Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8273ed29-e2e8-47be-866f-61abf8cba30b/07c1ab5838fea092ade6de34bf0c256992fc87de.roa
File:                     07c1ab5838fea092ade6de34bf0c256992fc87de.roa (raw, json)
Hash identifier:          5paFnGyUGvW4JUJrbqISxfVjTyByWUpxboZrCykF/OI=
Subject key identifier:   D2:67:0E:3B:46:B9:91:E7:1C:A2:24:FF:0B:12:43:11:1F:7C:89:33
Certificate issuer:       /CN=46769ac4edeccf5ef8d51d86ae34b0546e67293d
Certificate serial:       0EE902
Authority key identifier: D5:C0:3B:18:85:95:E4:45:93:0F:AF:4B:97:83:57:52:8F:25:11:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46769ac4edeccf5ef8d51d86ae34b0546e67293d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8273ed29-e2e8-47be-866f-61abf8cba30b/07c1ab5838fea092ade6de34bf0c256992fc87de.roa
Signing time:             Thu 06 Oct 2022 17:36:42 +0000
ROA not before:           Thu 06 Oct 2022 17:24:07 +0000
ROA not after:            Sun 06 Oct 2024 17:24:07 +0000
asID:                     270068
IP address blocks:        187.86.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977154 (0xee902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46769ac4edeccf5ef8d51d86ae34b0546e67293d
        Validity
            Not Before: Oct  6 17:24:07 2022 GMT
            Not After : Oct  6 17:24:07 2024 GMT
        Subject: CN=07c1ab5838fea092ade6de34bf0c256992fc87de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ea:e3:c8:0b:0c:60:90:f0:2c:2f:3a:1f:ec:
                    05:1c:2d:7a:71:56:d5:c9:f5:ab:65:4d:eb:88:bd:
                    7e:5e:3b:41:d7:4b:c2:ec:b3:ac:4c:16:b8:ff:08:
                    65:c8:12:11:9b:70:ef:77:5a:9e:a9:0b:d7:ae:ba:
                    23:c4:e8:9c:de:51:42:c0:54:5a:28:e8:da:a0:c8:
                    ce:cc:5e:8b:22:01:e2:e5:fb:64:23:f3:8b:70:fb:
                    97:87:d9:67:40:f3:ba:d7:98:80:5b:35:b1:d9:eb:
                    70:07:eb:e1:7f:71:7e:0b:e4:2c:28:5c:ad:00:f1:
                    4a:b3:17:20:0d:87:7a:78:a3:f7:8a:ae:13:7f:a1:
                    aa:ab:c1:99:05:d9:91:7f:db:1b:20:e1:29:87:03:
                    39:75:14:f2:1b:7f:3d:a7:15:5d:56:d0:f7:7a:46:
                    95:fb:04:d0:35:0f:8b:c6:81:6a:68:df:82:6f:01:
                    bc:4d:3a:87:e0:c3:84:e0:86:a3:f0:b2:64:ce:6c:
                    79:b2:cd:35:98:c6:6c:8d:08:d1:c2:32:1b:ea:77:
                    f1:bb:cd:b9:da:f2:c4:1c:d8:72:02:a6:37:f0:8c:
                    92:30:cb:5d:fc:77:b3:4f:26:99:03:1e:43:fb:22:
                    2d:95:86:44:14:fa:28:0c:83:c4:4e:0c:ea:4a:68:
                    e7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:67:0E:3B:46:B9:91:E7:1C:A2:24:FF:0B:12:43:11:1F:7C:89:33
            X509v3 Authority Key Identifier:
                keyid:D5:C0:3B:18:85:95:E4:45:93:0F:AF:4B:97:83:57:52:8F:25:11:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46769ac4edeccf5ef8d51d86ae34b0546e67293d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8273ed29-e2e8-47be-866f-61abf8cba30b/07c1ab5838fea092ade6de34bf0c256992fc87de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8273ed29-e2e8-47be-866f-61abf8cba30b/46769ac4edeccf5ef8d51d86ae34b0546e67293d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:85:68:65:38:83:ca:23:44:85:c0:87:30:15:33:dc:0f:6c:
         e9:df:d0:b1:ae:f2:b7:2e:ca:3c:66:2f:ba:d1:56:70:fd:b4:
         68:2c:8c:2f:98:c7:63:cc:1d:99:03:41:ea:9f:21:55:b8:79:
         8a:46:bd:ec:fd:8b:99:42:66:8c:30:08:d5:d7:20:fd:9f:d4:
         58:15:1f:a1:2a:60:83:d9:dd:9c:c7:40:64:13:80:a9:e7:a9:
         be:7b:96:d7:0e:c8:fa:52:d5:b1:38:54:9a:d8:d2:32:4c:c0:
         69:01:1a:a6:5d:62:d9:24:05:62:dc:9b:ef:51:bc:bc:3c:b3:
         ed:60:38:f4:e9:fd:7a:f4:09:80:33:84:46:0c:32:10:be:f6:
         ca:36:7e:3a:ea:af:9d:50:95:d1:68:a8:d2:d6:f9:c6:12:24:
         fb:d6:4d:3b:2f:f6:ca:d3:84:76:90:13:25:28:fc:6b:88:01:
         a5:1d:4c:e9:9b:12:ce:40:84:3c:c9:7a:e6:1d:53:91:ba:ff:
         7e:60:9e:a9:b8:4d:ac:b2:fe:82:c2:95:be:fd:4a:14:16:c8:
         31:7e:1c:b9:2e:e1:ee:87:dc:cb:c3:e5:3d:f8:17:8e:0f:29:
         c5:a1:c3:34:bd:06:f7:ad:dc:4c:1b:e3:2f:22:d9:ec:7e:df:
         29:71:13:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-fra.rpki-client.org