Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/20e79b66447162d47ee90285b269749df707f687.roa
File:                     20e79b66447162d47ee90285b269749df707f687.roa (raw, json)
Hash identifier:          dP8JUbUORQMxvH9gjkNuWd8N9u9fbWd4lxBR7mK7sgE=
Subject key identifier:   41:AE:02:5A:2D:DF:B0:33:F1:6F:70:37:44:8F:5D:CC:73:E4:D3:A0
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       144DBD
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/20e79b66447162d47ee90285b269749df707f687.roa
Signing time:             Fri 30 Jul 2021 02:44:28 +0000
ROA not before:           Thu 29 Jul 2021 03:00:00 +0000
ROA not after:            Sat 29 Jul 2023 03:00:00 +0000
asID:                     278
IP address blocks:        132.248.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330621 (0x144dbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Jul 29 03:00:00 2021 GMT
            Not After : Jul 29 03:00:00 2023 GMT
        Subject: CN=20e79b66447162d47ee90285b269749df707f687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e9:d3:7c:19:d6:49:33:0f:06:98:bc:92:32:
                    22:ed:f2:1d:90:94:11:6a:85:03:1d:6f:c3:d5:13:
                    c2:3a:f7:32:ec:21:9d:b3:f2:58:52:93:ff:6a:db:
                    4f:b1:ea:0d:1e:43:17:d6:f3:56:f0:d3:34:59:bc:
                    dc:a7:a5:d9:4e:44:b1:15:9c:2e:0a:0c:f5:69:ce:
                    8e:dd:ec:dd:ba:18:18:fb:37:40:3e:95:ef:1e:c1:
                    74:a1:cd:02:56:5b:46:78:e8:82:c8:2f:41:4e:ce:
                    26:38:f8:28:ef:7a:b9:28:9d:23:c3:39:49:1c:1c:
                    cf:68:77:f0:36:48:44:04:1a:73:c5:38:09:e0:19:
                    a6:3b:c2:30:f0:99:dd:83:49:ca:19:42:9d:1b:7d:
                    0c:34:e1:48:41:ef:ed:9e:2c:7e:cf:c6:81:d8:a6:
                    40:4b:c8:ac:2b:af:d4:6d:4d:ce:b5:18:e6:34:d4:
                    81:6a:2b:92:a8:a1:dc:8a:aa:19:13:03:bf:1f:f0:
                    74:6c:c3:cf:24:53:74:d4:00:9b:93:07:14:aa:ab:
                    93:46:46:3e:b1:f4:67:45:03:e4:9a:6c:4b:26:00:
                    94:b8:19:af:77:ab:2a:c1:85:fc:42:9f:d1:6c:71:
                    dd:15:8e:c5:4f:8b:d8:6f:7d:bb:5b:f3:ee:3b:b7:
                    1f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AE:02:5A:2D:DF:B0:33:F1:6F:70:37:44:8F:5D:CC:73:E4:D3:A0
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/20e79b66447162d47ee90285b269749df707f687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:ad:7c:ec:18:1f:e5:17:05:5b:9a:06:bc:a9:1e:1e:70:98:
         98:a0:9b:da:a8:6d:2b:67:b6:7e:ad:45:a5:62:03:90:f1:f1:
         3a:30:61:c9:fc:71:c4:e5:15:de:47:47:e2:69:4c:c1:11:0d:
         2a:c5:b9:9d:a2:60:72:29:37:a1:f7:f2:3a:65:d3:2f:7b:b8:
         df:ed:54:50:ea:77:1a:b3:d8:32:e4:85:53:69:dd:c9:50:be:
         b7:ea:7c:8d:bc:75:14:38:65:43:ab:e7:4c:ab:01:db:8b:6e:
         77:d6:5f:8a:85:52:f2:f1:44:e2:df:a6:7f:f6:e0:71:61:03:
         49:f1:a4:58:82:c2:a5:33:2f:85:83:da:d3:a3:e6:c4:44:41:
         63:4c:e1:bf:5e:18:c5:d5:f6:3c:03:5f:a4:cd:c0:ec:7d:e5:
         fa:24:fb:1c:29:09:50:26:39:61:8e:d6:f2:bf:ad:ec:4e:63:
         25:55:ff:36:bc:b3:eb:9c:1f:e1:b1:da:28:49:3a:16:6e:c3:
         07:32:11:66:af:19:b1:ea:fa:3f:37:91:3b:bb:8e:29:f6:4c:
         f3:bd:d5:e4:52:02:db:29:da:a1:6c:00:e5:63:ea:f3:62:34:
         25:f4:16:4c:8a:fd:14:a6:c9:6a:8c:38:6b:59:d6:1d:bf:7b:
         fa:01:91:ec
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFE29MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwNzI5
MDMwMDAwWhcNMjMwNzI5MDMwMDAwWjAzMTEwLwYDVQQDEygyMGU3OWI2NjQ0NzE2
MmQ0N2VlOTAyODViMjY5NzQ5ZGY3MDdmNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5enTfBnWSTMPBpi8kjIi7fIdkJQRaoUDHW/D1RPCOvcy7CGd
s/JYUpP/attPseoNHkMX1vNW8NM0Wbzcp6XZTkSxFZwuCgz1ac6O3ezduhgY+zdA
PpXvHsF0oc0CVltGeOiCyC9BTs4mOPgo73q5KJ0jwzlJHBzPaHfwNkhEBBpzxTgJ
4BmmO8Iw8Jndg0nKGUKdG30MNOFIQe/tnix+z8aB2KZAS8isK6/UbU3OtRjmNNSB
aiuSqKHciqoZEwO/H/B0bMPPJFN01ACbkwcUqquTRkY+sfRnRQPkmmxLJgCUuBmv
d6sqwYX8Qp/RbHHdFY7FT4vYb327W/PuO7cfGwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEGuAlot37Az8W9wN0SPXcxz5NOgMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzIwZTc5YjY2NDQ3MTYyZDQ3ZWU5MDI4NWIyNjk3NDlkZjcwN2Y2ODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT4LzANBgkqhkiG9w0BAQsFAAOCAQEAcK187Bgf5RcFW5oG
vKkeHnCYmKCb2qhtK2e2fq1FpWIDkPHxOjBhyfxxxOUV3kdH4mlMwRENKsW5naJg
cik3offyOmXTL3u43+1UUOp3GrPYMuSFU2ndyVC+t+p8jbx1FDhlQ6vnTKsB24tu
d9ZfioVS8vFE4t+mf/bgcWEDSfGkWILCpTMvhYPa06PmxERBY0zhv14YxdX2PANf
pM3A7H3l+iT7HCkJUCY5YY7W8r+t7E5jJVX/Nryz65wf4bHaKEk6Fm7DBzIRZq8Z
ser6PzeRO7uOKfZM873V5FIC2ynaoWwA5WPq82I0JfQWTIr9FKbJaow4a1nWHb97
+gGR7A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org