Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/67565f7019effb43fffc9afc6b7155d4a69e8202.roa
File:                     67565f7019effb43fffc9afc6b7155d4a69e8202.roa (raw, json)
Hash identifier:          p2DJ2KklD/quOiDN49H2KDcGJvfJ1LqhbCV+qTbBHRo=
Subject key identifier:   28:89:EB:7B:7E:FC:5C:DA:1E:3B:05:C5:3C:0E:6D:4A:B3:F4:F4:0C
Certificate issuer:       /CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
Certificate serial:       196937
Authority key identifier: 57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/67565f7019effb43fffc9afc6b7155d4a69e8202.roa
Signing time:             Tue 26 Jul 2022 23:00:38 +0000
ROA not before:           Thu 03 Feb 2022 03:00:00 +0000
ROA not after:            Tue 03 Feb 2026 03:00:00 +0000
asID:                     272056
IP address blocks:        192.141.167.0/24 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665335 (0x196937)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
        Validity
            Not Before: Feb  3 03:00:00 2022 GMT
            Not After : Feb  3 03:00:00 2026 GMT
        Subject: CN=67565f7019effb43fffc9afc6b7155d4a69e8202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:56:5c:e6:b8:6f:84:c1:fe:28:f6:84:41:10:
                    12:5a:f6:46:27:c2:99:49:c2:c6:70:20:df:03:03:
                    39:25:32:28:4a:66:8d:ef:9f:4e:be:21:70:03:6f:
                    1a:48:d4:a5:d0:f7:28:24:c7:7d:a4:57:9e:9f:90:
                    4c:8f:87:92:98:98:47:56:ae:be:79:f7:cf:0c:e7:
                    07:25:da:32:0a:63:bd:c2:85:64:ee:cc:60:e4:c5:
                    92:30:1f:12:3e:ec:fb:19:14:f4:3c:04:64:83:ce:
                    8d:ac:83:08:aa:4e:49:ed:ae:ee:42:f2:c9:c8:94:
                    ac:a6:d3:b8:e4:36:8f:5c:ae:1a:fb:f2:e6:28:2c:
                    a7:b7:44:e7:72:82:b8:4e:7f:21:74:85:4b:88:02:
                    28:a2:57:3b:2d:66:03:f6:de:73:1a:a1:02:22:f7:
                    30:10:46:11:1d:24:d5:d8:79:c4:f9:a6:ce:43:fd:
                    a3:93:c7:9e:1d:c9:8d:db:93:3b:ce:68:79:43:95:
                    f9:d1:fa:6f:06:60:b2:6a:cd:55:41:28:39:b1:a5:
                    53:86:a8:35:af:f9:39:8c:11:fa:5f:17:6d:69:ce:
                    6f:df:35:a7:61:14:67:8d:4a:2f:2d:ae:23:06:ee:
                    c9:1e:84:d7:83:8d:d9:4b:cd:12:1d:3e:b2:2d:30:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:89:EB:7B:7E:FC:5C:DA:1E:3B:05:C5:3C:0E:6D:4A:B3:F4:F4:0C
            X509v3 Authority Key Identifier:
                keyid:57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/67565f7019effb43fffc9afc6b7155d4a69e8202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/9e7510573b4e2f6f118e04dc9188c5f3ef257302.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:94:42:31:88:bf:fc:d4:13:22:c2:f0:67:88:95:b0:1e:54:
         3b:87:5d:2d:27:a8:3d:31:4e:32:44:dd:36:7c:2a:79:e1:37:
         a5:12:01:37:8b:c4:d8:b9:62:08:5c:52:31:94:5c:19:94:0f:
         ba:ec:72:6b:50:ef:37:60:4e:03:b2:ae:ec:e0:53:cf:36:13:
         ea:9f:02:14:84:e8:5f:62:3c:a8:c6:53:a6:8c:d3:2a:f3:d5:
         38:be:2b:d4:98:7a:1d:a7:4a:5b:0b:8a:02:04:89:d8:d9:0b:
         24:52:fd:95:ff:44:bd:da:fa:ec:17:fb:f8:c5:47:8f:37:b7:
         dc:e4:ba:4f:1a:ff:84:70:da:44:da:37:d8:83:21:f8:55:54:
         6a:c1:20:6c:72:fe:56:ec:07:80:c1:62:85:40:ef:13:8e:71:
         86:28:94:e2:5b:e7:33:95:c4:89:bb:88:2a:a7:ff:ee:e8:9d:
         8f:7d:94:04:36:5d:1c:ce:ca:9d:5b:60:81:98:ef:e2:43:b7:
         d5:f4:7c:7c:7f:f9:23:7c:cd:65:fa:03:d3:ed:b8:1f:0b:36:
         8f:21:ac:cb:66:06:d1:71:b8:19:4f:d4:11:70:97:ea:63:fe:
         26:28:3a:8a:96:4e:09:ca:86:4a:04:5d:35:4f:d2:4d:c9:8b:
         6d:6e:ed:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org