Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/3b22e9261a6a7bb08f023f43f922464cadcbcaf9.roa
File:                     3b22e9261a6a7bb08f023f43f922464cadcbcaf9.roa (raw, json)
Hash identifier:          lvLCmPdb0221WvMY2EbK61x8cYnrkCzuEZipM64ec2A=
Subject key identifier:   E7:10:CE:91:0D:E0:07:4D:8E:77:9C:44:7F:C8:6C:6F:87:B4:55:55
Certificate issuer:       /CN=239ac677d20da31c1af262c7528bd5cc25d5e101
Certificate serial:       0C7BF3
Authority key identifier: BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/3b22e9261a6a7bb08f023f43f922464cadcbcaf9.roa
Signing time:             Wed 24 Mar 2021 14:29:10 +0000
ROA not before:           Wed 24 Mar 2021 14:29:10 +0000
ROA not after:            Tue 24 Mar 2026 14:29:10 +0000
asID:                     265862
IP address blocks:        45.224.188.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818163 (0xc7bf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239ac677d20da31c1af262c7528bd5cc25d5e101
        Validity
            Not Before: Mar 24 14:29:10 2021 GMT
            Not After : Mar 24 14:29:10 2026 GMT
        Subject: CN=3b22e9261a6a7bb08f023f43f922464cadcbcaf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:ed:99:4c:8a:9f:2d:87:fe:a7:8a:32:d0:
                    dc:b4:85:fb:5f:2b:8f:c6:84:be:94:b5:69:34:93:
                    84:fb:36:57:8c:fc:54:ed:6e:f5:75:84:ca:c3:69:
                    f2:87:9e:7c:f4:bf:cd:45:db:61:50:b9:c6:e4:3d:
                    a9:ed:d6:c9:d9:5b:ba:8c:3c:b2:d2:e5:f4:62:fc:
                    30:28:5b:08:a6:f8:79:8a:0f:11:ae:09:6b:14:7c:
                    64:d0:b4:33:83:01:17:a3:cb:f7:78:ab:5f:12:3e:
                    8d:6e:d2:01:00:36:43:07:b9:53:dd:59:b5:19:e9:
                    1c:e6:27:bd:70:00:a9:8b:3c:cd:6f:f1:d0:6e:b7:
                    e3:ea:90:2e:b6:e9:ee:0f:04:c0:03:8b:08:f0:d6:
                    6b:ad:b1:9a:5f:77:ad:19:09:85:a5:e4:42:30:88:
                    48:82:dd:81:47:20:36:4d:f0:af:bf:39:1a:19:fd:
                    a1:7e:0a:72:84:90:fb:d0:72:69:59:af:f8:bd:b9:
                    5e:5f:f5:94:6b:d3:c7:f9:ba:26:7c:d2:83:cd:ec:
                    4a:e4:d9:32:c3:4f:77:f0:a1:30:d5:41:46:13:ea:
                    1d:34:01:1a:03:da:a9:93:24:23:2b:d4:e0:00:b5:
                    d4:b5:c7:ce:b0:c7:eb:94:22:a4:cd:31:48:6a:89:
                    c0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:10:CE:91:0D:E0:07:4D:8E:77:9C:44:7F:C8:6C:6F:87:B4:55:55
            X509v3 Authority Key Identifier:
                keyid:BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/3b22e9261a6a7bb08f023f43f922464cadcbcaf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/239ac677d20da31c1af262c7528bd5cc25d5e101.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:ff:e0:29:48:43:bb:3a:10:1b:20:f7:af:cc:76:b0:47:
         76:90:c0:f2:a6:8b:06:8a:af:22:fd:f1:48:e6:c6:b0:e5:97:
         d1:40:ab:a0:1f:66:43:34:86:fa:20:82:4f:b8:3b:bb:bc:24:
         b0:1d:40:b7:10:88:22:50:7a:3f:57:34:a5:64:6a:4e:20:f4:
         bc:a6:f4:43:9f:0d:e1:ab:88:1b:f4:95:f2:e2:d9:75:dd:64:
         14:92:3d:8e:01:ad:9c:2b:69:3a:a0:5f:7c:75:6b:b0:e2:8f:
         6d:e0:93:16:b6:92:b4:d7:7d:4d:e0:07:17:d1:ec:35:b7:1f:
         f8:e1:97:a8:23:41:f7:81:5f:38:f3:16:18:75:a1:8c:38:d2:
         ef:e3:0c:a5:fe:80:0d:38:e7:d3:d4:a5:bc:b2:fa:ca:31:ea:
         be:b8:89:51:7c:ed:30:de:77:e8:2e:7e:c2:43:65:c9:4c:1f:
         67:1d:6e:a1:19:57:a2:a0:50:8b:52:8f:8e:e1:52:dc:86:b6:
         25:bf:d5:7f:13:cd:f7:ab:34:9e:a1:14:97:d7:40:46:6f:b0:
         68:52:7b:a6:09:17:dc:27:73:28:84:ef:75:4d:0b:34:59:a0:
         8e:e0:a0:de:1f:98:61:7c:2c:bc:c5:63:f8:d9:0e:1b:96:10:
         33:92:01:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-ams.rpki-client.org