Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/8cf4d84e986cc6d1e0cce5da70474e97c5cbe468.roa
File:                     8cf4d84e986cc6d1e0cce5da70474e97c5cbe468.roa (raw, json)
Hash identifier:          S3R0vu0Pi0m30h5UM7yi5ZDUZMUyoN13DTVTJa9v1KY=
Subject key identifier:   33:F1:1E:4A:64:12:1E:3E:35:66:F3:EA:FA:62:32:FD:65:4B:F6:0A
Certificate issuer:       /CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
Certificate serial:       0C9A39
Authority key identifier: EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/8cf4d84e986cc6d1e0cce5da70474e97c5cbe468.roa
Signing time:             Sat 10 Apr 2021 04:30:53 +0000
ROA not before:           Sat 10 Apr 2021 03:00:00 +0000
ROA not after:            Mon 10 Apr 2023 03:00:00 +0000
asID:                     265675
IP address blocks:        45.171.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825913 (0xc9a39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
        Validity
            Not Before: Apr 10 03:00:00 2021 GMT
            Not After : Apr 10 03:00:00 2023 GMT
        Subject: CN=8cf4d84e986cc6d1e0cce5da70474e97c5cbe468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f0:a2:29:3b:66:de:78:3f:f8:dd:a4:c4:16:
                    fe:d4:41:82:4d:35:40:51:85:7a:95:cc:a3:b0:a6:
                    7d:06:07:59:55:64:fa:45:12:b1:c1:74:fc:23:de:
                    56:65:1a:12:fe:a2:a3:03:97:76:b3:e3:95:6e:66:
                    31:df:90:e1:c9:be:8f:aa:9a:85:07:57:a8:6d:a3:
                    92:a4:c0:b9:a1:c8:f7:5a:73:88:54:7e:65:4d:df:
                    66:89:26:d0:73:b6:5b:1d:bb:af:51:4b:f2:ad:39:
                    d5:d1:3f:9f:46:24:7b:55:2c:e9:0f:41:79:69:39:
                    0e:e6:29:81:33:25:d0:f1:05:13:61:f1:ae:c7:9a:
                    58:2c:c9:22:71:f5:d7:37:53:28:88:87:a6:d2:2d:
                    c4:75:e9:53:93:2d:27:8b:7a:50:34:33:f2:1f:45:
                    de:c6:ba:48:ec:c2:4a:cb:32:f6:ac:9c:20:80:31:
                    af:03:6a:ee:35:5f:e6:4a:08:b1:75:ab:f0:68:6f:
                    1c:e0:b0:e2:b0:41:ec:4d:a4:b1:58:1f:70:34:b3:
                    13:c3:50:e1:34:d1:9a:5c:af:f8:bc:4c:a6:b4:fc:
                    5d:7e:8d:a7:a0:d6:51:71:62:4a:5c:f1:a1:d9:07:
                    e4:a7:39:81:a3:e2:34:4b:29:f3:06:60:2d:0b:48:
                    c7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F1:1E:4A:64:12:1E:3E:35:66:F3:EA:FA:62:32:FD:65:4B:F6:0A
            X509v3 Authority Key Identifier:
                keyid:EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/8cf4d84e986cc6d1e0cce5da70474e97c5cbe468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:ca:71:13:32:3b:49:4c:2d:6c:02:3d:ad:c8:3b:ff:4a:3d:
         08:12:73:f1:fd:7f:27:94:d4:13:75:36:75:e1:09:e2:66:e0:
         f7:19:04:27:90:d9:af:fe:43:de:98:7a:d9:9e:cc:94:6b:d9:
         4c:0b:e3:65:2f:dd:4e:0f:de:0b:48:dc:41:94:65:2b:95:62:
         9d:39:09:fc:8a:84:b9:34:77:06:4f:09:4b:ab:c4:68:b7:cc:
         65:ed:b5:43:83:db:fc:97:b6:d4:ef:1e:46:00:68:c2:88:00:
         28:85:1c:c2:1c:69:3d:81:86:22:e6:4b:9b:c4:a1:f4:a8:4d:
         d8:58:7f:16:08:ce:13:1e:a1:2b:1b:64:be:b9:ae:08:2b:65:
         c3:33:20:a1:33:49:14:61:21:4d:d9:04:fb:93:14:29:ed:6b:
         75:8f:d9:dd:90:ec:8a:8b:c8:cf:19:b0:d3:0f:e3:c9:8e:e2:
         3f:53:c5:29:25:d2:b1:95:f9:6d:06:1b:61:43:39:08:6e:69:
         ce:95:79:b5:46:80:2c:34:90:67:5a:06:ea:99:bb:22:3e:83:
         32:48:71:6f:94:92:1b:03:86:7f:71:e5:3c:35:da:61:ff:cc:
         a9:f7:1e:86:73:8f:fa:8f:19:af:dc:2b:b3:8f:96:25:d0:b9:
         db:66:7c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org