Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/82a9ed9152555d12a401912dc52a9f67c139e572.roa
File:                     82a9ed9152555d12a401912dc52a9f67c139e572.roa (raw, json)
Hash identifier:          GCXk1cKJ3YHo671rOa0PO+vw20lKYvQQo98YcBh+JOM=
Subject key identifier:   46:77:E6:BD:09:57:A6:58:C7:97:93:9F:87:58:7B:8C:00:12:1B:C6
Certificate issuer:       /CN=c1e38cbcb318a6c50f4577b142d66a8cd370a5e7
Certificate serial:       1413
Authority key identifier: 4B:85:CB:EE:6F:82:F1:57:9C:AE:7C:DB:E9:99:D1:31:89:31:FB:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/82a9ed9152555d12a401912dc52a9f67c139e572.roa
Signing time:             Mon 16 Jan 2023 17:12:24 +0000
ROA not before:           Sun 15 Jan 2023 17:12:03 +0000
ROA not after:            Thu 16 Jan 2025 17:12:03 +0000
asID:                     28432
IP address blocks:        177.124.84.0/23 maxlen: 24
                          177.124.86.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5139 (0x1413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e38cbcb318a6c50f4577b142d66a8cd370a5e7
        Validity
            Not Before: Jan 15 17:12:03 2023 GMT
            Not After : Jan 16 17:12:03 2025 GMT
        Subject: CN=82a9ed9152555d12a401912dc52a9f67c139e572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:93:c6:69:81:19:36:a4:f4:32:86:0b:47:d5:
                    f9:a6:40:8e:1c:4d:eb:a1:b6:3a:5b:94:8e:57:a1:
                    2f:59:48:e5:5f:e9:c3:2b:f7:c1:4c:17:fc:22:3d:
                    7d:b1:51:dc:77:a9:a6:87:8c:24:b4:ed:96:62:4d:
                    40:00:ce:b8:d4:ba:09:b2:90:4b:77:d4:56:e7:e6:
                    8c:f7:ec:c7:97:e5:a8:ab:74:c4:96:8c:fd:e3:5e:
                    94:ae:dc:5a:4f:d3:7a:8f:ac:24:52:a2:63:8c:52:
                    8d:d9:6e:9f:49:3d:c4:a5:c7:bf:8b:66:e3:bb:77:
                    dc:39:ce:82:c1:b8:67:5e:61:32:bd:f4:7a:35:e2:
                    6a:01:e4:18:8d:65:a6:72:d2:45:e7:87:68:33:53:
                    c6:c4:de:ac:be:c9:12:6a:78:8b:f3:30:b7:fa:00:
                    c9:cf:6e:6b:b3:05:80:9b:aa:62:3c:ce:b3:ff:fa:
                    e6:cc:10:28:0d:f5:ae:8a:4b:c1:b8:dc:9b:02:d5:
                    04:43:bd:ae:50:1f:80:4e:6a:b7:d4:4c:4a:f0:7a:
                    27:9c:75:54:50:b4:cf:f1:03:8d:d7:b9:c4:b6:4c:
                    d3:53:12:4c:f4:31:de:23:23:2e:41:7a:46:86:17:
                    6d:91:ed:83:d5:c7:e6:77:20:50:d3:88:82:e3:95:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:77:E6:BD:09:57:A6:58:C7:97:93:9F:87:58:7B:8C:00:12:1B:C6
            X509v3 Authority Key Identifier:
                keyid:4B:85:CB:EE:6F:82:F1:57:9C:AE:7C:DB:E9:99:D1:31:89:31:FB:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/82a9ed9152555d12a401912dc52a9f67c139e572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:04:2f:15:23:79:e4:62:63:cc:5d:e8:ad:09:51:ac:cc:49:
         84:97:3c:3b:23:56:7a:52:fa:fd:11:97:19:d7:b4:97:88:6b:
         9a:ec:88:f9:3f:05:b6:8f:f7:7f:56:73:69:1d:64:93:d3:1f:
         83:59:40:35:07:53:60:12:03:bb:41:1d:49:7b:a0:28:0f:6b:
         30:6d:60:bf:41:f9:a0:2a:65:26:64:72:08:b7:6d:c3:56:19:
         69:08:2d:17:fa:7a:b3:e8:5d:e1:10:42:86:4b:5f:00:cf:5e:
         3a:0a:27:2d:be:a3:07:9f:59:27:ca:dd:d6:6d:b6:c0:87:c2:
         97:52:9d:2e:df:55:d9:00:8f:d8:7e:c8:f1:a2:10:bc:71:32:
         88:ff:62:73:1f:76:df:05:da:80:7b:e6:ea:0c:e0:be:17:33:
         53:28:c2:e6:f0:ed:91:75:43:3f:ff:99:e4:61:76:15:06:e9:
         83:fb:d4:8c:ea:b0:00:a8:01:f2:d4:ae:13:58:7c:d7:6b:0f:
         7d:29:a9:88:fd:77:1d:a9:ac:a3:d9:09:92:73:f9:d3:1b:23:
         de:a9:e7:64:71:c3:c6:42:11:11:a3:02:75:5f:54:13:e2:53:
         38:a9:87:f4:5a:65:3e:a3:26:89:2f:8e:77:9d:b2:5f:77:a6:
         d8:2e:ec:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-fra.rpki-client.org