Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/3fc02e823a6cebec9cd3463e4349acb1066634af.roa
File:                     3fc02e823a6cebec9cd3463e4349acb1066634af.roa (raw, json)
Hash identifier:          RpHWptDQoEVeUR3pGRKbqGZy3s2sFe4OBHWwq5ViznY=
Subject key identifier:   34:19:87:09:25:CA:7E:09:E7:1C:82:DB:D8:0A:52:63:5F:66:5D:75
Certificate issuer:       /CN=981ee37ee8c6770b167c2590f30297cb10005f16
Certificate serial:       019156
Authority key identifier: 64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/3fc02e823a6cebec9cd3463e4349acb1066634af.roa
Signing time:             Thu 15 Apr 2021 15:30:50 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     265855
IP address blocks:        45.173.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102742 (0x19156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981ee37ee8c6770b167c2590f30297cb10005f16
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=3fc02e823a6cebec9cd3463e4349acb1066634af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cf:5a:ab:00:00:79:9d:75:b4:81:48:11:89:
                    32:17:30:94:7e:32:4a:3b:77:9c:47:2f:b4:63:31:
                    f0:4e:14:ad:1e:1b:7e:9c:f7:98:2c:fa:ba:a7:30:
                    32:04:91:e6:d5:30:c7:b7:cb:2f:e3:75:ec:cb:9d:
                    dc:ee:af:4f:ac:fc:05:bd:0b:96:79:a9:92:9b:83:
                    ff:22:0a:8e:04:66:a1:9d:25:43:a5:c2:60:e2:5e:
                    60:94:4e:e2:9d:63:e5:09:48:01:e9:0f:45:7a:29:
                    9a:51:f8:ff:fb:85:6a:a6:5b:1d:b8:bb:7a:57:8a:
                    85:5c:35:17:2b:3f:aa:c9:52:32:40:2f:51:e7:54:
                    8e:53:5d:7e:f7:32:c0:65:6b:a0:a4:59:d6:7f:9b:
                    59:17:0c:07:65:30:02:c8:a6:0d:be:1f:6f:af:c9:
                    c6:41:50:9d:e4:1f:c6:14:ee:79:3c:fd:82:c4:b5:
                    41:5a:a4:3d:46:df:56:77:b5:c7:18:f9:58:16:11:
                    0d:3d:38:fd:43:f0:92:30:f7:ea:fb:e8:95:cc:1c:
                    b3:f4:16:75:94:de:a5:1c:bd:83:ee:ad:5d:1c:72:
                    19:ff:cf:ab:05:41:1f:2d:78:e0:6d:11:00:51:75:
                    4b:1c:79:60:32:00:b7:f3:aa:39:e2:ee:73:0b:84:
                    56:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:19:87:09:25:CA:7E:09:E7:1C:82:DB:D8:0A:52:63:5F:66:5D:75
            X509v3 Authority Key Identifier:
                keyid:64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/3fc02e823a6cebec9cd3463e4349acb1066634af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:37:46:0f:17:bf:ac:23:21:e8:aa:35:3c:16:8e:c1:26:43:
         12:87:32:69:4b:d5:56:5c:96:98:15:5d:cb:6f:74:2d:ec:93:
         cd:27:ec:6e:c2:df:6b:77:2e:61:e9:e1:35:ef:6f:d5:78:c1:
         87:c8:4d:e9:15:ea:e7:e1:5d:8a:a9:95:b6:6f:b5:1c:46:40:
         bd:a8:4e:00:8f:6a:8d:71:20:5a:21:b8:05:db:32:35:be:b8:
         8c:ea:69:0b:9d:c5:89:5e:d1:ba:64:d1:7e:f7:6e:ba:b5:83:
         a8:40:e0:01:62:c2:ab:e7:c8:f8:a4:b5:10:54:39:d9:f9:df:
         1d:b4:5e:97:0f:ea:3c:69:a1:3e:ad:1f:cb:47:3f:2b:9d:52:
         22:4d:88:f6:38:53:8d:d6:3a:79:31:96:cc:c7:68:71:6c:72:
         b8:e4:a5:22:58:6e:4e:f1:ae:77:f4:61:23:4e:56:3d:d7:63:
         83:2a:c7:57:99:f2:ef:1b:b2:83:85:0b:34:0b:a9:12:e9:92:
         67:1d:82:f1:f9:7b:e2:df:be:62:59:4b:d5:f6:7d:4d:4a:f0:
         bf:fb:87:86:a3:76:95:44:36:dd:96:d7:45:1e:78:08:2b:d4:
         0c:1f:f6:39:b8:be:e7:2d:30:cb:10:8e:09:c8:a7:d2:95:57:
         93:57:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-fra.rpki-client.org