Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/7ab4554e394d4203ce087d8b9fe803c74c6a8718.roa
File:                     7ab4554e394d4203ce087d8b9fe803c74c6a8718.roa (raw, json)
Hash identifier:          4BCcHwbT94O3c0RF8quvCK2jwiQaOlTANu7iX6dNNDw=
Subject key identifier:   79:40:07:F1:BD:22:14:FF:73:55:64:E7:EB:75:0B:74:DA:33:3E:9E
Certificate issuer:       /CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
Certificate serial:       0C9F31
Authority key identifier: EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/7ab4554e394d4203ce087d8b9fe803c74c6a8718.roa
Signing time:             Sat 10 Apr 2021 04:31:24 +0000
ROA not before:           Sat 10 Apr 2021 03:00:00 +0000
ROA not after:            Mon 10 Apr 2023 03:00:00 +0000
asID:                     265675
IP address blocks:        45.171.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827185 (0xc9f31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
        Validity
            Not Before: Apr 10 03:00:00 2021 GMT
            Not After : Apr 10 03:00:00 2023 GMT
        Subject: CN=7ab4554e394d4203ce087d8b9fe803c74c6a8718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:ca:38:fa:9b:57:cc:db:30:92:fd:cf:a9:
                    95:5a:2d:37:cf:e9:70:da:7a:a0:dc:21:b0:c7:22:
                    1f:24:35:50:d2:a0:21:68:b3:c1:08:c8:49:c3:43:
                    13:d5:c0:7a:cd:81:88:4f:0f:bb:87:65:58:6a:4f:
                    a8:56:19:4e:91:9e:14:d7:b6:f0:a2:b6:d3:4c:03:
                    83:b3:a5:9f:54:6b:a7:70:2b:ed:39:18:1a:d3:99:
                    a4:f1:04:1d:fd:cf:20:2c:fd:9d:77:46:d9:91:ce:
                    21:37:13:d3:a0:fb:2f:9c:2e:17:4e:1e:06:31:0a:
                    8b:d4:af:63:36:93:f8:ab:21:c7:87:57:c0:45:b2:
                    d3:94:c8:3a:73:28:d3:a9:09:41:72:c7:c8:5a:8b:
                    9a:1f:06:e5:51:05:95:1c:43:90:cb:52:a3:41:fe:
                    0d:a0:27:07:9d:59:09:59:a7:7c:2d:1d:9f:1d:ef:
                    30:c1:92:62:30:36:4e:ba:95:24:95:02:f8:21:69:
                    27:45:46:42:2d:ec:8d:f1:c5:b7:7b:82:51:71:92:
                    6e:79:81:8c:7c:58:6b:05:9d:40:5d:20:03:0a:e6:
                    74:f9:8d:d8:b5:ee:90:4c:4c:80:04:fb:f3:47:e4:
                    a7:a9:9d:71:f0:d2:c6:42:ed:18:d9:43:dc:5f:b2:
                    b7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:40:07:F1:BD:22:14:FF:73:55:64:E7:EB:75:0B:74:DA:33:3E:9E
            X509v3 Authority Key Identifier:
                keyid:EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/7ab4554e394d4203ce087d8b9fe803c74c6a8718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:8a:6a:e9:74:fe:6f:2f:02:e2:aa:44:36:35:cf:61:ee:b0:
         f4:96:e8:7f:29:91:3d:13:ff:72:c9:ae:e4:27:82:c3:84:56:
         91:6f:35:f1:11:ec:78:2d:b3:89:60:e7:b6:df:1b:24:e9:4f:
         f6:4e:85:a6:31:48:ca:a9:02:86:72:b3:c4:99:62:0a:25:60:
         91:94:3f:2a:19:53:24:3c:c0:4a:47:bc:0b:cb:ee:40:5b:1a:
         ba:17:54:36:85:5b:5a:12:0b:43:b3:1a:fd:bb:b3:ca:f8:13:
         8a:29:89:3f:12:a0:99:c0:37:78:d3:44:b4:8a:10:01:66:11:
         6e:c9:01:10:cd:20:7e:8c:dd:88:45:a9:35:cb:ed:e4:8d:ba:
         93:d8:d9:ab:56:b5:3e:e2:07:5d:c2:d0:b3:b5:17:8f:4c:75:
         c9:cf:ed:7b:2d:c5:a4:34:9e:29:95:3b:33:51:1f:63:85:72:
         45:28:6e:8a:85:f4:eb:9e:65:1a:50:ee:ae:c5:81:b7:5a:62:
         04:8a:34:b8:e5:fe:77:bd:f9:9b:9d:28:e1:f7:94:71:16:3b:
         0d:66:4a:fa:84:65:ed:59:4d:2b:44:e5:93:e9:ac:27:47:6f:
         70:80:ac:e6:3a:4b:e8:47:67:d1:23:34:e0:16:f9:d9:01:60:
         6d:89:32:d9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDJ8xMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI4
NDNjZTc0YmIzOGYzZjJmYzdjOTM2YWQwNjczZmE1MTdlN2IyN2MwHhcNMjEwNDEw
MDMwMDAwWhcNMjMwNDEwMDMwMDAwWjAzMTEwLwYDVQQDEyg3YWI0NTU0ZTM5NGQ0
MjAzY2UwODdkOGI5ZmU4MDNjNzRjNmE4NzE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz8bKOPqbV8zbMJL9z6mVWi03z+lw2nqg3CGwxyIfJDVQ0qAh
aLPBCMhJw0MT1cB6zYGITw+7h2VYak+oVhlOkZ4U17bworbTTAODs6WfVGuncCvt
ORga05mk8QQd/c8gLP2dd0bZkc4hNxPToPsvnC4XTh4GMQqL1K9jNpP4qyHHh1fA
RbLTlMg6cyjTqQlBcsfIWouaHwblUQWVHEOQy1KjQf4NoCcHnVkJWad8LR2fHe8w
wZJiMDZOupUklQL4IWknRUZCLeyN8cW3e4JRcZJueYGMfFhrBZ1AXSADCuZ0+Y3Y
te6QTEyABPvzR+SnqZ1x8NLGQu0Y2UPcX7K3nQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHlAB/G9IhT/c1Vk5+t1C3TaMz6eMB8GA1UdIwQYMBaAFOtcOeOFAQ21kFU7
VFWiqOE18uY9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjg0M2Nl
NzRiYjM4ZjNmMmZjN2M5MzZhZDA2NzNmYTUxN2U3YjI3Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjFhMzI2ZWQtZWVlNC00NmQzLTgwMjktNWJlZDJk
ODYyNmQxLzdhYjQ1NTRlMzk0ZDQyMDNjZTA4N2Q4YjlmZTgwM2M3NGM2YTg3MTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MWEzMjZlZC1lZWU0LTQ2ZDMtODAyOS01YmVk
MmQ4NjI2ZDEvYjg0M2NlNzRiYjM4ZjNmMmZjN2M5MzZhZDA2NzNmYTUxN2U3YjI3
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2rMTANBgkqhkiG9w0BAQsFAAOCAQEAfYpq6XT+by8C4qpE
NjXPYe6w9JbofymRPRP/csmu5CeCw4RWkW818RHseC2ziWDntt8bJOlP9k6FpjFI
yqkChnKzxJliCiVgkZQ/KhlTJDzASke8C8vuQFsauhdUNoVbWhILQ7Ma/buzyvgT
iimJPxKgmcA3eNNEtIoQAWYRbskBEM0gfozdiEWpNcvt5I26k9jZq1a1PuIHXcLQ
s7UXj0x1yc/tey3FpDSeKZU7M1EfY4VyRShuioX0655lGlDursWBt1piBIo0uOX+
d735m50o4feUcRY7DWZK+oRl7VlNK0Tlk+msJ0dvcICs5jpL6Edn0SM04Bb52QFg
bYky2Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org