Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1c1b0ff2f8cf3455608abfe534d195f887bb515d.roa
File:                     1c1b0ff2f8cf3455608abfe534d195f887bb515d.roa (raw, json)
Hash identifier:          AVhoq5wkT9F7uopQQNIskhmeFXoGfd8FRDalKwiIIpY=
Subject key identifier:   99:7B:33:EA:98:37:F7:9E:FC:FE:9D:0F:9E:2B:5B:3F:2C:12:15:8A
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1453BB
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1c1b0ff2f8cf3455608abfe534d195f887bb515d.roa
Signing time:             Fri 30 Jul 2021 02:45:30 +0000
ROA not before:           Thu 29 Jul 2021 03:00:00 +0000
ROA not after:            Sat 29 Jul 2023 03:00:00 +0000
asID:                     278
IP address blocks:        132.248.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332155 (0x1453bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Jul 29 03:00:00 2021 GMT
            Not After : Jul 29 03:00:00 2023 GMT
        Subject: CN=1c1b0ff2f8cf3455608abfe534d195f887bb515d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:86:e1:9b:f0:3d:f2:98:65:c6:b1:16:49:fd:
                    f7:9b:15:a3:44:2e:c2:03:bf:25:88:46:f2:31:4f:
                    85:96:40:2b:11:b6:90:ec:9e:f9:ba:51:91:9d:f0:
                    1b:fd:d9:6f:ac:7b:51:80:40:00:61:94:14:d0:c6:
                    dd:8f:a6:7f:63:b0:30:13:3c:97:e1:ad:92:91:51:
                    6a:6e:e2:6d:7c:d6:98:56:37:7b:a1:ed:e9:1b:ef:
                    c3:1b:31:7e:4f:d3:05:d8:61:75:e1:47:01:0b:b9:
                    da:27:10:64:3d:a0:75:fd:ec:af:af:77:bf:e6:cd:
                    20:80:d3:1e:f8:2e:e0:8d:c2:28:1d:9d:23:61:e8:
                    03:1b:60:08:1d:11:21:a1:7d:48:19:bd:df:ed:df:
                    00:33:12:13:a2:bc:60:1b:d1:4e:7f:a7:ed:0b:50:
                    fb:c6:80:d8:6d:ab:c7:c3:78:57:06:15:92:f0:f0:
                    2f:9c:62:6c:f8:d0:af:52:44:2d:e2:22:6b:d0:7a:
                    10:ac:4a:e6:ab:86:30:50:73:6a:18:58:b6:bf:8e:
                    14:95:a8:40:f1:b0:6c:02:80:67:dd:07:a5:ad:02:
                    07:73:63:1e:43:05:b5:da:0e:e3:cf:32:d7:82:01:
                    8f:3d:d1:8d:be:9e:e3:59:94:40:0d:b4:bf:25:90:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7B:33:EA:98:37:F7:9E:FC:FE:9D:0F:9E:2B:5B:3F:2C:12:15:8A
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1c1b0ff2f8cf3455608abfe534d195f887bb515d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:f9:32:85:bc:b4:77:3f:cf:b6:67:53:82:2e:35:18:f3:08:
         f7:c1:18:cb:15:69:3f:e5:a1:2c:d8:f5:37:93:08:88:45:30:
         33:56:98:5b:d7:2b:55:aa:d4:7e:35:ff:a7:92:10:57:5b:91:
         c0:a9:65:48:40:b3:3d:06:00:6d:d0:d2:65:58:38:d9:07:5a:
         d4:0b:f8:36:4a:e9:3c:71:99:b4:26:f5:64:cc:da:94:fe:b7:
         da:1c:c3:f9:85:7e:b8:d5:67:2d:88:ec:9a:d6:fb:a0:01:64:
         7a:40:98:29:e4:58:ee:60:1d:32:d3:cb:d9:a4:c9:1f:1f:51:
         6e:f1:5a:24:66:fd:4e:5e:13:85:24:0a:0c:f2:bd:6f:73:dd:
         cd:23:e7:32:f3:ee:fc:d1:26:fe:75:d3:f5:dc:3c:83:1b:22:
         2d:27:92:87:fa:58:99:39:1f:db:0b:64:c8:72:7c:57:b8:02:
         8b:28:51:9a:d4:cd:ca:3c:c8:06:d7:f4:03:d5:65:cd:66:9d:
         ba:1e:1e:82:cc:a2:89:a8:8c:16:e9:3c:e8:6f:20:3f:f8:a2:
         20:a5:88:0f:5d:7b:af:6c:88:53:36:69:9f:7b:81:ac:86:eb:
         51:3d:43:57:ca:a7:72:a1:8b:71:17:a2:fc:c3:5a:4a:25:db:
         40:d3:a1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org