Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/797c21b0-a0c4-448d-84a6-35f179b73e46/b84eac0f133acdbde2898417c6f47ac37c093218.roa
File:                     b84eac0f133acdbde2898417c6f47ac37c093218.roa (raw, json)
Hash identifier:          06GWaX4pFCAKD/KaFKud1XKKS2FZLVyefvlklvKUNPQ=
Subject key identifier:   A6:FD:69:4B:AB:D4:40:95:14:7A:CE:31:A4:41:E4:86:2F:C9:44:66
Certificate issuer:       /CN=4445cb9beea798f0fcde4339a7ff23524d49bf44
Certificate serial:       01F8
Authority key identifier: 12:C5:1C:F8:D8:09:FF:70:36:76:21:8F:19:93:0F:62:AC:25:BA:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4445cb9beea798f0fcde4339a7ff23524d49bf44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/797c21b0-a0c4-448d-84a6-35f179b73e46/b84eac0f133acdbde2898417c6f47ac37c093218.roa
Signing time:             Tue 06 Jul 2021 19:14:15 +0000
ROA not before:           Tue 06 Jul 2021 03:00:00 +0000
ROA not after:            Thu 06 Jul 2023 03:00:00 +0000
asID:                     64108
IP address blocks:        45.226.168.0/22 maxlen: 24
                          45.226.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4445cb9beea798f0fcde4339a7ff23524d49bf44
        Validity
            Not Before: Jul  6 03:00:00 2021 GMT
            Not After : Jul  6 03:00:00 2023 GMT
        Subject: CN=b84eac0f133acdbde2898417c6f47ac37c093218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:a1:ee:4a:2d:be:32:98:0e:57:6d:bc:55:
                    cd:a2:dc:9a:32:22:a3:10:ad:4c:69:b7:fe:ba:e7:
                    6d:8f:ef:04:21:36:1a:6c:e6:27:4a:2c:7e:e3:9c:
                    9d:e6:de:3a:d5:f3:ce:3f:a7:95:3f:dc:5b:7f:98:
                    de:13:05:a6:cd:fd:11:07:97:f8:f0:0e:73:e5:c9:
                    85:94:00:d6:88:55:f2:2f:2a:34:5e:11:5d:5a:e0:
                    32:de:64:df:5e:94:03:19:85:35:15:e8:2c:ae:b8:
                    b7:b2:57:4b:1e:ff:42:c8:34:2f:9e:5b:a3:52:49:
                    22:95:12:86:05:ac:ed:04:c7:90:ab:96:ad:47:86:
                    f3:12:23:80:b0:1f:e3:c9:3e:ec:6e:0c:a2:25:fa:
                    fc:ad:ec:9c:1b:fd:86:52:db:3d:ee:65:b2:0c:ff:
                    54:a4:fe:44:14:d0:9e:53:51:92:2b:f8:b6:dd:ab:
                    eb:b6:6a:e2:c5:fa:22:fc:7d:30:e0:58:c5:d2:0d:
                    b2:9c:c7:39:f6:20:75:7a:29:19:f1:56:da:59:c3:
                    a8:4b:47:be:7d:29:5f:3e:90:b4:55:b2:23:bd:12:
                    88:4b:87:3c:71:ea:6f:92:eb:33:95:6f:21:fa:72:
                    b9:28:a1:8e:01:93:7d:3c:d3:c9:58:bc:5d:e8:6c:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FD:69:4B:AB:D4:40:95:14:7A:CE:31:A4:41:E4:86:2F:C9:44:66
            X509v3 Authority Key Identifier:
                keyid:12:C5:1C:F8:D8:09:FF:70:36:76:21:8F:19:93:0F:62:AC:25:BA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4445cb9beea798f0fcde4339a7ff23524d49bf44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/797c21b0-a0c4-448d-84a6-35f179b73e46/b84eac0f133acdbde2898417c6f47ac37c093218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/797c21b0-a0c4-448d-84a6-35f179b73e46/4445cb9beea798f0fcde4339a7ff23524d49bf44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:79:b7:db:04:b5:05:57:02:f1:4b:c3:4c:5d:c4:18:bf:d1:
         ef:89:d8:42:a5:71:4c:ed:cf:0f:6a:f1:89:e4:e8:02:44:3c:
         fb:da:76:67:0e:63:79:52:13:aa:a3:62:07:7c:bb:df:8b:e5:
         9a:d6:9a:61:8d:4c:58:ff:d6:0f:c2:36:6d:61:a4:00:2e:e0:
         d1:48:9b:2a:85:7b:64:50:5e:ba:ba:6a:cb:e1:4d:c9:1a:c4:
         a5:9d:0f:78:df:53:91:3b:60:3d:73:10:eb:ab:2e:6f:3e:14:
         16:03:2b:dd:e2:19:eb:3b:11:cc:69:c2:83:b6:58:81:3c:eb:
         e5:79:76:3e:8f:21:1f:22:87:f8:6b:7a:70:52:37:67:11:f7:
         c6:64:6c:46:ad:f5:0e:75:d9:f2:70:5d:2c:16:3f:4b:13:57:
         27:c8:e4:64:cf:a6:9c:a5:83:2c:b4:98:27:ee:34:0c:c0:1f:
         ed:06:bd:02:0b:cb:2f:2e:e6:62:5f:4b:4f:fc:f1:7a:56:ba:
         4c:cf:bc:02:d3:43:8b:86:75:49:69:3a:70:bd:83:8b:2a:ce:
         7f:d3:55:e1:a7:50:cc:28:c2:da:b0:a9:62:51:45:cf:62:4b:
         e3:9a:2a:43:7f:ad:0e:c6:76:2a:d7:70:52:be:79:d4:e0:ab:
         b3:a8:29:9e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ0
NWNiOWJlZWE3OThmMGZjZGU0MzM5YTdmZjIzNTI0ZDQ5YmY0NDAeFw0yMTA3MDYw
MzAwMDBaFw0yMzA3MDYwMzAwMDBaMDMxMTAvBgNVBAMTKGI4NGVhYzBmMTMzYWNk
YmRlMjg5ODQxN2M2ZjQ3YWMzN2MwOTMyMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuoqHuSi2+MpgOV228Vc2i3JoyIqMQrUxpt/66522P7wQhNhps
5idKLH7jnJ3m3jrV884/p5U/3Ft/mN4TBabN/REHl/jwDnPlyYWUANaIVfIvKjRe
EV1a4DLeZN9elAMZhTUV6CyuuLeyV0se/0LINC+eW6NSSSKVEoYFrO0Ex5Crlq1H
hvMSI4CwH+PJPuxuDKIl+vyt7Jwb/YZS2z3uZbIM/1Sk/kQU0J5TUZIr+Lbdq+u2
auLF+iL8fTDgWMXSDbKcxzn2IHV6KRnxVtpZw6hLR759KV8+kLRVsiO9EohLhzxx
6m+S6zOVbyH6crkooY4Bk30808lYvF3obFIpAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUpv1pS6vUQJUUes4xpEHkhi/JRGYwHwYDVR0jBBgwFoAUEsUc+NgJ/3A2diGP
GZMPYqwlupEwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS80NDQ1Y2I5
YmVlYTc5OGYwZmNkZTQzMzlhN2ZmMjM1MjRkNDliZjQ0LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy83OTdjMjFiMC1hMGM0LTQ0OGQtODRhNi0zNWYxNzli
NzNlNDYvYjg0ZWFjMGYxMzNhY2RiZGUyODk4NDE3YzZmNDdhYzM3YzA5MzIxOC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzc5N2MyMWIwLWEwYzQtNDQ4ZC04NGE2LTM1ZjE3
OWI3M2U0Ni80NDQ1Y2I5YmVlYTc5OGYwZmNkZTQzMzlhN2ZmMjM1MjRkNDliZjQ0
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLeKoMA0GCSqGSIb3DQEBCwUAA4IBAQAoebfbBLUFVwLxS8NM
XcQYv9HvidhCpXFM7c8PavGJ5OgCRDz72nZnDmN5UhOqo2IHfLvfi+Wa1pphjUxY
/9YPwjZtYaQALuDRSJsqhXtkUF66umrL4U3JGsSlnQ9431ORO2A9cxDrqy5vPhQW
Ayvd4hnrOxHMacKDtliBPOvleXY+jyEfIof4a3pwUjdnEffGZGxGrfUOddnycF0s
Fj9LE1cnyORkz6acpYMstJgn7jQMwB/tBr0CC8svLuZiX0tP/PF6VrpMz7wC00OL
hnVJaTpwvYOLKs5/01Xhp1DMKMLasKliUUXPYkvjmipDf60OxnYq13BSvnnU4Kuz
qCme
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-ams.rpki-client.org