Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9b77a236cc83155310cf64efcb612c232d1e1943.roa
File:                     9b77a236cc83155310cf64efcb612c232d1e1943.roa (raw, json)
Hash identifier:          3g6hLEl1VLlgHZUJCfvNAP7r1QO5m4JbOUcqw1HMKbg=
Subject key identifier:   94:59:39:FC:2F:6D:E3:86:D2:AE:CB:73:72:2F:D5:14:96:9E:7F:9E
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FD924
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9b77a236cc83155310cf64efcb612c232d1e1943.roa
Signing time:             Wed 24 Mar 2021 14:44:07 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038628 (0xfd924)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=9b77a236cc83155310cf64efcb612c232d1e1943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b0:a6:26:15:fa:87:ce:a2:de:87:81:d2:bb:
                    5c:43:48:a0:c6:c5:51:5a:f3:a6:be:2b:77:09:33:
                    79:ad:d4:e3:08:63:62:d8:78:79:32:11:1f:71:8f:
                    a7:99:11:a6:9d:5a:22:45:36:8d:70:c9:90:32:bf:
                    8d:3b:31:be:13:fa:7a:8f:bd:b5:51:05:ab:47:d4:
                    a4:38:a5:10:db:6f:98:f2:8f:b7:53:d0:e4:e5:ac:
                    1e:8a:38:2c:1b:3f:47:30:ef:18:1a:a1:9d:56:17:
                    43:cf:48:6f:8c:1b:94:00:7f:dc:cd:6f:61:ec:df:
                    ab:ef:71:78:5d:42:7d:15:54:4a:84:a0:d7:2f:7b:
                    64:c9:13:e2:9f:d6:b7:0b:c0:43:30:04:95:8a:8a:
                    fd:d6:04:46:17:d9:0a:9e:67:a0:7f:4f:43:bb:72:
                    ea:f6:63:6b:96:de:66:2e:a0:2e:a3:3e:6d:87:9d:
                    c2:a0:86:79:f6:fe:48:15:cb:2f:95:03:1d:01:43:
                    b6:09:4f:ae:50:75:02:b2:e8:1d:c8:28:cf:53:00:
                    c3:be:fd:bc:d2:df:6c:a0:89:c8:2e:2a:13:ae:19:
                    38:7c:af:3c:99:23:07:7f:5a:61:4b:da:43:fb:f7:
                    c2:9f:da:0a:de:4a:53:0f:86:3f:8f:11:fa:51:48:
                    d1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:59:39:FC:2F:6D:E3:86:D2:AE:CB:73:72:2F:D5:14:96:9E:7F:9E
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9b77a236cc83155310cf64efcb612c232d1e1943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:f8:f6:9d:e9:de:4e:23:1c:c4:bd:c7:ef:b7:8b:6f:2b:55:
         26:5a:29:a5:ce:49:8d:77:8a:50:82:47:07:23:d0:e5:63:94:
         1d:9b:1c:52:fd:84:62:dd:d6:4c:3b:39:d0:f8:df:a4:25:1c:
         fc:a2:d4:6a:67:33:57:0e:c9:37:85:d7:42:ce:30:07:c0:65:
         7d:19:9f:97:c3:0f:ba:e1:c5:4c:5e:08:c0:30:5e:85:ea:0d:
         90:a5:24:95:12:a1:46:a1:69:79:10:36:9c:ac:06:d1:c1:ba:
         fe:89:c3:97:67:a8:61:db:42:97:65:e7:21:dc:14:d6:e8:57:
         f2:fd:47:15:70:18:11:5c:b6:a5:3f:a9:e6:30:23:f9:1c:b4:
         1c:b5:59:18:6c:6d:ce:a5:fc:44:45:82:9a:98:cf:19:62:22:
         38:36:34:63:f3:35:61:5e:55:54:01:23:fe:b9:33:07:9e:a1:
         32:86:8b:01:5f:30:82:19:e4:91:e3:99:21:b7:17:28:6d:44:
         f5:1b:9b:52:b6:35:af:ae:53:3a:38:2a:50:c8:13:95:36:b8:
         33:8b:8e:2b:62:f6:ba:6c:f3:07:88:d3:e9:ca:4b:c2:1e:14:
         4b:b4:f5:d3:04:8a:d3:ad:57:c1:91:f1:51:90:1a:2d:1b:88:
         b7:cd:01:67
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDD9kkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyg5Yjc3YTIzNmNjODMx
NTUzMTBjZjY0ZWZjYjYxMmMyMzJkMWUxOTQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm7CmJhX6h86i3oeB0rtcQ0igxsVRWvOmvit3CTN5rdTjCGNi
2Hh5MhEfcY+nmRGmnVoiRTaNcMmQMr+NOzG+E/p6j721UQWrR9SkOKUQ22+Y8o+3
U9Dk5aweijgsGz9HMO8YGqGdVhdDz0hvjBuUAH/czW9h7N+r73F4XUJ9FVRKhKDX
L3tkyRPin9a3C8BDMASVior91gRGF9kKnmegf09Du3Lq9mNrlt5mLqAuoz5th53C
oIZ59v5IFcsvlQMdAUO2CU+uUHUCsugdyCjPUwDDvv280t9soInILioTrhk4fK88
mSMHf1phS9pD+/fCn9oK3kpTD4Y/jxH6UUjRPwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJRZOfwvbeOG0q7Lc3Iv1RSWnn+eMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzliNzdhMjM2Y2M4MzE1NTMxMGNmNjRlZmNiNjEyYzIzMmQxZTE5NDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT4XTANBgkqhkiG9w0BAQsFAAOCAQEAxvj2neneTiMcxL3H
77eLbytVJloppc5JjXeKUIJHByPQ5WOUHZscUv2EYt3WTDs50PjfpCUc/KLUamcz
Vw7JN4XXQs4wB8BlfRmfl8MPuuHFTF4IwDBeheoNkKUklRKhRqFpeRA2nKwG0cG6
/onDl2eoYdtCl2XnIdwU1uhX8v1HFXAYEVy2pT+p5jAj+Ry0HLVZGGxtzqX8REWC
mpjPGWIiODY0Y/M1YV5VVAEj/rkzB56hMoaLAV8wghnkkeOZIbcXKG1E9RubUrY1
r65TOjgqUMgTlTa4M4uOK2L2umzzB4jT6cpLwh4US7T10wSK061XwZHxUZAaLRuI
t80BZw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org