Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/32b461bf8bbf37e2245980bc5b45e2cd0ccdec14.roa
File:                     32b461bf8bbf37e2245980bc5b45e2cd0ccdec14.roa (raw, json)
Hash identifier:          vgoeTm9PuX5Hgx9zdBm/f69OyzklEULL/HihSW9ESd0=
Subject key identifier:   CE:A1:FD:91:53:C4:13:5F:DC:C5:04:16:D0:CA:5B:CF:C4:36:11:5F
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       1744C4
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/32b461bf8bbf37e2245980bc5b45e2cd0ccdec14.roa
Signing time:             Sun 20 Mar 2022 22:04:07 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28002
IP address blocks:        45.6.248.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1524932 (0x1744c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=32b461bf8bbf37e2245980bc5b45e2cd0ccdec14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:df:7b:08:28:c3:22:5f:bd:a0:b7:82:60:
                    85:a2:97:25:63:44:0d:33:58:26:48:fa:db:d0:21:
                    ee:c9:a9:47:c5:31:68:3c:66:da:9d:96:6d:3e:7e:
                    d7:97:61:50:42:e5:d2:bf:08:a4:0e:1c:03:25:2f:
                    eb:05:20:eb:59:97:79:b3:5c:fd:fc:8b:e4:92:a5:
                    fc:5e:1d:f5:5e:53:96:90:90:d3:1e:1e:db:62:52:
                    19:90:05:e9:68:c2:1b:b9:d0:be:77:21:9c:d9:a1:
                    a2:59:e2:e2:84:54:7a:3b:b5:53:b2:01:07:b8:97:
                    5e:d7:16:f1:3b:3b:1c:d7:a9:5c:5b:d3:1c:46:bc:
                    fa:99:07:84:c9:25:5b:2b:d9:74:16:24:99:0d:8f:
                    1f:6f:7e:84:14:2d:da:eb:3a:fc:fd:17:27:83:5d:
                    fd:1f:22:3b:84:32:20:68:bb:f6:95:0d:34:82:1c:
                    49:e9:10:22:29:bb:01:1f:6b:57:8c:12:ec:8a:b6:
                    dd:28:6c:4c:87:36:6e:d5:43:e8:8e:d3:e4:09:eb:
                    98:16:40:5e:35:94:6c:00:d9:92:a0:fe:5d:2e:b2:
                    21:f9:d6:0c:4e:9b:95:bd:8b:e0:15:a7:d8:a7:2a:
                    f9:5c:32:ca:4b:a6:ce:32:49:c1:b1:50:51:e0:11:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A1:FD:91:53:C4:13:5F:DC:C5:04:16:D0:CA:5B:CF:C4:36:11:5F
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/32b461bf8bbf37e2245980bc5b45e2cd0ccdec14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:f1:c1:11:c5:ed:ff:28:53:d9:93:01:25:03:76:78:65:3c:
         89:b4:ec:1d:3a:08:e5:ba:f9:15:14:58:80:63:c1:0f:e7:bc:
         02:bc:56:6a:f4:66:ea:f6:59:76:0a:79:79:ca:8b:4d:0f:b2:
         38:d7:f1:81:7e:19:cb:10:2b:33:1d:ce:49:3d:03:e9:46:4e:
         cc:40:be:9b:7c:b0:bf:10:c9:18:e3:bf:6e:5d:67:8f:38:e8:
         e4:ed:fc:6f:a4:4c:94:49:41:17:37:a3:82:bf:76:ae:b6:be:
         0a:ee:b0:7a:dc:d1:f5:22:8a:8c:55:cf:ee:dd:87:a9:55:bb:
         2f:7c:bf:bc:6c:6d:5d:c8:e9:a6:8f:85:c4:e3:05:2a:b8:c5:
         7b:11:62:e7:d9:36:1a:97:98:43:43:d3:79:95:4f:72:ba:1c:
         bb:57:2a:c9:b2:d8:c1:93:90:9b:38:c6:bc:1e:9a:32:de:43:
         95:f7:39:13:f8:46:63:4d:87:f3:a5:3e:a2:04:dc:d2:ee:1a:
         ef:6f:d6:0d:ed:88:9d:d4:0d:24:b2:27:4b:20:29:63:91:be:
         b3:72:1e:3d:6b:bb:26:15:c1:53:fb:7b:e1:7b:6c:61:ed:d3:
         2c:5c:62:1c:0c:40:9f:f9:b9:67:ba:67:c1:21:8a:7c:d0:43:
         0e:a9:34:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org