Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/27b560c56c0712d2470b2c872bfda360c4cbc14b.roa
File:                     27b560c56c0712d2470b2c872bfda360c4cbc14b.roa (raw, json)
Hash identifier:          8t7b0DbvCB+H4t2N2xigEeVJK5ZLw1nar3qn8VcB+WQ=
Subject key identifier:   B9:08:17:19:04:B2:96:A2:6B:6F:AE:3F:3D:64:FC:72:50:26:57:10
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       265A6C
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/27b560c56c0712d2470b2c872bfda360c4cbc14b.roa
Signing time:             Sun 16 Apr 2023 21:12:23 +0000
ROA not before:           Sat 15 Apr 2023 21:11:49 +0000
ROA not after:            Wed 16 Apr 2025 21:11:49 +0000
asID:                     52436
IP address blocks:        181.10.236.0/23 maxlen: 24
                          181.13.56.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2513516 (0x265a6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 15 21:11:49 2023 GMT
            Not After : Apr 16 21:11:49 2025 GMT
        Subject: CN=27b560c56c0712d2470b2c872bfda360c4cbc14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:75:3f:ef:a2:e6:e4:5f:ae:f5:d9:bc:ff:28:
                    11:a8:9c:ed:f8:c3:1b:77:f8:4d:f1:02:9b:cc:f1:
                    f7:cd:c0:58:82:bf:9e:83:ac:83:18:92:4d:89:18:
                    c8:33:20:37:76:56:54:50:07:90:19:6f:86:c9:aa:
                    7b:57:07:d7:75:10:08:72:ad:1d:1b:4f:14:ba:be:
                    58:a0:25:08:b8:2a:b9:5a:13:2b:26:87:4a:b0:32:
                    e6:ab:5b:90:20:c4:71:8f:95:8b:df:d3:23:d9:84:
                    91:1e:c7:b7:f8:dd:7d:85:52:5c:13:de:80:0b:33:
                    d9:4a:56:d7:89:f7:ee:a7:0b:61:df:49:f8:c3:8c:
                    a2:85:f7:ec:a2:49:35:3b:58:aa:c3:9a:6f:50:42:
                    40:23:24:70:38:22:f8:7d:93:d9:a6:74:ff:a5:b0:
                    1d:cf:11:ac:ef:e1:4e:9a:a6:51:7f:ff:98:58:8f:
                    db:55:58:90:f3:37:c5:c2:6d:d6:22:8f:4c:ea:ee:
                    04:b6:3a:3e:13:77:42:c7:e5:6f:11:8b:d5:4d:ef:
                    cc:bc:05:0a:a8:86:db:a2:73:8f:cd:83:c7:23:56:
                    a0:5a:ab:7b:87:90:e4:5f:17:f5:45:a7:94:57:9d:
                    f8:05:18:ec:6e:3d:d8:23:03:52:2a:42:33:b6:2c:
                    9a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:08:17:19:04:B2:96:A2:6B:6F:AE:3F:3D:64:FC:72:50:26:57:10
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/27b560c56c0712d2470b2c872bfda360c4cbc14b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.10.236.0/23
                  181.13.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:47:5d:09:ed:e7:a2:f4:4b:1d:cc:38:c6:28:ca:7a:b6:30:
         7f:a6:ce:69:68:e2:29:0d:24:86:a9:d7:11:e7:c0:f1:f3:45:
         c2:1c:77:5e:c5:45:f9:f0:e8:92:7e:17:23:a4:7f:b0:c8:48:
         54:e3:2f:3d:ed:51:da:35:1a:78:a5:f3:b0:dd:20:f0:ef:af:
         97:1a:fe:ad:69:b9:f7:4e:97:4f:a6:70:9e:e8:f5:22:03:7d:
         e3:e2:49:58:ad:ef:17:2d:86:fc:62:26:cd:c6:bb:4b:6c:38:
         09:ba:db:01:77:70:3a:99:bd:41:af:13:a2:65:c9:e0:a5:f4:
         4d:61:46:d6:9e:58:dc:e2:f8:8d:62:84:64:d9:08:b6:98:8d:
         8a:45:06:2f:af:d5:28:37:12:7c:ab:ba:ac:7c:8f:2b:ae:96:
         2c:c2:a5:9d:44:ab:a8:cd:d9:97:df:90:ca:d7:67:d4:de:62:
         25:d0:ff:ef:eb:14:02:21:df:83:14:90:8f:55:f9:34:4e:64:
         57:83:7d:14:cf:1b:df:9e:78:dd:1d:6f:cc:7c:7f:6c:05:b8:
         8a:2a:8d:0c:ab:23:05:58:b2:d1:82:a6:fe:d4:00:6f:dc:55:
         f1:40:18:df:d4:ab:23:22:45:4c:97:f0:07:13:a2:ac:7f:e0:
         22:69:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org