Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/159d4546501bd6b45fd63795d95ba9b27e21677c.roa
File:                     159d4546501bd6b45fd63795d95ba9b27e21677c.roa (raw, json)
Hash identifier:          qjlzfOxhsg/GVswz/b90+7VMsoxzOpgbB+4W335bgnk=
Subject key identifier:   45:C8:79:73:12:BB:9D:A0:70:0F:27:23:3A:1E:CC:D0:8C:A1:74:1B
Certificate issuer:       /CN=138405134343f63286b605fe9165839fd04a4252
Certificate serial:       105140
Authority key identifier: 13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/159d4546501bd6b45fd63795d95ba9b27e21677c.roa
Signing time:             Wed 21 Jul 2021 15:04:15 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27947
IP address blocks:        192.188.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1069376 (0x105140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138405134343f63286b605fe9165839fd04a4252
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=159d4546501bd6b45fd63795d95ba9b27e21677c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:45:d9:c4:a5:fb:c3:b9:d4:1a:fc:4f:22:e0:
                    48:18:bc:4d:79:9a:36:5b:79:66:56:b5:46:b8:ef:
                    68:6b:b4:4e:7d:9e:6f:44:96:5e:90:ce:d7:80:4a:
                    f4:84:18:d4:03:bb:c0:b5:ab:22:d4:14:32:92:81:
                    be:cc:87:76:c4:a3:f0:46:5d:1c:e4:53:ab:36:ea:
                    78:c1:d4:73:63:77:82:55:f2:26:dc:8d:43:c6:fb:
                    8a:19:be:fc:86:d1:c3:1e:b6:a3:83:91:c8:e1:34:
                    7d:7a:bf:b4:ce:fd:86:03:6f:9a:28:dc:11:47:24:
                    e8:37:5f:74:9a:09:6a:25:38:47:ac:7e:e3:ad:af:
                    24:c6:07:12:fa:1c:1a:29:85:6d:69:bf:36:12:4f:
                    c7:fe:ba:82:8d:0b:e5:5b:7a:d6:78:35:01:a8:b2:
                    e7:04:d4:79:cf:1b:49:a3:a1:73:b3:6c:6a:ba:88:
                    d9:d4:0d:47:d2:e1:fb:6a:39:2a:4f:a1:dd:09:b9:
                    5d:d1:38:5f:87:e5:bc:97:d1:17:cf:c4:8d:56:1d:
                    dd:60:01:99:ff:c6:0a:94:bf:72:6e:3c:e0:b0:42:
                    71:62:1d:22:8b:f1:65:f6:bf:60:f0:05:3d:4f:31:
                    63:64:77:e8:7c:5b:0e:25:65:65:05:61:b4:6a:38:
                    45:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C8:79:73:12:BB:9D:A0:70:0F:27:23:3A:1E:CC:D0:8C:A1:74:1B
            X509v3 Authority Key Identifier:
                keyid:13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/159d4546501bd6b45fd63795d95ba9b27e21677c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:b8:53:ce:c5:bd:e1:41:86:e1:c1:bb:7d:0e:81:56:83:07:
         db:5b:dc:69:1b:21:81:93:0c:32:68:9c:83:77:c4:fb:fc:a0:
         86:94:50:9f:93:fd:21:88:c5:07:27:f7:cb:be:26:ec:c9:2c:
         89:6a:7c:4b:d5:de:f2:20:f6:75:e7:3d:62:9c:c4:9d:39:18:
         52:65:d9:e6:8a:1e:95:03:4f:0c:90:c6:56:ac:20:4a:c9:9d:
         81:be:82:d4:33:75:3f:62:12:f0:56:af:5e:0e:70:27:f7:87:
         fc:09:ad:7e:95:0e:b4:b5:2e:77:8b:ff:19:99:ef:69:84:57:
         b9:60:09:71:3e:6a:8a:0c:be:b6:80:cd:b1:80:92:e7:bb:41:
         54:d4:c8:9e:80:a3:25:b6:00:9f:62:e9:d4:bb:46:6f:01:96:
         62:54:e3:d4:66:10:f6:9e:86:e2:ce:44:0b:e9:54:fb:af:49:
         d9:d2:bc:7a:fd:71:4b:4f:cd:5d:23:a0:d7:73:47:86:06:bc:
         4c:90:fd:10:8f:de:72:7e:2c:8a:5f:46:28:8d:a4:61:62:86:
         d6:af:d2:77:24:95:4a:6b:a7:24:99:31:7a:66:8d:cc:96:25:
         04:76:81:8c:7b:9b:59:57:2d:c1:df:a9:a0:d4:19:0e:62:08:
         6d:52:1d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 18:18:59 2023 by rpki-client on console-fra.rpki-client.org