Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0fa626ab3bcc52b6c059f3376b041f3e203845c6.roa
File:                     0fa626ab3bcc52b6c059f3376b041f3e203845c6.roa (raw, json)
Hash identifier:          VBwLDxtWc4zr7viRsDz60DskfnSwZKge+TREbKNc8RQ=
Subject key identifier:   71:F2:7E:CA:64:CF:4F:B6:23:EA:A1:8B:D3:E4:DD:0D:F9:0E:0D:A5
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F9F45
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0fa626ab3bcc52b6c059f3376b041f3e203845c6.roa
Signing time:             Wed 24 Mar 2021 14:44:02 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023813 (0xf9f45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=0fa626ab3bcc52b6c059f3376b041f3e203845c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:92:c5:4e:1d:ce:bd:74:72:b6:c8:be:75:
                    3e:6d:39:8b:48:b5:2d:af:8d:a3:51:d6:77:a9:5d:
                    e5:9f:61:f4:cb:b0:85:5f:95:bc:ae:8a:d4:2e:81:
                    d8:e1:66:18:bb:76:f9:f7:1e:58:33:43:d0:af:28:
                    a2:84:2d:e4:3a:76:ed:f3:71:e1:b5:c9:87:a6:41:
                    c8:cc:46:0c:d5:3d:8b:d0:25:c6:e0:79:d6:80:44:
                    17:47:c8:32:4a:68:21:64:8a:c5:3f:e3:d0:3e:63:
                    0f:85:2b:24:c7:87:e8:bd:e3:8b:ab:f9:c7:0a:cf:
                    b7:fe:59:e5:96:d7:6c:df:9b:a5:e3:83:f8:fd:15:
                    ea:4e:be:e8:fe:7f:56:94:46:b4:9e:a7:ef:f1:b1:
                    07:2a:79:de:f0:11:8b:fc:1c:4f:13:91:9f:89:43:
                    96:a8:64:c4:24:db:14:e5:c3:ed:4c:91:03:58:5c:
                    40:34:be:3c:59:a4:cb:f8:0b:fd:b8:b8:c1:89:0b:
                    c7:2e:cd:25:8d:f5:f9:8f:6c:93:34:74:f6:88:cb:
                    f0:fd:a8:99:17:00:50:7f:77:f8:ad:bf:ee:ac:cb:
                    1c:80:1e:73:07:ef:04:2c:f1:8e:57:0e:15:77:63:
                    29:f2:2c:73:fd:64:93:16:1c:98:a7:12:84:15:9a:
                    7c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F2:7E:CA:64:CF:4F:B6:23:EA:A1:8B:D3:E4:DD:0D:F9:0E:0D:A5
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0fa626ab3bcc52b6c059f3376b041f3e203845c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:5f:b9:45:34:03:d6:06:1e:d1:31:b9:30:dc:e9:ce:2b:58:
         43:ee:33:08:76:05:10:eb:eb:48:c1:cd:13:7f:ad:42:bc:3e:
         67:b0:a4:1b:90:02:57:31:09:a2:b9:33:95:1a:e3:29:da:c9:
         59:1a:ee:d4:e5:0b:83:1b:3c:db:b0:67:99:f5:72:1a:97:0b:
         7a:2e:ac:6d:de:29:6f:ec:db:87:df:50:f8:e2:b8:92:87:31:
         13:23:a0:9c:2c:ae:18:e7:ef:ff:f5:9f:70:1c:e0:59:3a:81:
         9b:81:43:00:9e:f5:a7:39:db:94:c2:28:3d:d3:42:17:9a:21:
         c6:11:04:2a:d6:88:2f:8d:0e:21:6f:69:98:60:0d:a7:0c:ee:
         b1:00:ae:0e:63:08:c2:66:09:4c:48:71:51:8f:56:54:7c:8a:
         a9:04:21:bf:e8:be:08:a1:76:34:12:aa:0f:01:3f:ad:a0:d2:
         53:4b:ba:62:0f:fe:7a:88:37:43:49:7d:0a:6a:2f:84:71:aa:
         92:f4:36:5a:97:58:c5:ad:91:d6:9b:ba:b4:97:df:69:a9:3e:
         54:81:d3:21:7f:ef:b9:e0:5c:9a:6f:ab:fb:b8:72:ef:45:ff:
         8c:7f:bc:9d:6e:4e:7e:85:d2:b5:11:1a:a3:12:ab:8b:cf:3d:
         85:06:cc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org