Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/c4c7dca1026feb5f8c49d42b4bc37fe38830c349.roa
File:                     c4c7dca1026feb5f8c49d42b4bc37fe38830c349.roa (raw, json)
Hash identifier:          Ss5dEOmFKF+bBp/1tj/1yK7exQZiFmbWthvRjYnRyVg=
Subject key identifier:   6B:10:43:12:BE:60:78:75:58:20:D1:EF:47:DD:20:A9:9B:5B:7C:E0
Certificate issuer:       /CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
Certificate serial:       1160EF
Authority key identifier: 93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/c4c7dca1026feb5f8c49d42b4bc37fe38830c349.roa
Signing time:             Thu 26 Aug 2021 15:15:57 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     271882
IP address blocks:        170.244.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138927 (0x1160ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=c4c7dca1026feb5f8c49d42b4bc37fe38830c349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:0d:d3:1c:70:11:0b:9b:14:b5:bf:d0:fc:
                    4b:1a:06:22:04:32:a7:56:9c:e0:9d:d8:3d:c9:ff:
                    a5:ea:e7:71:00:1a:c8:1f:b1:64:75:f7:44:27:ed:
                    39:87:2b:61:3a:ea:2c:5d:ce:72:54:a2:95:45:44:
                    42:32:eb:41:2d:8d:20:1c:88:f6:7d:84:2a:3e:ed:
                    34:ca:64:de:4b:92:69:fb:56:36:46:26:4e:84:1f:
                    b6:ec:9b:be:54:dd:71:9a:80:4e:b6:e1:ce:2a:b7:
                    6b:0f:ef:ee:e6:05:94:8e:95:d2:57:fb:c8:7c:12:
                    39:ce:f3:89:e4:c3:c9:1b:b8:3d:05:09:bd:b6:40:
                    34:51:7f:54:e1:2b:a0:5d:ef:1d:b7:43:f2:71:3d:
                    59:6c:64:84:ab:8f:3f:40:3c:4c:45:e8:68:ea:c3:
                    8e:7b:84:50:cc:fd:72:b5:80:c3:f2:78:e2:3c:93:
                    0e:91:5e:52:b4:a1:50:ee:73:eb:9a:4f:3d:c5:1c:
                    7a:15:5c:df:58:1a:7c:f0:f1:7c:63:b8:ff:4c:a9:
                    c7:e0:41:fd:d1:26:f3:b9:b1:26:5c:9c:5b:fc:f1:
                    9c:41:aa:2c:af:2c:8d:3b:98:f4:b4:df:eb:7d:3f:
                    53:96:57:1e:03:87:9c:44:e1:29:2c:f4:5d:a5:81:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:10:43:12:BE:60:78:75:58:20:D1:EF:47:DD:20:A9:9B:5B:7C:E0
            X509v3 Authority Key Identifier:
                keyid:93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/c4c7dca1026feb5f8c49d42b4bc37fe38830c349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:b6:42:a9:86:00:95:31:2a:a5:e4:58:9d:c8:4d:26:3f:72:
         a5:b0:72:c2:04:a1:67:96:82:2a:85:fe:3b:e5:a5:e7:2f:dc:
         54:8f:37:83:3b:9a:af:86:dc:ff:b9:02:28:c6:ed:ed:8e:c7:
         71:44:2f:42:78:7a:bf:41:eb:53:79:7d:9d:c5:2b:51:a1:21:
         d8:96:d7:81:53:11:7e:5d:7e:42:ef:84:e2:bd:c6:ae:8c:f2:
         03:59:87:58:19:b3:c9:aa:52:9a:60:1b:94:1d:3e:5e:0a:f7:
         3c:c2:c3:87:61:0c:21:9b:72:33:77:e5:c1:d3:aa:da:d3:3a:
         40:c6:cd:56:42:f4:d1:f1:ff:59:c7:8a:14:ea:be:b1:c6:db:
         40:a0:6d:47:61:c8:ed:51:4b:2c:5d:17:87:c2:fd:0b:40:3f:
         b4:da:b3:58:25:18:86:0b:4d:b1:58:23:0f:b8:aa:10:a0:c2:
         13:0d:9a:7f:59:14:a3:6c:12:6e:5e:9f:42:16:c8:bd:57:ed:
         3f:ac:92:57:46:38:c1:6a:5f:04:73:2c:21:83:e1:25:5b:85:
         ae:55:f8:47:96:cd:1d:5e:2d:52:ff:57:40:0d:2e:71:40:f6:
         de:66:38:0d:8e:1b:83:d0:39:91:0b:5a:54:fd:85:c3:17:ea:
         c2:ea:a2:90
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEWDvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRj
OGNmY2Y2ODA3NDgxZTZmYmExY2Y3ODZmMmRlNTNmYTA1ZDBkMmQwHhcNMjEwODI2
MDMwMDAwWhcNMjMwODI2MDMwMDAwWjAzMTEwLwYDVQQDEyhjNGM3ZGNhMTAyNmZl
YjVmOGM0OWQ0MmI0YmMzN2ZlMzg4MzBjMzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkGUN0xxwEQubFLW/0PxLGgYiBDKnVpzgndg9yf+l6udxABrI
H7FkdfdEJ+05hythOuosXc5yVKKVRURCMutBLY0gHIj2fYQqPu00ymTeS5Jp+1Y2
RiZOhB+27Ju+VN1xmoBOtuHOKrdrD+/u5gWUjpXSV/vIfBI5zvOJ5MPJG7g9BQm9
tkA0UX9U4SugXe8dt0PycT1ZbGSEq48/QDxMReho6sOOe4RQzP1ytYDD8njiPJMO
kV5StKFQ7nPrmk89xRx6FVzfWBp88PF8Y7j/TKnH4EH90SbzubEmXJxb/PGcQaos
ryyNO5j0tN/rfT9TllceA4ecROEpLPRdpYEPSwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGsQQxK+YHh1WCDR70fdIKmbW3zgMB8GA1UdIwQYMBaAFJM8S05fNxQffWHp
0Xr9fKTu4iWVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGM4Y2Zj
ZjY4MDc0ODFlNmZiYTFjZjc4NmYyZGU1M2ZhMDVkMGQyZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDQ0NDQzZWItNmMxNi00NmRlLWIyODctNTViOWRh
NGQ1YjA1L2M0YzdkY2ExMDI2ZmViNWY4YzQ5ZDQyYjRiYzM3ZmUzODgzMGMzNDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NDQ0NDNlYi02YzE2LTQ2ZGUtYjI4Ny01NWI5
ZGE0ZDViMDUvZGM4Y2ZjZjY4MDc0ODFlNmZiYTFjZjc4NmYyZGU1M2ZhMDVkMGQy
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKr00DANBgkqhkiG9w0BAQsFAAOCAQEAHbZCqYYAlTEqpeRY
nchNJj9ypbBywgShZ5aCKoX+O+Wl5y/cVI83gzuar4bc/7kCKMbt7Y7HcUQvQnh6
v0HrU3l9ncUrUaEh2JbXgVMRfl1+Qu+E4r3GrozyA1mHWBmzyapSmmAblB0+Xgr3
PMLDh2EMIZtyM3flwdOq2tM6QMbNVkL00fH/WceKFOq+scbbQKBtR2HI7VFLLF0X
h8L9C0A/tNqzWCUYhgtNsVgjD7iqEKDCEw2af1kUo2wSbl6fQhbIvVftP6ySV0Y4
wWpfBHMsIYPhJVuFrlX4R5bNHV4tUv9XQA0ucUD23mY4DY4bg9A5kQtaVP2Fwxfq
wuqikA==
-----END CERTIFICATE-----
Generated at Fri Aug 25 08:52:33 2023 by rpki-client on console-fra.rpki-client.org