Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/0050a7ef1c4d0a8686659441a3dafa3b5556d364.roa
File:                     0050a7ef1c4d0a8686659441a3dafa3b5556d364.roa (raw, json)
Hash identifier:          wnCBcM/rYtMOz9HvOSJeKDzWaYZ6MAzoWTMr9BOAWi0=
Subject key identifier:   52:CC:05:48:94:A9:B1:60:27:A1:1B:49:BB:FD:8E:F8:E9:B3:63:D7
Certificate issuer:       /CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
Certificate serial:       248476
Authority key identifier: 4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/0050a7ef1c4d0a8686659441a3dafa3b5556d364.roa
Signing time:             Wed 06 Sep 2023 20:09:40 +0000
ROA not before:           Tue 05 Sep 2023 20:09:40 +0000
ROA not after:            Sat 06 Sep 2025 20:09:40 +0000
asID:                     273045
IP address blocks:        179.60.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2393206 (0x248476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
        Validity
            Not Before: Sep  5 20:09:40 2023 GMT
            Not After : Sep  6 20:09:40 2025 GMT
        Subject: CN=0050a7ef1c4d0a8686659441a3dafa3b5556d364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:ba:1d:63:7f:ba:34:b3:e3:ec:7c:ad:25:
                    d9:7e:bf:1f:20:5e:0d:0d:12:8a:40:62:74:2a:ef:
                    77:94:17:87:5d:03:fa:b7:92:70:73:dc:62:6e:48:
                    a0:62:91:4b:d2:71:88:54:00:a8:fb:fc:5c:33:fa:
                    e6:a3:1f:80:cd:4e:85:e3:a9:f3:97:da:09:2b:c2:
                    fa:95:fd:28:da:ce:db:80:e2:4a:40:af:e2:80:21:
                    65:07:eb:e7:a9:8c:31:3a:4a:f4:4c:71:13:5e:7d:
                    98:2c:30:84:e2:e8:33:9e:43:d1:04:d5:db:c5:da:
                    24:21:9e:4e:49:ae:61:ef:ab:30:20:fb:f1:df:37:
                    62:fb:45:04:70:d8:3b:9e:ee:e6:a2:ef:df:1f:88:
                    b5:30:bd:f9:88:c2:6e:ac:15:3a:f1:fb:b0:a4:81:
                    38:5c:af:1c:54:dd:98:e1:22:c5:81:9d:ee:af:7a:
                    d7:d5:3f:d2:65:30:92:34:4b:53:c4:64:ff:59:61:
                    39:2f:ee:13:cd:61:0d:5d:a6:53:ed:76:3c:a7:01:
                    f5:ce:d5:e6:0f:77:20:eb:c6:05:dd:63:9e:e4:af:
                    9e:91:07:52:bb:83:9c:ec:05:e7:78:21:9b:96:db:
                    b2:8e:62:54:91:17:c5:02:a3:d8:1b:ae:d6:eb:ad:
                    30:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CC:05:48:94:A9:B1:60:27:A1:1B:49:BB:FD:8E:F8:E9:B3:63:D7
            X509v3 Authority Key Identifier:
                keyid:4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/0050a7ef1c4d0a8686659441a3dafa3b5556d364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/08e8921a29ec1eae940cc6e9659da39a16312ca2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:4f:80:7f:16:5a:a0:65:58:08:a7:69:b6:60:a1:89:6f:50:
         2f:59:91:ea:7e:b4:ea:2d:ed:ab:28:f2:b7:85:bd:5f:83:36:
         f5:33:81:52:d7:e9:03:75:ed:b8:fc:d8:f3:78:97:d4:1b:3d:
         2e:ce:0c:3c:9f:3c:76:30:77:05:33:fb:ac:ef:71:37:ab:91:
         1e:ca:a4:59:85:98:89:1a:0a:61:f4:83:9d:07:c3:28:29:4b:
         6b:59:17:5f:4e:d0:6a:ba:3c:25:ab:72:71:01:89:7c:0b:4b:
         c0:93:a9:71:99:3f:17:33:97:c3:54:e5:b2:b9:e0:4a:e0:84:
         98:ce:3f:4b:74:f1:e1:99:3a:cf:1a:7d:85:6d:c6:31:6d:aa:
         79:c7:0c:e7:70:cc:47:5f:f6:1e:aa:cb:e3:c5:5b:97:44:be:
         02:82:de:3a:e5:ba:8b:e8:ba:4f:a1:6c:79:6e:41:82:b0:fe:
         89:50:7f:c8:cc:86:f5:ea:fe:95:2f:3c:c4:2e:10:21:de:96:
         fa:48:ad:9f:e7:f0:23:8c:f1:53:d1:db:ca:62:e5:15:2f:4a:
         ce:2b:8e:a9:f2:a0:72:c8:1e:fd:4e:d9:29:8b:5d:44:d1:6b:
         f4:82:67:e7:5f:17:fb:c1:6b:88:13:ef:c9:11:95:7a:44:2e:
         57:99:d9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 08:42:41 2023 by rpki-client on console-fra.rpki-client.org