Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b33c04bd917aea4516e366586528f7245816065f.roa
File:                     b33c04bd917aea4516e366586528f7245816065f.roa (raw, json)
Hash identifier:          +95cgJWNHOK3wyvzh0XQTfTU5RS1XURCBSxeYChMR+8=
Subject key identifier:   71:19:FE:F4:14:A6:01:C3:7A:73:B1:66:AC:70:A7:0E:DB:71:CA:FD
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1D770C
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b33c04bd917aea4516e366586528f7245816065f.roa
Signing time:             Wed 08 Jun 2022 22:24:06 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Sat 08 Jun 2024 03:00:00 +0000
asID:                     278
IP address blocks:        132.247.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931020 (0x1d770c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Jun  8 03:00:00 2024 GMT
        Subject: CN=b33c04bd917aea4516e366586528f7245816065f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:3d:02:cf:fb:1c:21:45:1c:f5:6e:7c:93:
                    d8:2d:b6:aa:fd:77:fd:62:e9:68:f1:43:15:96:e8:
                    73:9a:94:5a:73:4f:ae:e2:9f:de:ad:a0:68:a1:2d:
                    f2:1b:08:fa:63:48:c2:b3:6e:35:1b:0e:81:1b:88:
                    c5:f1:05:ba:c1:65:a7:46:e3:6b:e1:a9:5b:f0:b0:
                    40:39:e1:4e:dd:68:b7:00:d9:ff:64:3d:a5:c7:1e:
                    cf:f8:01:2d:39:35:eb:0b:f0:49:10:c9:51:8c:6c:
                    e5:8a:df:02:79:18:cf:3e:7a:d7:55:d8:f6:fd:85:
                    d9:12:64:18:c6:89:a1:b3:d6:f2:f6:73:23:20:a0:
                    57:86:55:8c:64:33:07:45:53:a8:1c:a5:22:1b:16:
                    dc:41:19:ce:8a:99:2d:ab:0f:d1:f3:2b:dc:e3:92:
                    d0:f7:a4:5c:3c:85:f9:45:6a:e2:e4:ac:72:95:7b:
                    b4:89:95:9e:eb:d3:a6:9c:cc:2c:ca:1f:15:a5:7f:
                    74:ac:05:02:f9:d7:8b:08:e9:8d:67:98:15:20:fd:
                    8d:50:c3:5a:e7:27:16:41:87:83:4d:24:ad:e6:66:
                    a0:11:21:b4:54:7c:ea:1d:6a:1d:74:96:22:8a:98:
                    88:2c:2c:da:1e:ab:67:62:cc:7b:7b:27:4c:04:cc:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:19:FE:F4:14:A6:01:C3:7A:73:B1:66:AC:70:A7:0E:DB:71:CA:FD
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b33c04bd917aea4516e366586528f7245816065f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:1d:2f:c2:0b:b6:fd:5a:c9:7b:39:1b:c3:80:b5:b2:99:b7:
         2e:bc:f2:d6:c1:9a:5c:27:93:b1:de:6a:42:88:6f:a2:47:cd:
         90:b1:48:2d:9c:28:53:97:3c:b3:62:c6:eb:90:b3:87:7e:db:
         dd:60:96:27:c2:a4:ba:0c:4a:dc:12:2d:17:05:5b:d0:ed:88:
         8a:e2:06:4e:5f:b9:46:0e:21:8f:58:fc:7d:44:52:23:2a:a0:
         97:fc:4d:c3:a9:08:c7:46:a6:a6:6b:63:23:ca:39:d9:1b:f5:
         87:46:25:64:4a:88:1c:07:36:40:8e:7b:62:69:56:a3:c4:c2:
         e5:2b:e3:39:db:ad:90:6d:e2:7d:39:43:4c:fc:9d:58:02:11:
         5e:35:75:0c:98:40:44:0d:47:3d:b0:62:f2:91:d7:bd:e9:07:
         18:25:c9:6f:51:a6:df:12:01:78:ee:96:33:30:98:8d:20:9d:
         54:ca:5a:f0:0f:12:d0:25:9b:14:80:c5:d4:2e:e2:b8:86:41:
         84:56:de:cd:43:12:25:29:64:5c:c0:a0:9d:bb:39:ef:72:ae:
         1f:9a:3d:d1:8b:88:99:b5:2d:fc:49:d1:5a:b5:5c:f0:2c:29:
         78:6e:1b:54:ce:33:b3:c6:8a:5b:68:d0:9e:07:4e:07:62:35:
         87:84:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org