBaAFKIKDrVem+q4w2Ts
kv5W0R5aZxQkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDZjMDEy
ZTMwZGM4MzFiNjg3NWY2Y2ZjYjU2MzlkM2YzOTE3NjliNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDNiZDVkY2UtY2UxYi00ODU4LTk2ZDktNWQzNGJi
YTAwYTQwL2M3YzJiZmE2MzMzZWJhZmVjZTk2MGQ4NGJjODdhYjA4YWJlOWNlNDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80M2JkNWRjZS1jZTFiLTQ4NTgtOTZkOS01ZDM0
YmJhMDBhNDAvZDZjMDEyZTMwZGM4MzFiNjg3NWY2Y2ZjYjU2MzlkM2YzOTE3Njli
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi24bDANBgkqhkiG9w0BAQsFAAOCAQEAXCDjtKKHJW24KIX5
06SMy/BTS15SjDfdGBW4S1S0EWDL21w9oDmGBQGf7RsJn/yOuekzVCMU30JTbCw1
SbPrynG4iGdrNprTPh4aoizgnM4i4xkbmmHvYXdDZNJ+lWKJDSaQTlRv8H6AZX4T
XzVaWiBKyurAdsP+bDkALNsbK/4QTAzPkb0POrfjrSpupuHALXCnYfy4+cH64JW2
MpIf8onnV1zaoRBQQfC0O0B8z+ekd573zDOyCCj92uAWjdv02SzXHNC6V1Kxscpa
8+VT2218K0jISgvhglOiWQMbTQXAaj25W+UTUnLc9wfiBx/4bpyFNNTnsm0ndaq4
fE/8oA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-ams.rpki-client.org