Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b0181ac54577640e0385f0fbc0c757caf79cb97e.roa
File:                     b0181ac54577640e0385f0fbc0c757caf79cb97e.roa (raw, json)
Hash identifier:          ZiaPhMIqyoToXkOKoll7jKnJGDI/rFlygz/IngmRCQU=
Subject key identifier:   B3:E1:11:10:88:CB:77:B9:48:75:57:9B:02:76:3F:41:24:AD:45:79
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       101E43
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b0181ac54577640e0385f0fbc0c757caf79cb97e.roa
Signing time:             Wed 24 Mar 2021 14:44:12 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056323 (0x101e43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=b0181ac54577640e0385f0fbc0c757caf79cb97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:35:75:dc:93:b6:1a:14:bc:be:aa:07:50:
                    67:b4:21:78:25:94:72:b2:68:7c:3b:c4:8f:ca:d0:
                    c7:02:80:70:85:a8:a4:bb:c6:93:a5:9a:44:ec:e0:
                    71:b0:34:0b:5d:a2:86:64:89:34:62:16:be:68:9c:
                    77:28:3c:16:78:d4:ae:dc:65:51:56:74:ca:27:58:
                    88:04:3c:05:2b:08:dc:36:da:fc:a0:db:9e:78:ef:
                    06:a6:3b:b2:f8:b4:e9:83:02:0a:c0:44:c1:b5:9c:
                    a7:13:be:3f:6e:e5:6c:0a:f4:5f:56:a1:58:27:18:
                    6f:69:ed:99:d0:d0:76:ee:88:ba:18:e0:63:38:6e:
                    3d:38:f4:46:7d:21:1a:17:af:01:c6:3c:b0:7a:ac:
                    35:5e:df:23:28:93:99:49:05:42:39:19:6b:cd:45:
                    e4:02:a1:d2:76:1c:76:75:22:e1:96:bf:44:14:a6:
                    2e:a5:7d:cb:92:3b:5f:2f:da:10:4e:65:b0:58:aa:
                    fb:02:c3:dd:b1:0c:d5:a2:23:65:0e:ab:80:5a:cd:
                    13:f0:42:6c:77:dc:c9:80:ac:1f:b2:b7:7d:8f:ea:
                    8d:24:ff:d2:1e:11:69:a0:29:9d:95:a4:ac:a4:c6:
                    2e:9c:88:53:56:0d:1e:66:ad:ca:d7:a3:5f:dc:34:
                    8a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E1:11:10:88:CB:77:B9:48:75:57:9B:02:76:3F:41:24:AD:45:79
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b0181ac54577640e0385f0fbc0c757caf79cb97e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:7a:fd:6e:90:72:c4:ae:ba:a0:cf:a3:1e:4d:f3:d0:42:78:
         d1:5a:c8:03:bc:9d:76:f2:31:20:76:8d:19:82:31:1a:22:29:
         f6:16:bb:a6:c4:65:ae:cd:41:d0:2a:f4:84:88:ef:cf:21:33:
         31:24:8a:e5:d8:fe:cb:58:12:8d:f0:38:9e:4b:2c:8c:4a:22:
         5f:24:11:0a:6d:21:3a:16:53:95:e9:2d:eb:0f:6e:63:44:5a:
         9a:f9:69:79:64:4e:a7:92:35:db:2a:ff:7b:f1:af:e2:b5:a7:
         3f:77:37:5e:73:bf:5d:2b:0e:1c:55:27:5c:06:91:08:45:96:
         96:30:e9:33:68:cc:c6:75:17:d6:48:03:5e:5b:67:6c:b4:cf:
         ee:44:2e:8d:92:0e:0c:fd:6d:1a:a1:fe:69:c9:88:16:b9:5b:
         76:b0:41:6e:22:b6:0f:1d:fc:54:6c:d3:41:3a:9e:36:f2:17:
         41:0c:8d:70:47:01:43:30:62:d1:7f:4c:8d:ec:bc:f9:dc:44:
         3a:b7:43:15:8c:24:8b:d0:a2:de:4a:62:59:96:2a:83:da:17:
         a8:ed:7e:da:bb:86:12:fb:7e:11:75:ca:39:cb:d6:a9:99:a1:
         11:c9:63:54:b9:7c:39:68:c9:bf:1a:5c:b3:5c:ee:fe:d7:61:
         ef:13:2b:95
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEB5DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyhiMDE4MWFjNTQ1Nzc2
NDBlMDM4NWYwZmJjMGM3NTdjYWY3OWNiOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkso1ddyTthoUvL6qB1BntCF4JZRysmh8O8SPytDHAoBwhaik
u8aTpZpE7OBxsDQLXaKGZIk0Yha+aJx3KDwWeNSu3GVRVnTKJ1iIBDwFKwjcNtr8
oNueeO8Gpjuy+LTpgwIKwETBtZynE74/buVsCvRfVqFYJxhvae2Z0NB27oi6GOBj
OG49OPRGfSEaF68Bxjyweqw1Xt8jKJOZSQVCORlrzUXkAqHSdhx2dSLhlr9EFKYu
pX3LkjtfL9oQTmWwWKr7AsPdsQzVoiNlDquAWs0T8EJsd9zJgKwfsrd9j+qNJP/S
HhFpoCmdlaSspMYunIhTVg0eZq3K16Nf3DSKrQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLPhERCIy3e5SHVXmwJ2P0EkrUV5MB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2IwMTgxYWM1NDU3NzY0MGUwMzg1ZjBmYmMwYzc1N2NhZjc5Y2I5N2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT3oTANBgkqhkiG9w0BAQsFAAOCAQEABHr9bpByxK66oM+j
Hk3z0EJ40VrIA7yddvIxIHaNGYIxGiIp9ha7psRlrs1B0Cr0hIjvzyEzMSSK5dj+
y1gSjfA4nkssjEoiXyQRCm0hOhZTlekt6w9uY0RamvlpeWROp5I12yr/e/Gv4rWn
P3c3XnO/XSsOHFUnXAaRCEWWljDpM2jMxnUX1kgDXltnbLTP7kQujZIODP1tGqH+
acmIFrlbdrBBbiK2Dx38VGzTQTqeNvIXQQyNcEcBQzBi0X9Mjey8+dxEOrdDFYwk
i9Ci3kpiWZYqg9oXqO1+2ruGEvt+EXXKOcvWqZmhEcljVLl8OWjJvxpcs1zu/tdh
7xMrlQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org