Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/6598290df3a2e8d531bfffc0d2532a7e636a2894.roa
File:                     6598290df3a2e8d531bfffc0d2532a7e636a2894.roa (raw, json)
Hash identifier:          zRFzI2GTQ8ZbGHqSzu+O4NDDTAIY7CQFywTBRJ/sTCA=
Subject key identifier:   F8:39:CD:B8:F6:D5:72:6B:14:3A:15:E4:75:67:63:7D:84:8A:3B:0D
Certificate issuer:       /CN=8c9dca33c362bedd76cf28490675e1556f7d1835
Certificate serial:       03E5D8
Authority key identifier: 0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/6598290df3a2e8d531bfffc0d2532a7e636a2894.roa
Signing time:             Wed 24 Mar 2021 14:37:13 +0000
ROA not before:           Wed 24 Mar 2021 14:37:13 +0000
ROA not after:            Tue 24 Mar 2026 14:37:13 +0000
asID:                     28317
IP address blocks:        191.102.56.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Mar 2024 16:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255448 (0x3e5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9dca33c362bedd76cf28490675e1556f7d1835
        Validity
            Not Before: Mar 24 14:37:13 2021 GMT
            Not After : Mar 24 14:37:13 2026 GMT
        Subject: CN=6598290df3a2e8d531bfffc0d2532a7e636a2894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:07:23:cb:5a:b4:1f:b0:f1:6a:dd:ac:28:
                    f6:b2:b6:d3:77:95:6b:7c:72:ac:e5:2f:49:6b:b3:
                    6f:7e:1e:91:75:e5:e3:b8:14:79:19:fc:39:4a:eb:
                    0e:f2:2c:fa:a4:4f:ab:6e:65:5e:5b:f6:59:9b:51:
                    f6:fa:72:61:26:6e:1a:c0:91:e8:0f:cd:47:07:8e:
                    20:16:8c:58:78:bb:49:f4:dc:ae:20:07:b7:6e:b2:
                    74:43:ad:be:ca:57:a0:ba:2d:69:3e:99:8a:79:d5:
                    05:b2:6d:9a:c6:1e:3c:ac:62:a9:d4:7f:0b:cd:94:
                    b6:f7:42:8f:04:1f:89:bf:57:c5:85:62:84:5d:54:
                    cf:3f:8e:6e:48:3a:82:1c:96:e7:e2:a7:d7:7a:2c:
                    70:fd:31:43:53:00:2b:6a:5e:e8:05:f3:e4:68:49:
                    11:80:8a:8b:f6:fe:ed:5e:7a:e0:6f:81:e1:fa:05:
                    49:91:5b:1b:7d:19:99:24:58:c5:45:5c:28:68:9b:
                    d9:4c:36:75:52:e6:ba:fc:cc:64:d8:e5:f5:2e:00:
                    d1:28:f9:d6:b4:5b:f6:22:2d:d4:63:7e:96:30:2b:
                    40:3f:2b:34:3b:b6:b5:eb:92:e3:35:cb:ec:2e:d4:
                    73:08:a4:04:69:b1:24:93:0f:ad:73:c4:46:15:00:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:39:CD:B8:F6:D5:72:6B:14:3A:15:E4:75:67:63:7D:84:8A:3B:0D
            X509v3 Authority Key Identifier:
                keyid:0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/6598290df3a2e8d531bfffc0d2532a7e636a2894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8c9dca33c362bedd76cf28490675e1556f7d1835.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:60:82:68:ef:64:a2:d2:61:aa:19:69:98:ec:66:61:eb:ab:
         1e:ed:64:b1:f7:8c:23:47:82:36:1c:fe:fd:36:82:19:72:8a:
         e3:75:0a:03:92:aa:28:9a:da:cb:a4:6b:1e:ac:20:75:79:cc:
         d3:82:51:4b:97:2f:6e:2e:25:b3:81:e0:9b:c3:92:1c:13:34:
         73:b0:4f:68:d5:39:c0:f1:98:a5:ea:42:01:0f:1d:10:25:69:
         6a:b8:9a:1b:6b:b4:cc:9c:f7:ab:63:cc:5e:be:7e:89:91:64:
         63:c7:7e:0a:19:8f:bd:af:a5:c6:59:40:ff:b2:91:f7:f5:08:
         94:87:96:cc:aa:c5:5f:2d:33:f6:6b:06:d7:9d:13:39:9c:99:
         ce:c5:52:d8:15:c1:eb:1f:94:48:19:5c:9e:8b:3c:19:f6:32:
         c9:94:59:cb:fc:50:f0:f6:d9:4c:36:63:e8:c5:a0:b0:8b:92:
         97:9a:7e:04:54:82:be:0c:c8:97:ae:97:cd:48:bf:50:f6:fb:
         53:33:56:58:e4:f9:cf:8f:1f:cd:fc:d1:94:39:c3:2c:10:c2:
         10:0f:99:99:96:14:5d:bc:0e:af:ac:98:07:ba:8d:e9:a8:b5:
         7e:39:4d:2b:c5:4b:20:0f:82:47:7b:9c:c3:e1:1c:1e:13:18:
         5d:a5:f6:0c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA+XYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhj
OWRjYTMzYzM2MmJlZGQ3NmNmMjg0OTA2NzVlMTU1NmY3ZDE4MzUwHhcNMjEwMzI0
MTQzNzEzWhcNMjYwMzI0MTQzNzEzWjAzMTEwLwYDVQQDEyg2NTk4MjkwZGYzYTJl
OGQ1MzFiZmZmYzBkMjUzMmE3ZTYzNmEyODk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvMcHI8tatB+w8WrdrCj2srbTd5VrfHKs5S9Ja7Nvfh6RdeXj
uBR5Gfw5SusO8iz6pE+rbmVeW/ZZm1H2+nJhJm4awJHoD81HB44gFoxYeLtJ9Nyu
IAe3brJ0Q62+ylegui1pPpmKedUFsm2axh48rGKp1H8LzZS290KPBB+Jv1fFhWKE
XVTPP45uSDqCHJbn4qfXeixw/TFDUwAral7oBfPkaEkRgIqL9v7tXnrgb4Hh+gVJ
kVsbfRmZJFjFRVwoaJvZTDZ1Uua6/Mxk2OX1LgDRKPnWtFv2Ii3UY36WMCtAPys0
O7a165LjNcvsLtRzCKQEabEkkw+tc8RGFQAghQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPg5zbj21XJrFDoV5HVnY32EijsNMB8GA1UdIwQYMBaAFAtl1vE5Yny1hWF0
BeUavZZZ9NyoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGM5ZGNh
MzNjMzYyYmVkZDc2Y2YyODQ5MDY3NWUxNTU2ZjdkMTgzNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGI4ZTBiZWUtMTViYy00YWEzLThmNmItOTBmNjEw
MzVjNDE0LzY1OTgyOTBkZjNhMmU4ZDUzMWJmZmZjMGQyNTMyYTdlNjM2YTI4OTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YjhlMGJlZS0xNWJjLTRhYTMtOGY2Yi05MGY2
MTAzNWM0MTQvOGM5ZGNhMzNjMzYyYmVkZDc2Y2YyODQ5MDY3NWUxNTU2ZjdkMTgz
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr9mODANBgkqhkiG9w0BAQsFAAOCAQEAFWCCaO9kotJhqhlp
mOxmYeurHu1ksfeMI0eCNhz+/TaCGXKK43UKA5KqKJray6RrHqwgdXnM04JRS5cv
bi4ls4Hgm8OSHBM0c7BPaNU5wPGYpepCAQ8dECVpariaG2u0zJz3q2PMXr5+iZFk
Y8d+ChmPva+lxllA/7KR9/UIlIeWzKrFXy0z9msG150TOZyZzsVS2BXB6x+USBlc
nos8GfYyyZRZy/xQ8PbZTDZj6MWgsIuSl5p+BFSCvgzIl66XzUi/UPb7UzNWWOT5
z48fzfzRlDnDLBDCEA+ZmZYUXbwOr6yYB7qN6ai1fjlNK8VLIA+CR3ucw+EcHhMY
XaX2DA==
-----END CERTIFICATE-----
Generated at Thu Mar 7 19:38:35 2024 by rpki-client on console-ams.rpki-client.org