Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/faf49f93ce2b6c803bef5c154652d4232c97d2fa.roa
File:                     faf49f93ce2b6c803bef5c154652d4232c97d2fa.roa (raw, json)
Hash identifier:          PnfYYE+4qCseMBWWRlZYl7644hrqY6JyT9pdpBt7Kek=
Subject key identifier:   7C:DE:D7:37:E8:A8:00:A9:DD:46:97:AB:83:39:EE:CE:DA:1B:6E:4E
Certificate issuer:       /CN=8c9dca33c362bedd76cf28490675e1556f7d1835
Certificate serial:       077DEA
Authority key identifier: 0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/faf49f93ce2b6c803bef5c154652d4232c97d2fa.roa
Signing time:             Mon 16 Aug 2021 18:00:52 +0000
ROA not before:           Mon 16 Aug 2021 03:00:00 +0000
ROA not after:            Wed 16 Aug 2023 03:00:00 +0000
asID:                     28110
IP address blocks:        131.196.32.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490986 (0x77dea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9dca33c362bedd76cf28490675e1556f7d1835
        Validity
            Not Before: Aug 16 03:00:00 2021 GMT
            Not After : Aug 16 03:00:00 2023 GMT
        Subject: CN=faf49f93ce2b6c803bef5c154652d4232c97d2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:e9:3d:33:d4:8c:c1:9f:65:da:a7:78:5e:
                    0a:08:69:37:c7:21:16:31:e6:ee:bc:c7:88:cc:43:
                    86:a9:f3:c4:80:5a:7e:2a:09:42:1b:de:50:61:2e:
                    9a:c7:33:38:7d:b7:7d:ad:c4:31:b1:42:9b:57:13:
                    67:01:64:19:24:7b:9a:63:b4:55:12:9f:5e:1a:ad:
                    d9:3e:2d:6b:49:80:c8:c0:a3:72:d6:00:01:5d:15:
                    71:8b:b6:bd:b0:a0:18:ed:a4:11:78:62:33:6f:39:
                    8b:15:2f:a6:81:2e:92:09:62:b8:d7:ab:ed:21:7c:
                    8e:2e:10:48:be:0f:6a:d5:e2:7a:cf:61:fa:73:83:
                    e9:55:34:1b:32:15:1a:1e:0a:58:41:ef:62:08:5e:
                    1d:b9:28:d0:74:49:9b:07:fd:f0:d0:7f:bc:c7:cc:
                    08:cf:b0:8e:e6:2c:47:69:4d:09:47:00:46:14:db:
                    2b:3a:1f:07:43:ef:48:03:46:97:df:f0:fc:20:42:
                    d8:d4:05:0d:c7:9e:8e:ce:74:30:46:e3:f0:e0:d1:
                    ae:98:62:b8:d5:64:e9:d9:af:4f:74:00:b6:4f:3a:
                    84:99:0b:83:ef:9f:46:e8:3d:5c:2a:ef:38:71:bb:
                    82:81:7e:00:96:1e:03:a6:c6:08:cf:0d:40:e8:70:
                    f4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DE:D7:37:E8:A8:00:A9:DD:46:97:AB:83:39:EE:CE:DA:1B:6E:4E
            X509v3 Authority Key Identifier:
                keyid:0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/faf49f93ce2b6c803bef5c154652d4232c97d2fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8c9dca33c362bedd76cf28490675e1556f7d1835.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:9d:83:06:c8:02:36:29:88:b9:84:b1:f9:ee:3c:29:8a:4c:
         49:13:c3:20:6b:f4:fb:1a:2c:a5:40:a9:fa:d0:bc:3b:2e:52:
         67:9c:d3:2a:b7:d6:23:0b:ec:e8:7a:30:e5:cf:00:c0:c7:85:
         0e:3c:ff:03:a2:e1:84:a0:d1:89:ae:d2:a5:4c:c0:a2:ca:b3:
         8f:3a:17:ad:a8:ac:65:fb:e4:40:13:76:1c:0e:c6:2d:03:8f:
         22:a0:a5:38:ce:c6:f1:52:61:34:b7:4f:2b:22:fa:33:a9:60:
         7b:47:87:69:e1:2b:6e:dc:b4:83:82:02:6c:e7:11:02:01:54:
         7a:7f:9d:99:55:6d:15:77:77:0b:99:b8:b9:cc:9d:a1:71:0b:
         bf:7c:19:dc:42:d2:84:84:0f:8b:6d:0e:f8:bc:fb:b9:a1:19:
         9c:23:2c:ea:d5:79:cd:eb:d8:7d:fc:49:54:86:87:2e:3d:6e:
         80:d3:0e:5d:f0:3f:3a:df:ce:35:f1:2d:1c:ce:d3:58:bd:9e:
         b9:9b:e0:a2:cb:de:aa:91:07:66:03:78:30:ba:77:ab:20:a0:
         eb:eb:18:5d:7b:3c:4f:f0:c4:ac:a1:8c:bc:c4:c1:2d:ed:7a:
         ac:52:de:48:4a:bd:4c:3a:8b:da:0f:ec:74:6f:0b:a7:64:de:
         a0:b6:31:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 09:06:13 2023 by rpki-client on console-ams.rpki-client.org