Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5aaf2b3dd1a147271b28a0d35d4eb4bf1b666f59.roa
File:                     5aaf2b3dd1a147271b28a0d35d4eb4bf1b666f59.roa (raw, json)
Hash identifier:          USH6uFloLaTo6nXvDj0wIll2diRL05H9rE7Tz0QsA6o=
Subject key identifier:   CD:63:23:E0:1E:A1:54:34:F2:CC:FC:70:25:8F:80:FE:68:14:A4:DE
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1D5752
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5aaf2b3dd1a147271b28a0d35d4eb4bf1b666f59.roa
Signing time:             Mon 06 Jun 2022 23:26:31 +0000
ROA not before:           Mon 06 Jun 2022 03:00:00 +0000
ROA not after:            Thu 06 Jun 2024 03:00:00 +0000
asID:                     278
IP address blocks:        132.247.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1922898 (0x1d5752)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Jun  6 03:00:00 2022 GMT
            Not After : Jun  6 03:00:00 2024 GMT
        Subject: CN=5aaf2b3dd1a147271b28a0d35d4eb4bf1b666f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:81:6c:24:d2:10:67:c1:75:17:57:50:47:3e:
                    c8:25:ee:2a:d7:6b:bc:64:7d:b1:37:3f:9a:8e:a3:
                    76:42:2e:e8:37:3a:40:96:19:17:1d:19:3d:2b:1e:
                    3b:84:2c:cf:50:93:9d:09:f2:1a:f8:36:28:f6:9b:
                    3a:1d:59:1f:91:be:a6:de:38:10:76:e3:56:3a:f7:
                    bd:86:b2:bb:2b:0c:4e:df:ea:5f:bf:25:49:c9:07:
                    5e:0f:24:c4:c0:7f:0c:a4:a3:01:20:1b:eb:73:df:
                    04:97:5c:9b:79:34:4a:85:9b:20:41:00:69:37:85:
                    f8:11:a2:a3:e9:72:b2:c6:7b:4c:7d:9d:6f:f0:85:
                    2d:b6:fe:c7:34:1f:ec:53:da:6d:4a:df:42:1d:81:
                    36:7f:6f:66:3d:bb:d3:b6:14:ca:3f:ef:b8:1c:6d:
                    e9:e2:af:8f:cb:89:f3:0a:bf:02:28:c5:5e:87:2b:
                    2b:43:a8:82:f6:62:76:9e:b4:74:86:51:4c:71:5f:
                    af:39:1a:73:89:b7:ca:8f:58:a5:92:50:6e:e6:62:
                    d0:f7:b1:c7:1f:32:2e:ab:8a:c5:27:c7:6a:29:39:
                    cc:f2:0a:3e:b5:ad:8d:5f:f3:a4:99:7b:66:08:2f:
                    2a:fe:47:3b:74:0a:ec:16:bc:83:f0:02:81:5e:ea:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:63:23:E0:1E:A1:54:34:F2:CC:FC:70:25:8F:80:FE:68:14:A4:DE
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5aaf2b3dd1a147271b28a0d35d4eb4bf1b666f59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:fa:19:36:02:8a:41:77:6e:e5:a2:89:f9:d7:01:74:15:c9:
         05:88:f9:e1:dc:ba:38:d1:a0:d3:06:c7:11:75:0e:8f:b7:79:
         cd:f0:5d:68:95:46:f0:d5:80:e5:4c:61:d1:6e:b5:fa:0b:75:
         14:68:8e:50:72:5e:e4:f0:ad:b8:9a:8f:56:c9:e6:44:32:0a:
         27:94:b4:c9:f9:3d:36:25:8d:be:fe:17:28:2f:31:19:75:d3:
         81:17:53:c3:c4:3a:5f:10:4e:83:4e:0e:d4:85:3c:bb:40:b2:
         c7:d9:86:ce:e6:4d:2d:a5:4a:b4:87:fe:33:2f:aa:f9:03:7c:
         56:89:c1:5b:2f:b2:23:f9:7d:fc:e7:d3:44:53:17:63:ff:0f:
         2f:c8:18:7c:cd:1d:fb:b5:ca:d4:43:63:f5:c6:75:26:61:66:
         f9:fc:b6:76:0d:70:02:18:eb:4b:2f:cc:62:b6:66:5e:65:39:
         db:13:8a:70:95:62:5b:6c:ed:a0:79:cc:b3:37:71:80:26:14:
         e1:80:bf:b4:24:6d:8c:ba:a5:56:de:ed:43:2e:38:bf:1f:ab:
         7d:0c:5a:e5:ba:c7:63:e6:0e:a1:71:13:ee:94:32:34:e4:77:
         39:4b:c6:5f:24:f0:63:35:f7:23:32:0a:7a:53:19:4a:11:56:
         dc:ad:21:24
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHVdSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjIwNjA2
MDMwMDAwWhcNMjQwNjA2MDMwMDAwWjAzMTEwLwYDVQQDEyg1YWFmMmIzZGQxYTE0
NzI3MWIyOGEwZDM1ZDRlYjRiZjFiNjY2ZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg4FsJNIQZ8F1F1dQRz7IJe4q12u8ZH2xNz+ajqN2Qi7oNzpA
lhkXHRk9Kx47hCzPUJOdCfIa+DYo9ps6HVkfkb6m3jgQduNWOve9hrK7KwxO3+pf
vyVJyQdeDyTEwH8MpKMBIBvrc98El1ybeTRKhZsgQQBpN4X4EaKj6XKyxntMfZ1v
8IUttv7HNB/sU9ptSt9CHYE2f29mPbvTthTKP++4HG3p4q+Py4nzCr8CKMVehysr
Q6iC9mJ2nrR0hlFMcV+vORpzibfKj1ilklBu5mLQ97HHHzIuq4rFJ8dqKTnM8go+
ta2NX/OkmXtmCC8q/kc7dArsFryD8AKBXuqs1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFM1jI+AeoVQ08sz8cCWPgP5oFKTeMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzVhYWYyYjNkZDFhMTQ3MjcxYjI4YTBkMzVkNGViNGJmMWI2NjZmNTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT31jANBgkqhkiG9w0BAQsFAAOCAQEAlPoZNgKKQXdu5aKJ
+dcBdBXJBYj54dy6ONGg0wbHEXUOj7d5zfBdaJVG8NWA5Uxh0W61+gt1FGiOUHJe
5PCtuJqPVsnmRDIKJ5S0yfk9NiWNvv4XKC8xGXXTgRdTw8Q6XxBOg04O1IU8u0Cy
x9mGzuZNLaVKtIf+My+q+QN8VonBWy+yI/l9/OfTRFMXY/8PL8gYfM0d+7XK1ENj
9cZ1JmFm+fy2dg1wAhjrSy/MYrZmXmU52xOKcJViW2ztoHnMszdxgCYU4YC/tCRt
jLqlVt7tQy44vx+rfQxa5brHY+YOoXET7pQyNOR3OUvGXyTwYzX3IzIKelMZShFW
3K0hJA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org