Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/3bcac70e62ef5c2de43870ed0a80d5daff33ce1f.roa
File:                     3bcac70e62ef5c2de43870ed0a80d5daff33ce1f.roa (raw, json)
Hash identifier:          AHd1B8A1KO+qyHtuqsS9aKgel7HIDv6loBNzGaL2NlE=
Subject key identifier:   E7:AA:1B:44:B3:6F:CE:13:F8:EB:CA:62:D7:51:EB:C9:5C:7A:2B:76
Certificate issuer:       /CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
Certificate serial:       0DCA81
Authority key identifier: C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/3bcac70e62ef5c2de43870ed0a80d5daff33ce1f.roa
Signing time:             Wed 24 Mar 2021 14:41:04 +0000
ROA not before:           Wed 24 Mar 2021 14:41:04 +0000
ROA not after:            Tue 24 Mar 2026 14:41:04 +0000
asID:                     265724
IP address blocks:        45.6.224.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903809 (0xdca81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
        Validity
            Not Before: Mar 24 14:41:04 2021 GMT
            Not After : Mar 24 14:41:04 2026 GMT
        Subject: CN=3bcac70e62ef5c2de43870ed0a80d5daff33ce1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:96:b4:7f:3a:39:88:8b:a3:21:51:39:ae:2d:
                    8c:57:4d:11:e6:96:5b:65:3e:78:f1:48:e0:f3:22:
                    32:79:39:7c:3a:32:d7:ac:d3:b2:e4:33:2a:96:ee:
                    0b:3f:90:d8:58:04:2c:26:09:a7:7f:1f:df:bd:22:
                    35:6f:ae:9b:52:28:b3:a2:6a:2a:1d:a1:62:42:2a:
                    42:17:35:44:70:36:90:22:ef:58:b0:8c:8b:f1:b0:
                    ba:2a:b7:6f:bb:8c:05:6a:9d:b6:57:b2:ab:67:65:
                    b2:b9:ef:6f:ef:91:30:b6:72:1a:74:b9:bd:99:c7:
                    e2:06:f6:c8:7a:93:9b:9e:d3:e3:74:ba:65:36:f4:
                    5b:ec:1e:1f:60:a9:e5:7a:7c:b8:2d:19:98:99:9c:
                    45:08:18:64:df:3c:d7:bb:95:0b:8b:9b:6b:f0:6f:
                    13:09:90:77:8c:be:53:46:6c:05:98:f4:61:9e:ba:
                    7c:38:5b:40:5e:0e:0d:ab:1f:3d:8a:a0:d1:64:a3:
                    3e:0d:9e:ae:5d:24:62:9c:c9:3d:76:d7:96:5e:e9:
                    ee:14:76:b8:3a:17:48:cd:53:5c:47:23:ec:0e:bf:
                    69:f4:eb:a0:8d:66:90:78:99:47:3b:ac:c7:4f:51:
                    fd:2d:0c:70:27:fa:39:97:d9:d0:ab:0a:05:9c:be:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AA:1B:44:B3:6F:CE:13:F8:EB:CA:62:D7:51:EB:C9:5C:7A:2B:76
            X509v3 Authority Key Identifier:
                keyid:C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/3bcac70e62ef5c2de43870ed0a80d5daff33ce1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:c0:28:8d:05:9d:4b:99:cd:a5:ed:5c:2b:a2:34:02:9c:cd:
         85:c0:32:1c:56:b2:ad:9c:56:71:aa:1a:5c:d1:a8:60:b7:31:
         e8:b0:13:95:05:6a:39:62:14:10:c7:18:ad:a8:60:3b:07:f0:
         1a:29:94:d8:1b:06:92:e1:5f:04:72:30:78:f1:37:97:1e:f1:
         d1:06:a1:0f:ca:6c:d2:21:7d:51:c2:aa:69:64:cf:29:e7:7b:
         bd:e4:a1:2a:6b:5c:b6:25:b3:5e:c4:29:fd:14:37:df:99:34:
         6f:67:1c:cd:f5:be:81:eb:63:c7:6d:4c:cb:46:42:a6:18:35:
         32:8c:41:c7:ae:a6:5b:30:99:fc:e0:02:70:0a:06:88:15:4b:
         ac:f3:fe:e6:48:e8:b9:5e:de:98:c1:87:ae:e6:2f:d3:df:a1:
         b6:bc:bc:74:2c:6c:74:52:0e:33:63:b8:75:eb:04:27:24:ce:
         f5:88:ae:85:97:54:56:70:60:47:8e:2d:14:f6:4b:67:16:96:
         06:81:31:8f:63:a3:64:b2:5c:b8:89:d8:63:34:cd:35:2f:39:
         2d:71:69:9f:4f:05:2a:aa:35:06:89:0c:88:ab:61:d7:db:7f:
         33:45:06:cb:40:3c:a1:20:b7:ee:89:8f:0b:3e:75:05:4e:65:
         70:b7:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 14:16:54 2023 by rpki-client on console-fra.rpki-client.org