Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/c7d06700da84915386e3bd257da0c5a0ff781bcb.roa
File:                     c7d06700da84915386e3bd257da0c5a0ff781bcb.roa (raw, json)
Hash identifier:          x4t08fJgB8hw30mdU9RcGBkxOC+l5jg0qb/+au0FXGs=
Subject key identifier:   6E:BD:D4:1D:57:DD:08:11:F5:CC:CE:BA:D6:95:7C:8E:61:11:78:11
Certificate issuer:       /CN=a016a5c461a1f289e43e8833d657227c9b30df0c
Certificate serial:       0154DF
Authority key identifier: DC:90:D4:05:40:1A:AC:99:BF:76:42:3E:82:55:17:BF:51:28:34:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a016a5c461a1f289e43e8833d657227c9b30df0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/c7d06700da84915386e3bd257da0c5a0ff781bcb.roa
Signing time:             Wed 24 Mar 2021 14:29:35 +0000
ROA not before:           Wed 24 Mar 2021 14:29:35 +0000
ROA not after:            Tue 24 Mar 2026 14:29:35 +0000
asID:                     269979
IP address blocks:        187.0.40.0/23 maxlen: 24
                          2803:8ee0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87263 (0x154df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a016a5c461a1f289e43e8833d657227c9b30df0c
        Validity
            Not Before: Mar 24 14:29:35 2021 GMT
            Not After : Mar 24 14:29:35 2026 GMT
        Subject: CN=c7d06700da84915386e3bd257da0c5a0ff781bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:62:9e:ab:27:f9:72:9b:33:19:56:e1:40:
                    84:35:4a:10:db:5f:1f:03:66:87:e1:f8:ae:1f:65:
                    ed:5a:91:7a:61:ad:5c:93:ee:9c:12:ae:70:a4:d3:
                    17:04:dc:98:22:08:d0:f4:d6:f4:4b:63:19:6d:22:
                    5d:bb:5f:82:0e:61:d5:83:8d:f2:76:90:11:18:18:
                    58:ce:7f:d1:42:51:bf:2d:d8:44:26:fa:ec:c7:cd:
                    88:cd:fa:02:e8:3a:de:6f:a5:2f:fd:2c:bd:56:bf:
                    08:57:e0:de:d6:17:a5:f8:8a:8e:33:b0:da:9e:cf:
                    31:f6:fa:9b:ba:d6:8d:fc:53:4f:ee:3e:f9:fc:81:
                    58:f7:88:77:56:c9:1f:37:98:f4:11:e9:ee:31:76:
                    f8:89:11:a9:81:4c:80:05:f3:ba:69:be:fd:74:cf:
                    c6:44:8c:bf:3f:25:e8:f9:16:8b:22:d2:e4:b0:43:
                    c2:c1:7d:4d:98:52:dd:ea:03:e6:5d:70:36:ec:03:
                    be:0d:db:da:44:ee:3a:82:f8:e6:cf:c0:f6:f6:14:
                    7e:90:b4:40:59:08:9b:53:9c:c6:40:8d:9c:9c:97:
                    01:31:ab:6e:11:b2:d2:51:2a:6a:1d:dc:78:fe:ab:
                    79:7c:d6:e6:7e:78:f4:d4:e7:b0:b3:85:b0:5a:1f:
                    b6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BD:D4:1D:57:DD:08:11:F5:CC:CE:BA:D6:95:7C:8E:61:11:78:11
            X509v3 Authority Key Identifier:
                keyid:DC:90:D4:05:40:1A:AC:99:BF:76:42:3E:82:55:17:BF:51:28:34:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a016a5c461a1f289e43e8833d657227c9b30df0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/c7d06700da84915386e3bd257da0c5a0ff781bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/a016a5c461a1f289e43e8833d657227c9b30df0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.40.0/23
                IPv6:
                  2803:8ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:c4:fd:82:af:a1:46:ef:2f:78:9a:84:84:91:87:4f:28:b0:
         da:c4:74:cd:2b:3a:3e:95:93:da:31:1c:d7:89:87:d9:c4:10:
         3b:ab:2b:05:ca:8e:bf:6b:b5:b6:8e:6c:05:f6:89:1e:2e:fb:
         3e:3f:66:04:46:4c:58:36:e0:c2:d7:ca:2d:f6:a9:53:42:5e:
         55:ec:f8:a2:21:72:f1:ef:2e:48:ee:61:9f:76:89:b9:b6:b9:
         37:5c:71:8b:07:7b:f4:3a:9b:fe:cd:13:98:34:9b:87:27:2d:
         8b:3d:81:c7:bd:1d:d1:93:fe:3f:3e:0d:4c:61:05:7e:0f:41:
         2c:c3:f7:fa:9f:61:97:b3:b5:b7:ef:5f:a1:50:b8:0f:49:3b:
         b4:85:42:0f:ad:d3:1c:ae:8c:b3:16:0c:cf:f8:3d:c5:4d:a6:
         9c:31:3d:b9:d1:47:94:01:44:0b:64:c6:21:45:14:be:3e:01:
         2d:d0:1c:7e:16:0d:8c:1b:fb:eb:2f:9f:2d:80:e7:7f:cd:cc:
         18:37:39:e2:18:3a:b7:ec:4b:af:eb:db:5c:9b:03:aa:47:49:
         23:22:bc:14:69:1d:9f:9b:c2:e1:44:bc:68:49:61:af:3b:9e:
         e7:32:62:a0:2c:84:4a:07:fa:e0:2b:04:1e:c0:fe:9c:19:78:
         91:38:c8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-ams.rpki-client.org