Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ad1c8d4f34f08ae842fbd2f075f2d88382100dee.roa
File:                     ad1c8d4f34f08ae842fbd2f075f2d88382100dee.roa (raw, json)
Hash identifier:          GlmV/dkaJsqooCvGUfwVaN2SFtvYHjCKLuO1mC4LcOQ=
Subject key identifier:   DB:46:96:26:AC:A0:FF:CB:F9:EB:F7:E5:C5:4C:62:68:60:BB:BF:C3
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10F31E
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ad1c8d4f34f08ae842fbd2f075f2d88382100dee.roa
Signing time:             Wed 24 Mar 2021 14:44:28 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110814 (0x10f31e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=ad1c8d4f34f08ae842fbd2f075f2d88382100dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cc:af:26:b9:84:57:98:6b:98:7f:84:57:8f:
                    e2:27:f1:a0:f7:ba:51:34:1a:e8:b6:50:69:42:91:
                    19:9c:b8:ce:89:de:ee:42:ea:d9:ee:8a:1e:eb:86:
                    7b:a6:3a:33:00:f1:75:cf:6a:97:69:3a:df:69:a0:
                    da:79:e3:8d:9f:09:1f:1e:bc:0c:5c:ad:22:d7:64:
                    8c:fc:be:a1:7f:09:e5:18:1c:ee:52:9a:a3:ca:d6:
                    86:90:93:8e:2a:cd:5a:cc:16:9f:eb:91:23:19:a0:
                    df:79:a6:7c:b4:1a:e6:d4:fc:88:07:73:e0:5a:2f:
                    02:ff:69:19:51:73:82:94:26:d5:bd:c2:43:64:3f:
                    eb:3f:f2:91:52:a5:c4:ea:ed:41:2b:a3:d1:c2:74:
                    43:64:47:97:22:75:6b:d6:d1:cf:85:7a:14:c4:0d:
                    c3:ff:e7:6a:e7:20:8a:d9:79:d6:91:3e:60:52:0d:
                    ac:d9:1d:fb:2b:f8:34:15:20:4f:9b:6f:5e:2c:47:
                    79:e0:47:f8:0b:db:22:ba:38:9f:72:33:4c:8c:8f:
                    ba:a2:dd:75:7f:25:74:1b:08:27:72:16:29:c4:e3:
                    57:91:36:35:d9:cd:ac:bd:da:01:8f:6f:2e:c0:5f:
                    32:11:35:da:71:5b:4e:1b:a4:71:4d:7c:40:c1:06:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:46:96:26:AC:A0:FF:CB:F9:EB:F7:E5:C5:4C:62:68:60:BB:BF:C3
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ad1c8d4f34f08ae842fbd2f075f2d88382100dee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:fd:9c:2c:e5:fe:2c:0c:44:1b:9f:20:76:30:4e:42:32:32:
         a1:d0:48:1d:45:47:85:8d:3e:71:9b:8b:31:59:a7:43:4a:12:
         dc:a5:97:da:75:b8:9f:11:58:2d:1b:59:0d:30:5f:23:d7:f0:
         49:47:cc:5c:9e:61:10:04:cb:83:a6:50:6a:18:36:e1:96:14:
         1e:83:66:57:ad:1b:b2:6b:1f:db:d3:31:3b:77:1d:da:70:fa:
         90:73:45:2b:a2:c5:b8:8a:5e:ea:dc:05:64:ea:0c:d6:90:ec:
         98:0d:5f:15:e0:42:b9:da:9f:b8:9b:fa:ff:a6:eb:f8:8a:e1:
         a1:b1:59:4e:69:81:f2:9b:7e:41:9f:88:99:13:1e:f7:59:6c:
         e6:53:d1:cf:17:ef:c3:d4:e3:12:4d:35:70:85:61:34:49:4c:
         00:f7:da:61:f2:8a:56:29:cf:85:1b:25:72:4b:22:49:b9:65:
         14:96:b8:a9:38:ad:93:88:11:f6:81:4d:ce:e9:56:82:1b:3c:
         fd:16:89:67:6b:8b:43:bd:9b:3e:88:ba:d6:e1:3e:fb:3b:9a:
         2a:93:0f:59:6d:a6:46:20:e3:99:33:06:b6:1a:cc:8e:de:cc:
         a8:b3:86:f6:00:ed:27:9d:7c:cb:47:4f:c1:61:c2:c7:03:45:
         6d:42:1b:3d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEPMeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyhhZDFjOGQ0ZjM0ZjA4
YWU4NDJmYmQyZjA3NWYyZDg4MzgyMTAwZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhMyvJrmEV5hrmH+EV4/iJ/Gg97pRNBrotlBpQpEZnLjOid7u
QurZ7ooe64Z7pjozAPF1z2qXaTrfaaDaeeONnwkfHrwMXK0i12SM/L6hfwnlGBzu
UpqjytaGkJOOKs1azBaf65EjGaDfeaZ8tBrm1PyIB3PgWi8C/2kZUXOClCbVvcJD
ZD/rP/KRUqXE6u1BK6PRwnRDZEeXInVr1tHPhXoUxA3D/+dq5yCK2XnWkT5gUg2s
2R37K/g0FSBPm29eLEd54Ef4C9siujifcjNMjI+6ot11fyV0GwgnchYpxONXkTY1
2c2svdoBj28uwF8yETXacVtOG6RxTXxAwQb/UQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNtGliasoP/L+ev35cVMYmhgu7/DMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2FkMWM4ZDRmMzRmMDhhZTg0MmZiZDJmMDc1ZjJkODgzODIxMDBkZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT4/zANBgkqhkiG9w0BAQsFAAOCAQEAOP2cLOX+LAxEG58g
djBOQjIyodBIHUVHhY0+cZuLMVmnQ0oS3KWX2nW4nxFYLRtZDTBfI9fwSUfMXJ5h
EATLg6ZQahg24ZYUHoNmV60bsmsf29MxO3cd2nD6kHNFK6LFuIpe6twFZOoM1pDs
mA1fFeBCudqfuJv6/6br+IrhobFZTmmB8pt+QZ+ImRMe91ls5lPRzxfvw9TjEk01
cIVhNElMAPfaYfKKVinPhRslcksiSbllFJa4qTitk4gR9oFNzulWghs8/RaJZ2uL
Q72bPoi61uE++zuaKpMPWW2mRiDjmTMGthrMjt7MqLOG9gDtJ518y0dPwWHCxwNF
bUIbPQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org