Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/087a0869f8a22f79edfb5be941cecdf7b7a7c573.roa
File:                     087a0869f8a22f79edfb5be941cecdf7b7a7c573.roa (raw, json)
Hash identifier:          G5yB02CG3HJAXqgGU5xDRKprQ/HbNVtr9dUAngJjPGw=
Subject key identifier:   EA:07:5D:B9:B9:F6:7F:18:53:31:3E:50:F0:5E:58:1A:20:57:E6:9A
Certificate issuer:       /CN=7abe2ac2ba1ffec9d515a411e7a95b6d078dece7
Certificate serial:       080DD4
Authority key identifier: 5D:D7:DA:31:C4:60:C1:6F:F4:C1:F6:94:A0:E0:5F:BB:14:41:66:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7abe2ac2ba1ffec9d515a411e7a95b6d078dece7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/087a0869f8a22f79edfb5be941cecdf7b7a7c573.roa
Signing time:             Wed 24 Mar 2021 22:50:33 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     265758
IP address blocks:        131.196.180.0/24 maxlen: 24
                          131.196.181.0/24 maxlen: 24
                          131.196.182.0/24 maxlen: 24
                          131.196.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527828 (0x80dd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7abe2ac2ba1ffec9d515a411e7a95b6d078dece7
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=087a0869f8a22f79edfb5be941cecdf7b7a7c573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:57:64:cf:e0:f7:ed:a9:4d:5b:4f:45:97:
                    f0:f1:75:6d:00:cc:d5:bb:ba:a1:94:0b:aa:66:d4:
                    6a:52:b2:b4:fd:5c:32:a6:1a:81:16:eb:87:4c:9c:
                    ba:b2:bd:09:ea:1f:84:51:96:bc:24:ef:fb:44:4c:
                    04:6e:3a:fd:eb:0a:84:d6:49:df:13:19:64:96:b7:
                    32:64:6e:45:5e:ca:ee:ad:75:d4:db:84:c7:fe:1f:
                    43:0f:5d:f8:11:68:44:75:e2:55:0a:f9:49:0b:9b:
                    9d:41:34:cb:43:12:28:6c:3d:f3:1f:fa:12:14:21:
                    c5:c0:08:0a:8e:ce:8a:fa:76:fb:36:90:10:db:91:
                    cb:f8:c6:b4:c7:1a:bc:96:80:f1:f4:65:42:8b:3f:
                    87:fd:2b:f8:fd:b9:6a:6b:80:54:3f:2c:33:6a:3e:
                    36:22:8c:a5:80:ce:c2:8d:56:67:75:9b:53:35:6c:
                    e7:2d:48:d9:85:f6:84:fb:58:90:1c:fd:37:bd:ad:
                    97:41:5d:7f:e1:05:9d:dd:ae:e3:2a:28:70:e2:2f:
                    61:c8:f8:3c:cc:a5:44:7e:51:0f:ba:29:6a:d8:64:
                    a4:fa:46:51:40:09:d1:6a:59:44:e4:d9:53:97:bb:
                    7a:cd:e5:a7:b3:38:b7:e9:76:2d:87:75:80:b4:4c:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:07:5D:B9:B9:F6:7F:18:53:31:3E:50:F0:5E:58:1A:20:57:E6:9A
            X509v3 Authority Key Identifier:
                keyid:5D:D7:DA:31:C4:60:C1:6F:F4:C1:F6:94:A0:E0:5F:BB:14:41:66:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7abe2ac2ba1ffec9d515a411e7a95b6d078dece7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/087a0869f8a22f79edfb5be941cecdf7b7a7c573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/7abe2ac2ba1ffec9d515a411e7a95b6d078dece7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:61:f6:b4:03:ee:eb:4b:b1:9c:81:bd:e4:3c:05:12:87:db:
         21:f7:ec:99:48:74:07:cd:ba:51:5f:f4:4a:52:2f:2f:4c:d2:
         6a:10:04:c7:27:b7:f7:d1:38:8a:0f:1a:d9:f3:7e:5e:db:7a:
         8d:43:df:e3:77:34:fc:90:f2:0c:d8:67:f3:ef:9b:03:a0:fa:
         e4:a5:0a:24:30:8a:8d:eb:83:22:94:7e:98:70:89:58:0e:66:
         ec:3a:cb:32:66:4b:bd:99:6b:db:25:69:3f:ff:fb:dd:dd:e5:
         6c:38:88:66:6f:9e:26:01:7c:9a:56:e9:3d:f7:93:35:44:7a:
         7c:84:b7:b4:a3:cc:e7:0b:d5:af:b8:27:64:d9:bb:43:83:f5:
         68:d4:e0:97:5e:22:e5:1a:37:dd:82:c1:7f:c7:90:36:6c:97:
         d1:90:d2:ee:32:57:a5:8b:dc:fc:90:66:b4:a8:61:74:81:2b:
         3a:ac:fc:58:de:f2:12:2b:be:ac:80:99:79:ce:0a:af:70:0e:
         62:74:a7:56:3f:17:1b:da:15:1e:49:83:c9:9e:98:0f:c9:ce:
         78:d7:74:ff:8c:92:21:e2:cc:6a:17:bd:02:09:64:2d:9c:e3:
         83:2f:c8:d8:e6:75:6f:07:e5:5d:c0:db:a2:ed:c3:6d:45:68:
         f4:db:15:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-fra.rpki-client.org