Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/597e0529b0c6ef58f1d662879b3c0f1476094092.roa
File:                     597e0529b0c6ef58f1d662879b3c0f1476094092.roa (raw, json)
Hash identifier:          HT7jILYWKgo5RHaDv563eQw22vQq1beHPXJfYfeJ124=
Subject key identifier:   8D:D7:EE:E8:29:76:64:E4:12:CF:DF:81:9F:E1:DD:D8:BE:A1:9F:CB
Certificate issuer:       /CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
Certificate serial:       0D84A2
Authority key identifier: 44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/597e0529b0c6ef58f1d662879b3c0f1476094092.roa
Signing time:             Wed 24 Mar 2021 22:51:57 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     265657
IP address blocks:        170.246.85.0/24 maxlen: 24
                          170.246.86.0/24 maxlen: 24
                          170.246.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885922 (0xd84a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=597e0529b0c6ef58f1d662879b3c0f1476094092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:1b:5e:5a:de:33:f3:5d:30:b0:5b:9a:65:
                    84:58:60:fa:0e:9f:b5:c9:47:d6:51:0c:d6:43:f1:
                    dc:bc:54:7a:dd:28:f6:fa:a5:be:54:bb:b0:d2:11:
                    f0:55:82:80:7d:a0:f6:1c:04:ec:3a:2c:65:52:44:
                    1d:f0:f5:84:f4:d9:8d:b2:e9:9e:eb:98:94:29:40:
                    16:50:34:8e:8d:86:19:28:c2:76:23:1c:48:5c:db:
                    22:61:f9:9d:30:5a:ac:69:a5:13:40:8b:bc:37:32:
                    cb:91:c0:de:65:41:14:ff:0c:21:58:44:71:46:28:
                    54:f7:0b:21:3f:b7:f3:5a:ef:f2:03:fb:f5:9a:ff:
                    55:06:ee:d9:4b:da:92:5a:21:67:5f:31:61:7a:9a:
                    ea:f6:b2:8d:80:b7:1e:13:b4:9f:03:1f:35:16:a1:
                    09:ae:4a:28:fc:eb:34:46:ad:47:c9:8b:ac:cd:23:
                    84:52:3f:8e:60:45:c6:01:02:7d:04:02:0f:be:5e:
                    dd:16:e2:7c:1c:0b:1d:28:a9:0a:6c:59:54:ad:e8:
                    bc:b4:eb:e1:8d:b0:e4:a3:af:be:89:6d:1c:4d:9e:
                    3c:31:5c:db:1e:b5:c6:78:ae:17:17:e4:88:88:9a:
                    c1:3e:43:04:36:a1:40:9a:eb:88:09:a3:e4:15:cd:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D7:EE:E8:29:76:64:E4:12:CF:DF:81:9F:E1:DD:D8:BE:A1:9F:CB
            X509v3 Authority Key Identifier:
                keyid:44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/597e0529b0c6ef58f1d662879b3c0f1476094092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.85.0-170.246.87.255

    Signature Algorithm: sha256WithRSAEncryption
         73:32:f1:7d:1c:7b:13:a7:77:fa:60:19:40:d8:d2:12:fa:42:
         58:19:39:de:c4:0b:3a:cc:c4:86:b2:c3:ab:e6:75:a6:77:c5:
         72:0a:b2:9f:89:f3:30:e6:da:6e:ad:07:50:36:af:c4:ef:e1:
         78:0e:12:be:bd:cb:3e:b3:ca:14:f5:fa:64:a9:2a:67:17:12:
         38:66:0e:1d:b0:27:07:f7:6b:af:4a:79:7b:91:69:2a:fa:5e:
         32:d6:06:99:5a:fd:bf:56:78:1c:d9:b8:94:25:30:01:63:50:
         15:1c:b3:cf:ba:2d:cc:de:f2:e8:56:2a:98:b4:41:a6:7b:41:
         e2:23:25:c9:98:d3:ab:18:98:ec:f0:10:57:42:17:74:fd:4a:
         48:12:c2:e2:97:7e:88:57:13:c0:e1:58:77:b1:d3:3a:d7:ce:
         7e:3a:6d:62:a2:b4:85:33:1b:ba:1b:77:6b:82:3c:d2:6b:12:
         c8:2c:4d:fd:45:bc:14:6a:01:ea:e6:55:5f:19:a6:bd:3c:b3:
         85:f4:35:47:58:d2:12:86:ec:10:11:3c:c1:f4:c8:34:cb:54:
         0e:55:18:f8:9f:18:37:e1:bc:03:7b:2d:ba:04:29:eb:27:ed:
         81:d4:06:10:21:56:d0:e5:e7:4f:a1:fc:7c:95:e3:bf:53:ca:
         98:6f:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:18 2023 by rpki-client on console-fra.rpki-client.org