Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/4b9731e4b652835b02913408f6ab4afe50caa298.roa
File:                     4b9731e4b652835b02913408f6ab4afe50caa298.roa (raw, json)
Hash identifier:          Hvxc35Lt2x8gHhkvzBahNyqs9nwgxtvxe79P4/YAgck=
Subject key identifier:   84:F9:7D:E7:07:3B:7F:9A:23:A8:CD:2C:16:31:1F:88:D5:F4:0E:81
Certificate issuer:       /CN=c29986287f685f9081ace4b62c221822c6408fc1
Certificate serial:       22B9F9
Authority key identifier: C4:4D:2B:96:0A:8F:CC:13:50:1C:C5:84:81:B1:76:47:60:F9:AA:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c29986287f685f9081ace4b62c221822c6408fc1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/4b9731e4b652835b02913408f6ab4afe50caa298.roa
Signing time:             Sat 12 Aug 2023 16:51:35 +0000
ROA not before:           Fri 11 Aug 2023 16:51:35 +0000
ROA not after:            Tue 12 Aug 2025 16:51:35 +0000
asID:                     263769
IP address blocks:        179.60.248.0/21 maxlen: 24
                          168.90.128.0/22 maxlen: 24
                          170.238.20.0/22 maxlen: 24
                          2803:7880::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275833 (0x22b9f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29986287f685f9081ace4b62c221822c6408fc1
        Validity
            Not Before: Aug 11 16:51:35 2023 GMT
            Not After : Aug 12 16:51:35 2025 GMT
        Subject: CN=4b9731e4b652835b02913408f6ab4afe50caa298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:47:48:93:b2:3f:7c:32:86:c5:3a:92:cc:
                    5f:8b:d7:96:ed:87:ab:81:a8:37:fa:93:41:f7:49:
                    eb:3b:a6:37:ab:cf:c9:16:1c:30:00:ef:bf:83:c4:
                    cc:da:75:42:61:3b:ff:c3:e3:2c:a9:a7:20:68:30:
                    58:99:2f:f9:66:48:c5:ff:df:16:ef:27:4f:5c:9e:
                    c8:41:ae:ad:3e:2e:ee:24:ac:49:73:d1:62:11:94:
                    86:dc:23:33:17:16:83:ca:60:b0:20:3c:ec:f5:59:
                    45:7e:1a:58:aa:49:47:5b:98:76:8a:1e:62:0a:7e:
                    d5:f4:96:02:16:43:b3:05:21:4b:8d:c3:0e:5a:8a:
                    52:7b:3d:77:be:51:7e:8e:ee:7f:9e:20:56:82:da:
                    9f:13:2a:14:c8:ee:fc:cf:90:1f:8a:fb:52:cb:55:
                    aa:a8:ab:dd:e5:11:f8:b8:09:12:5e:79:ca:f4:fb:
                    39:2b:39:e8:ac:81:e9:9f:88:a3:fe:c2:03:db:c2:
                    95:c4:19:51:1d:b8:68:00:ef:a8:44:6b:a7:ea:95:
                    cf:fb:e2:61:dc:87:71:cf:84:31:83:a5:20:3b:a0:
                    00:f9:13:85:07:e2:d4:d0:23:1a:76:c5:80:a8:9a:
                    ac:3d:e4:a0:e0:b6:9b:25:64:19:ec:e2:6f:a9:48:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F9:7D:E7:07:3B:7F:9A:23:A8:CD:2C:16:31:1F:88:D5:F4:0E:81
            X509v3 Authority Key Identifier:
                keyid:C4:4D:2B:96:0A:8F:CC:13:50:1C:C5:84:81:B1:76:47:60:F9:AA:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c29986287f685f9081ace4b62c221822c6408fc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/4b9731e4b652835b02913408f6ab4afe50caa298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/c29986287f685f9081ace4b62c221822c6408fc1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.128.0/22
                  170.238.20.0/22
                  179.60.248.0/21
                IPv6:
                  2803:7880::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:bc:d6:01:47:a0:90:a6:ac:aa:99:e8:71:67:0b:fb:e1:6a:
         92:29:5b:06:bb:ff:11:ff:ed:05:4a:6e:c6:c6:e1:c7:87:ad:
         63:50:d0:d8:81:b7:7a:51:f1:58:34:bb:8f:79:5b:ab:ef:b2:
         07:57:f2:76:cf:81:c6:77:5c:36:40:bb:38:13:ef:70:ff:2d:
         27:38:61:6b:b1:ca:62:0b:13:b7:f0:85:54:f2:68:c6:13:34:
         e2:a7:a2:75:06:16:56:df:f5:a4:35:ad:0d:20:09:29:b1:b3:
         11:8d:90:b4:00:2b:f6:e2:cb:35:c1:34:cd:1b:9f:c0:17:0f:
         71:f2:4f:ef:1f:af:75:ec:2b:bc:80:c4:7c:cb:ac:8d:df:1c:
         23:60:1a:6d:8d:a0:bc:88:f1:5d:c3:d0:8f:44:c0:2a:dc:be:
         81:7d:1a:79:e6:c9:f1:6e:85:da:3c:05:ad:42:b4:02:a3:8b:
         79:5a:db:fb:1f:b9:7f:79:08:15:3f:cd:d6:aa:e4:65:19:35:
         5d:e4:4c:ec:81:69:b9:52:ab:6c:68:c0:d8:f8:45:c0:ea:29:
         f9:9e:2a:2e:6b:6b:45:80:a8:b5:f6:67:e1:3d:e3:3e:e5:0d:
         ca:c5:b0:93:17:d9:ad:fd:29:27:6c:d8:fe:2e:49:85:24:e5:
         fe:f8:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 12 17:35:55 2023 by rpki-client on console-fra.rpki-client.org