Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/f616fdb5fcb0eca9e2b0398269c8342218c05304.roa
File:                     f616fdb5fcb0eca9e2b0398269c8342218c05304.roa (raw, json)
Hash identifier:          lSsQmmzWdtP8BY2cEAcZ3wZyw6erHGZN/GAGwlAaLMw=
Subject key identifier:   47:E6:6A:BD:68:28:49:06:78:A0:FB:7E:3B:28:D7:B5:E6:FD:0E:7E
Certificate issuer:       /CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
Certificate serial:       0DB595
Authority key identifier: C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/f616fdb5fcb0eca9e2b0398269c8342218c05304.roa
Signing time:             Wed 24 Mar 2021 14:35:20 +0000
ROA not before:           Wed 24 Mar 2021 14:35:20 +0000
ROA not after:            Tue 24 Mar 2026 14:35:20 +0000
asID:                     263210
IP address blocks:        179.51.96.0/19 maxlen: 24
                          181.225.80.0/20 maxlen: 24
                          2803:6700::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898453 (0xdb595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
        Validity
            Not Before: Mar 24 14:35:20 2021 GMT
            Not After : Mar 24 14:35:20 2026 GMT
        Subject: CN=f616fdb5fcb0eca9e2b0398269c8342218c05304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:48:4f:83:79:15:18:b5:7e:ff:28:df:fa:ac:
                    3e:c4:1e:2a:66:48:27:04:ba:3d:ae:ea:22:e5:02:
                    f3:55:a3:9f:d6:32:44:6f:00:39:14:cb:4c:42:21:
                    3f:8b:42:cf:fb:f3:67:88:d1:93:77:cd:62:94:d5:
                    3c:c1:5b:6c:88:67:44:28:3c:8f:01:0b:04:5b:3c:
                    d3:8a:be:30:31:00:66:fe:b5:b0:e0:53:af:e9:ee:
                    34:39:bc:28:31:ae:bf:64:e1:80:7f:f6:68:16:f8:
                    72:f0:04:a4:2f:83:32:3e:08:0f:ef:31:4c:73:ec:
                    7e:e7:77:ee:b2:be:63:a1:d5:a1:e4:25:10:8e:35:
                    03:60:27:41:02:b7:89:60:3a:e3:4c:d5:15:0d:5f:
                    09:b6:4d:b9:19:60:fd:f1:51:f7:d9:40:04:76:f8:
                    f5:bb:5d:08:7b:fc:4d:24:a5:9a:4f:35:78:fc:38:
                    28:f6:38:dd:42:cc:1e:7b:19:6c:1d:da:1e:c0:2c:
                    59:33:d0:59:04:be:b5:c2:2d:b0:2d:f4:c3:9e:13:
                    87:bb:56:da:db:d5:d6:bf:b9:f5:a1:ce:b8:87:cf:
                    05:3a:84:d1:63:21:3d:2d:5f:d9:59:c8:e3:8b:8e:
                    ff:bb:48:a4:49:ca:25:59:4c:bc:f9:fc:aa:ba:84:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E6:6A:BD:68:28:49:06:78:A0:FB:7E:3B:28:D7:B5:E6:FD:0E:7E
            X509v3 Authority Key Identifier:
                keyid:C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/f616fdb5fcb0eca9e2b0398269c8342218c05304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.96.0/19
                  181.225.80.0/20
                IPv6:
                  2803:6700::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:97:e5:17:5d:c4:5e:13:e0:cb:9a:84:13:4e:31:dd:57:ed:
         0f:ac:ad:ae:fd:6d:10:88:62:2b:20:1c:5d:9a:7f:e6:7e:8a:
         b5:70:af:50:31:ed:28:9e:bd:44:66:c5:3a:8a:4a:28:db:a9:
         17:b9:07:a6:cc:b9:95:aa:cb:3e:6f:1c:43:df:c7:8e:c0:12:
         19:4d:2a:4c:18:d3:d3:33:df:d3:da:c1:d0:fb:2d:4c:c9:1b:
         c7:a0:7a:69:98:27:57:4a:96:4b:f7:61:6b:45:18:8b:6d:5b:
         fb:a4:2f:86:59:32:7e:14:aa:8e:f0:bd:76:a7:06:96:8d:20:
         cb:56:67:52:99:6e:ba:7b:24:77:ce:4e:df:da:7d:0e:6f:4f:
         2a:55:95:5e:b5:d8:93:83:e0:fd:1c:a8:ab:39:85:97:b9:39:
         f6:8d:ef:c4:ec:83:79:6b:18:e6:dc:28:11:85:98:c5:a5:ac:
         de:d5:c7:f3:c4:2c:21:9d:25:88:b2:55:ad:8d:df:1a:c1:36:
         6c:76:1f:70:a2:1c:4f:6a:53:76:dc:a8:41:11:a0:ce:c6:ff:
         4a:0e:ba:27:69:1a:a2:4c:c6:0f:d9:eb:99:d5:63:39:36:b2:
         71:7c:c9:7f:f2:27:97:a3:76:93:78:c7:65:b3:c3:1d:1c:c6:
         b1:72:09:9a
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDDbWVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYz
YjlhNGUwNmZjYmQwY2E5ZGZjNTE4YTExNGI4YWRhMTQwZmM3MWIwHhcNMjEwMzI0
MTQzNTIwWhcNMjYwMzI0MTQzNTIwWjAzMTEwLwYDVQQDEyhmNjE2ZmRiNWZjYjBl
Y2E5ZTJiMDM5ODI2OWM4MzQyMjE4YzA1MzA0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnUhPg3kVGLV+/yjf+qw+xB4qZkgnBLo9ruoi5QLzVaOf1jJE
bwA5FMtMQiE/i0LP+/NniNGTd81ilNU8wVtsiGdEKDyPAQsEWzzTir4wMQBm/rWw
4FOv6e40ObwoMa6/ZOGAf/ZoFvhy8ASkL4MyPggP7zFMc+x+53fusr5jodWh5CUQ
jjUDYCdBAreJYDrjTNUVDV8Jtk25GWD98VH32UAEdvj1u10Ie/xNJKWaTzV4/Dgo
9jjdQsweexlsHdoewCxZM9BZBL61wi2wLfTDnhOHu1ba29XWv7n1oc64h88FOoTR
YyE9LV/ZWcjji47/u0ikScolWUy8+fyquoQKNQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFEfmar1oKEkGeKD7fjso17Xm/Q5+MB8GA1UdIwQYMBaAFMYESTv/wweJIdNe
BkGyUwxHfQz4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjNiOWE0
ZTA2ZmNiZDBjYTlkZmM1MThhMTE0YjhhZGExNDBmYzcxYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmI0MTI2MjUtMzNjMC00ZGZjLTg5YWEtYzY0Nzlh
ZGU5MTNiL2Y2MTZmZGI1ZmNiMGVjYTllMmIwMzk4MjY5YzgzNDIyMThjMDUzMDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YjQxMjYyNS0zM2MwLTRkZmMtODlhYS1jNjQ3
OWFkZTkxM2IvZjNiOWE0ZTA2ZmNiZDBjYTlkZmM1MThhMTE0YjhhZGExNDBmYzcx
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEBbMzYAMEBLXhUDANBAIAAjAHAwUAKANnADANBgkqhkiG9w0B
AQsFAAOCAQEAHJflF13EXhPgy5qEE04x3VftD6ytrv1tEIhiKyAcXZp/5n6KtXCv
UDHtKJ69RGbFOopKKNupF7kHpsy5larLPm8cQ9/HjsASGU0qTBjT0zPf09rB0Pst
TMkbx6B6aZgnV0qWS/dha0UYi21b+6QvhlkyfhSqjvC9dqcGlo0gy1ZnUpluunsk
d85O39p9Dm9PKlWVXrXYk4Pg/RyoqzmFl7k59o3vxOyDeWsY5twoEYWYxaWs3tXH
88QsIZ0liLJVrY3fGsE2bHYfcKIcT2pTdtyoQRGgzsb/Sg66J2kaokzGD9nrmdVj
OTaycXzJf/Inl6N2k3jHZbPDHRzGsXIJmg==
-----END CERTIFICATE-----
Generated at Wed Aug 2 18:42:36 2023 by rpki-client on console-fra.rpki-client.org