Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/03e21fdfb6669ead7fc6bec814377fc3dce63a53.roa
File:                     03e21fdfb6669ead7fc6bec814377fc3dce63a53.roa (raw, json)
Hash identifier:          uWNFFpg88VUy7w7/xUKvVnttWZmoRF3RRE4sTDL1ZAM=
Subject key identifier:   2E:24:FC:C3:4D:F1:47:FF:6E:6A:86:5D:4B:DE:1E:CF:05:42:6B:BA
Certificate issuer:       /CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
Certificate serial:       0DB682
Authority key identifier: C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/03e21fdfb6669ead7fc6bec814377fc3dce63a53.roa
Signing time:             Wed 24 Mar 2021 14:35:20 +0000
ROA not before:           Wed 24 Mar 2021 14:35:20 +0000
ROA not after:            Tue 24 Mar 2026 14:35:20 +0000
asID:                     262186
IP address blocks:        179.51.96.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898690 (0xdb682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
        Validity
            Not Before: Mar 24 14:35:20 2021 GMT
            Not After : Mar 24 14:35:20 2026 GMT
        Subject: CN=03e21fdfb6669ead7fc6bec814377fc3dce63a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:17:1e:0d:d9:30:09:be:f1:7b:04:b7:fd:17:
                    ed:2c:99:a3:e3:cc:04:6f:f0:6c:40:81:ec:5e:91:
                    32:f3:b9:b5:00:8f:5d:0b:14:13:0e:ae:71:c5:b6:
                    82:ab:fd:40:83:b9:55:bc:b5:7f:0f:90:64:11:42:
                    ef:08:44:d0:33:5e:54:2d:c4:b8:25:7b:00:7b:55:
                    c5:c5:72:de:7c:fe:67:59:53:9e:c1:22:51:1c:13:
                    51:aa:83:ee:64:6a:b0:44:87:91:c7:48:21:e8:99:
                    d1:c4:66:1d:16:0c:74:4b:71:0a:41:b0:c6:03:9c:
                    bd:7f:98:c4:0d:ac:5b:5d:b2:4d:13:1a:2f:e1:65:
                    9e:b8:91:12:06:85:9c:0d:e9:be:95:95:ce:36:0b:
                    4c:e2:d5:e5:58:b8:91:9e:a1:24:03:f6:4f:9d:2a:
                    b0:02:c5:54:10:0e:54:11:7e:d0:66:9b:0f:05:df:
                    71:95:74:da:51:89:f3:ae:0c:af:21:b2:91:f5:7a:
                    a9:46:c0:04:72:b2:19:da:3f:55:6f:9d:00:f5:e4:
                    ab:cd:ef:90:bd:3d:ab:e1:56:05:50:fc:94:99:3c:
                    80:b7:39:fc:f5:a1:2d:c5:bd:d7:4f:39:71:90:8c:
                    4d:e9:5a:11:67:70:cf:c4:4b:7b:1e:c3:93:12:f9:
                    0d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:24:FC:C3:4D:F1:47:FF:6E:6A:86:5D:4B:DE:1E:CF:05:42:6B:BA
            X509v3 Authority Key Identifier:
                keyid:C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/03e21fdfb6669ead7fc6bec814377fc3dce63a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:2e:80:6b:36:a7:42:96:0c:1e:bd:55:94:dc:b3:3d:1f:e6:
         5d:01:c7:e0:1b:7f:6a:d6:2c:32:54:c4:ea:d7:a3:56:4d:9d:
         96:86:9c:19:1a:02:22:5a:1d:16:16:91:af:7a:36:36:85:c7:
         41:3d:53:6a:82:05:8f:0b:c7:f8:c7:7d:03:d3:6f:36:3b:a6:
         29:36:47:15:22:68:67:4b:ad:96:b7:6a:4c:3c:8b:5b:ed:b0:
         94:3d:d6:7d:10:ef:43:3a:bc:35:d1:48:43:67:4c:46:fa:0c:
         04:89:ee:d0:23:ae:b6:30:d6:a6:36:11:9d:82:d5:87:ea:3f:
         65:07:81:d0:41:43:0b:1e:61:f9:4c:84:d7:5e:c7:f9:30:c5:
         44:c6:aa:73:f4:ec:2f:6c:7a:f6:4c:1c:17:9b:2f:61:00:26:
         a1:b0:0f:0a:41:74:41:70:07:58:11:6e:b1:86:54:96:5a:17:
         c4:03:0f:6b:8e:e4:b9:e7:a9:f5:57:49:0a:c5:e7:4b:58:7f:
         7c:c0:2a:3c:0c:09:87:a0:f1:79:29:75:ce:d1:0c:30:82:c3:
         38:f9:63:1c:10:69:f6:5e:49:ac:2c:41:c2:1a:90:17:4a:9d:
         92:0b:07:66:68:d7:e8:40:29:77:36:0a:cf:78:5a:b1:a3:1e:
         65:b9:67:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 18:35:45 2023 by rpki-client on console-ams.rpki-client.org