Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/117b7daa31a42126ed42616b8a4343a6ee73ed6d.roa
File:                     117b7daa31a42126ed42616b8a4343a6ee73ed6d.roa (raw, json)
Hash identifier:          KNdm9d3CmXedqw+wEKzAAOh4opyfIbvIw9xfJARuoBI=
Subject key identifier:   C2:A6:EF:B8:A6:6C:8F:2B:75:14:D6:3D:A5:EA:6E:8A:AB:18:E3:F5
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1D6BF3
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/117b7daa31a42126ed42616b8a4343a6ee73ed6d.roa
Signing time:             Wed 08 Jun 2022 22:19:00 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Sat 08 Jun 2024 03:00:00 +0000
asID:                     278
IP address blocks:        132.247.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928179 (0x1d6bf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Jun  8 03:00:00 2024 GMT
        Subject: CN=117b7daa31a42126ed42616b8a4343a6ee73ed6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:68:63:91:53:0a:3c:04:c6:5e:42:ee:ef:b2:
                    4c:95:8b:a1:93:0f:9e:28:93:3f:6c:71:16:49:a6:
                    d3:0a:9e:67:a1:d1:a4:b7:96:fa:02:ae:db:69:89:
                    93:96:ca:c9:5e:29:95:1b:90:29:45:22:7d:20:79:
                    01:9a:50:ef:e4:2f:2b:9f:2e:84:29:fd:cc:7a:d0:
                    49:5d:28:b2:47:ff:05:a9:6c:e5:17:ca:21:23:1e:
                    4a:da:0e:a3:cc:48:20:9f:aa:0e:ca:8c:f6:57:18:
                    8a:37:ba:82:0e:a7:c6:cc:ba:24:74:45:e6:69:25:
                    02:18:0b:23:44:7d:e5:a5:31:76:7c:f0:89:14:5f:
                    a9:12:3e:e6:e8:1e:ac:1a:d6:06:a1:a1:ce:1a:e3:
                    d4:ff:ce:0f:12:fa:8f:cc:75:e4:83:ae:d9:de:d5:
                    84:87:bb:61:aa:8b:23:c8:5f:a6:57:30:5a:9a:2b:
                    35:05:a7:cd:a0:d3:dd:d5:e0:60:7d:3d:57:fc:6a:
                    a8:76:99:a6:fd:28:84:ab:ee:d3:dd:8d:60:04:15:
                    aa:9d:73:e3:a9:b3:af:99:6d:d6:42:41:a7:91:13:
                    fc:2c:0b:61:88:d5:2b:4d:87:72:9f:e9:36:43:f6:
                    59:c7:36:b3:be:41:85:ee:3a:cf:e1:24:cf:d8:0c:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A6:EF:B8:A6:6C:8F:2B:75:14:D6:3D:A5:EA:6E:8A:AB:18:E3:F5
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/117b7daa31a42126ed42616b8a4343a6ee73ed6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:79:bc:3d:6e:4c:cf:06:94:4b:ca:36:d3:48:a2:74:bc:a7:
         c7:ca:db:fd:44:c5:c7:98:31:c3:f2:25:29:11:9d:f1:d6:a8:
         0c:29:4c:cd:b6:41:15:34:d1:e4:87:30:0e:ea:ec:db:54:57:
         a7:fd:63:b1:73:47:06:2d:f5:8e:94:56:45:cf:ac:b1:ab:79:
         99:44:c2:be:38:87:bf:5f:d3:5d:8c:3f:e7:38:72:e2:60:79:
         9a:02:01:7d:01:a6:ac:f3:92:a1:c9:a3:be:3c:1b:3b:ce:26:
         0f:fe:28:2c:2a:a6:72:6b:8e:ec:99:ee:de:80:60:ab:18:0c:
         1f:da:3a:54:87:e7:2d:86:a0:58:06:e9:38:c8:11:1f:0e:89:
         3a:6c:fe:e0:85:62:fc:6c:1d:41:16:eb:7e:ed:14:f2:1f:da:
         93:4a:2d:e4:92:d4:b1:0f:36:c5:fe:b7:8b:02:ac:4a:85:d9:
         48:b5:1a:df:f5:32:76:df:68:62:1d:41:32:2b:2b:89:86:29:
         a8:d5:1e:af:f0:9c:94:3a:38:6b:2e:43:0a:2e:f9:d3:8f:af:
         26:f0:c6:31:c2:d2:b6:cf:fc:09:ab:8a:ce:d3:de:18:df:18:
         d1:90:a8:2d:79:c8:1f:02:d5:f2:c3:8a:61:6e:3f:85:5f:bb:
         4d:71:88:32
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHWvzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjIwNjA4
MDMwMDAwWhcNMjQwNjA4MDMwMDAwWjAzMTEwLwYDVQQDEygxMTdiN2RhYTMxYTQy
MTI2ZWQ0MjYxNmI4YTQzNDNhNmVlNzNlZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgWhjkVMKPATGXkLu77JMlYuhkw+eKJM/bHEWSabTCp5nodGk
t5b6Aq7baYmTlsrJXimVG5ApRSJ9IHkBmlDv5C8rny6EKf3MetBJXSiyR/8FqWzl
F8ohIx5K2g6jzEggn6oOyoz2VxiKN7qCDqfGzLokdEXmaSUCGAsjRH3lpTF2fPCJ
FF+pEj7m6B6sGtYGoaHOGuPU/84PEvqPzHXkg67Z3tWEh7thqosjyF+mVzBamis1
BafNoNPd1eBgfT1X/Gqodpmm/SiEq+7T3Y1gBBWqnXPjqbOvmW3WQkGnkRP8LAth
iNUrTYdyn+k2Q/ZZxzazvkGF7jrP4STP2Az86wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMKm77imbI8rdRTWPaXqboqrGOP1MB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzExN2I3ZGFhMzFhNDIxMjZlZDQyNjE2YjhhNDM0M2E2ZWU3M2VkNmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT3AjANBgkqhkiG9w0BAQsFAAOCAQEAEHm8PW5MzwaUS8o2
00iidLynx8rb/UTFx5gxw/IlKRGd8daoDClMzbZBFTTR5IcwDurs21RXp/1jsXNH
Bi31jpRWRc+ssat5mUTCvjiHv1/TXYw/5zhy4mB5mgIBfQGmrPOSocmjvjwbO84m
D/4oLCqmcmuO7Jnu3oBgqxgMH9o6VIfnLYagWAbpOMgRHw6JOmz+4IVi/GwdQRbr
fu0U8h/ak0ot5JLUsQ82xf63iwKsSoXZSLUa3/Uydt9oYh1BMisriYYpqNUer/Cc
lDo4ay5DCi7504+vJvDGMcLSts/8CauKztPeGN8Y0ZCoLXnIHwLV8sOKYW4/hV+7
TXGIMg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org