Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/077c0da648fbf6f205570b0ffb22a16b2ce3779b.roa
File:                     077c0da648fbf6f205570b0ffb22a16b2ce3779b.roa (raw, json)
Hash identifier:          fE2+D02C1lPOUBosx3gXm6EmLXr3C8rDVj9gZawDTfU=
Subject key identifier:   FB:39:16:3E:EA:82:3D:A0:35:74:B6:CA:D2:74:92:BE:B5:79:A3:5B
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       110CA8
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/077c0da648fbf6f205570b0ffb22a16b2ce3779b.roa
Signing time:             Wed 24 Mar 2021 14:44:30 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117352 (0x110ca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=077c0da648fbf6f205570b0ffb22a16b2ce3779b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:33:f2:09:91:10:2f:7a:2c:3c:4d:1c:38:7b:
                    5a:bb:12:39:22:d2:5a:67:93:7a:08:f4:ea:d3:78:
                    b7:8a:2f:3b:9c:12:72:c1:79:a5:b3:85:c0:3a:54:
                    76:56:c0:5b:e3:73:7a:cc:5c:82:d7:3b:61:3e:cb:
                    28:07:6a:c4:25:14:76:ca:e9:b0:61:e2:d8:5c:01:
                    92:7f:56:c9:e8:30:64:d3:46:69:b1:df:5b:5d:21:
                    f9:13:63:8e:1e:d0:cb:71:97:99:bd:c9:ba:e1:dc:
                    f3:fc:21:fd:4e:e0:5a:27:db:bf:1e:3a:4d:d2:c0:
                    6b:9c:00:83:c7:18:60:85:86:b4:20:57:04:8d:c8:
                    11:cb:d1:03:30:64:a1:27:c6:9b:d0:f6:b1:78:5f:
                    94:00:46:1c:f2:35:77:be:26:9a:de:ca:31:86:dd:
                    7e:f0:e1:da:80:b0:3f:5c:56:dc:55:3c:10:91:eb:
                    5c:ac:9e:6a:67:18:34:25:d7:03:ae:58:87:cc:d6:
                    d8:ba:38:90:59:b6:67:84:b4:ce:67:3f:09:85:75:
                    d6:e4:f9:7a:86:e1:2a:a0:89:ba:c8:ab:d6:b5:99:
                    d0:f7:40:30:b5:3b:5a:e2:0c:3a:ff:52:75:b1:c0:
                    4f:4a:c3:9a:7f:98:08:a3:f2:b7:6b:3e:50:5b:0a:
                    11:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:16:3E:EA:82:3D:A0:35:74:B6:CA:D2:74:92:BE:B5:79:A3:5B
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/077c0da648fbf6f205570b0ffb22a16b2ce3779b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:e6:09:9f:c2:93:d8:b1:a5:d7:9f:04:db:c7:a8:35:3b:7f:
         4a:22:85:9a:f1:3b:73:19:ce:85:ca:42:47:05:50:1f:3e:46:
         3b:10:00:af:e4:c5:54:d3:30:52:9b:23:b0:63:bf:f6:43:ff:
         d6:76:19:a0:43:c3:ec:a9:52:bc:80:e1:84:68:e1:62:18:b0:
         72:b8:1f:1d:af:f1:17:76:e4:8e:f3:bd:bc:30:f8:73:02:89:
         19:8e:78:cf:0a:c0:e9:04:bb:78:a0:b6:34:be:f6:85:07:64:
         bb:20:73:1f:90:fb:e7:30:2d:a2:d0:c4:a3:ce:fa:3e:a7:9a:
         73:dd:6d:af:fb:07:ea:fd:5d:40:dc:6b:42:ef:19:08:34:9d:
         43:c1:2e:44:5d:15:e2:69:f0:63:41:d0:4d:12:98:42:d5:cb:
         60:1a:ed:ba:53:29:85:49:6f:a7:e7:63:5d:a1:2d:3b:2c:8f:
         07:57:f4:f3:4e:ae:b5:a5:04:16:dd:05:9e:7a:ca:ab:04:03:
         59:37:65:68:67:02:d9:57:6d:65:03:e8:4f:1a:45:d4:ee:e2:
         52:b6:cf:84:4e:61:aa:71:8b:10:ed:05:b2:e2:1e:58:56:14:
         4e:fe:8f:fc:a1:9b:50:66:9c:b4:0a:95:b6:b3:48:a1:26:8e:
         b2:2f:58:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org