Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/79a233b4d74913ded3e4b78e97e4471675837a47.roa
File:                     79a233b4d74913ded3e4b78e97e4471675837a47.roa (raw, json)
Hash identifier:          Axaa2Z0UVNkgY1suBMePtxDpwxPZKWB/FlTOx+fgClk=
Subject key identifier:   AF:B3:10:8C:29:7E:FB:AE:31:91:EB:09:E0:6C:37:CF:E5:BC:00:65
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FB5B5
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/79a233b4d74913ded3e4b78e97e4471675837a47.roa
Signing time:             Wed 24 Mar 2021 14:44:04 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029557 (0xfb5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=79a233b4d74913ded3e4b78e97e4471675837a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e3:98:e4:85:6e:d9:19:e6:77:3c:f2:52:31:
                    50:69:70:0f:66:5c:e7:58:02:28:16:65:ed:3a:eb:
                    5a:67:d6:28:e2:38:7c:2d:15:2c:97:8d:60:98:b1:
                    c5:3e:89:b8:15:51:52:ca:5b:08:15:77:ea:60:b5:
                    fd:50:51:44:ee:f7:e1:ce:30:1c:06:51:b0:27:2b:
                    37:b8:93:c2:68:95:62:a8:3b:58:4c:59:2c:11:f0:
                    15:64:6c:a6:b8:1d:57:ff:94:6c:5c:8b:96:25:60:
                    1b:f9:fe:16:72:5d:47:4e:09:48:25:a7:b4:f9:6c:
                    99:b4:c2:7e:5b:94:26:bc:85:02:dc:96:d2:fb:e0:
                    93:1b:c2:89:13:36:4f:5e:af:23:5a:40:af:54:9d:
                    47:8e:93:73:33:c9:ec:c7:92:4a:77:30:f9:85:c3:
                    b8:44:16:09:65:26:3d:c1:c7:d3:f8:cb:26:01:c1:
                    5c:b7:b8:af:61:80:45:87:1e:84:8b:03:53:8d:4b:
                    37:fe:7a:72:6e:93:ad:58:0e:a8:72:c6:1f:53:6a:
                    bb:e2:99:43:de:49:ba:e5:32:51:ec:a5:dc:34:c5:
                    13:ba:88:0d:89:16:89:63:af:7a:2e:d2:8a:15:45:
                    76:a1:08:f3:3b:a6:92:af:9d:f1:2c:d4:21:b1:45:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B3:10:8C:29:7E:FB:AE:31:91:EB:09:E0:6C:37:CF:E5:BC:00:65
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/79a233b4d74913ded3e4b78e97e4471675837a47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:4c:a6:08:0c:71:93:45:b1:fe:09:bc:b5:2c:a2:f5:9f:28:
         62:8b:b3:93:d6:74:d0:fa:0a:42:28:eb:50:a3:59:26:a1:00:
         a6:76:ab:4b:ab:12:63:e3:50:93:6c:c7:1a:6f:cf:fc:78:51:
         2d:87:0e:9a:af:d0:45:9b:fb:69:d6:e3:77:57:d6:b4:8b:10:
         70:e5:1d:6b:1f:02:93:6a:a8:24:90:93:d6:44:2b:7f:1a:79:
         62:ee:6f:9e:9e:75:8d:98:0a:c4:45:6e:74:28:b4:9a:92:8c:
         67:a7:de:f5:7f:fb:46:4f:4b:e9:a9:1a:66:1c:e1:b2:96:ca:
         86:2e:64:b4:98:98:e5:7a:5a:3f:ec:3b:94:72:0c:6b:29:63:
         37:ec:68:21:52:80:93:65:9d:47:8c:64:bf:c5:7b:38:6e:de:
         f3:84:19:ac:5e:6b:cf:cf:62:57:c6:ce:53:8f:32:66:9b:44:
         ec:fa:f6:b8:65:f6:24:77:09:3d:df:96:64:c4:1e:e2:0c:4f:
         b3:2b:80:70:bd:90:3d:e3:83:c2:ad:ad:14:0f:92:35:36:e3:
         bf:39:53:41:27:7c:57:d5:1b:10:c0:93:9a:d0:68:ea:43:de:
         bd:ed:d2:bd:ca:dd:09:0f:6d:f8:8f:12:76:d3:ec:8f:d2:96:
         18:fe:05:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org