Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c92c18c1e5a27355a291eea020de051f8fe8e4b1.roa
File:                     c92c18c1e5a27355a291eea020de051f8fe8e4b1.roa (raw, json)
Hash identifier:          e5snCNSLk91ZoSOxwHP6IttYh5T/nF1bXDWcPD6caSE=
Subject key identifier:   93:91:6E:24:E0:EB:59:C6:AC:BD:F6:D5:D4:45:C1:BD:0D:9D:F7:F1
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       109F64
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c92c18c1e5a27355a291eea020de051f8fe8e4b1.roa
Signing time:             Wed 24 Mar 2021 14:44:23 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089380 (0x109f64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=c92c18c1e5a27355a291eea020de051f8fe8e4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:f5:2e:5f:97:1f:f5:96:e5:61:7e:ae:96:
                    3f:1b:de:09:75:7f:b4:64:1b:83:70:ce:bb:47:98:
                    bc:fe:74:9e:af:73:f8:0a:b7:11:78:27:73:b2:03:
                    de:ec:a0:31:2e:c0:91:11:64:ad:3a:15:9c:db:3e:
                    a8:45:11:2f:94:a3:ea:11:b4:97:05:1f:01:90:ce:
                    14:70:bf:b6:d4:ac:62:6c:2d:b3:ac:9f:dc:6d:f9:
                    26:c5:22:2a:c0:d5:ba:8d:ce:91:98:d8:42:1c:18:
                    7f:b5:61:55:ef:72:f7:b9:67:cb:cd:85:06:97:44:
                    3a:b8:20:5b:64:f0:f4:db:06:0c:96:86:b0:d9:88:
                    9c:c8:12:ed:e7:30:79:55:da:3a:c7:81:0a:99:94:
                    28:31:9d:f3:87:06:6b:75:c2:47:5a:9c:32:64:1a:
                    30:c9:c4:ae:b4:5c:63:fc:88:cd:6e:aa:9a:dd:37:
                    b2:35:0d:c2:b6:ec:55:4c:e5:cc:25:c7:23:0e:d4:
                    28:35:84:23:e4:a1:cd:c1:ea:88:cb:d0:f9:42:61:
                    37:05:4b:8a:64:91:2a:5f:aa:7a:44:20:56:c5:09:
                    51:9e:a8:29:7c:61:d7:af:ec:7b:ad:14:da:e0:74:
                    d8:00:07:10:ef:5c:c0:48:e2:03:c7:cf:a4:c1:3f:
                    dc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:91:6E:24:E0:EB:59:C6:AC:BD:F6:D5:D4:45:C1:BD:0D:9D:F7:F1
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c92c18c1e5a27355a291eea020de051f8fe8e4b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:ba:8a:3f:10:75:18:5a:b9:16:07:c1:5e:71:dd:ea:95:9a:
         89:23:32:ee:c0:33:60:7f:32:4c:52:da:48:23:3f:13:f7:a2:
         73:a4:d8:ca:fe:f2:e8:ce:a9:64:c0:52:29:7e:df:05:dd:86:
         14:4d:88:22:e5:05:ba:0a:74:0f:2b:b3:f5:0e:dc:42:4f:86:
         6d:34:65:c2:4b:2b:55:f0:d3:ec:40:16:b0:cc:10:9d:54:98:
         c4:fd:57:9f:cc:8f:db:13:50:a2:36:17:d7:55:3a:eb:2a:8d:
         51:c8:e3:fa:0a:51:00:13:3f:7f:79:ae:79:20:74:75:f6:c5:
         1d:8a:ab:df:d7:44:49:7e:f5:d8:bf:73:6f:09:fd:3e:d6:1c:
         7b:10:08:33:d1:b7:7a:7f:28:5e:28:67:9d:63:20:10:a8:fc:
         cb:d8:dd:35:cd:02:10:fb:d3:e6:99:89:e5:57:bf:dc:50:13:
         c1:51:39:34:98:ea:a7:ae:86:31:db:79:9e:ff:e9:6b:0a:9a:
         af:cd:01:14:0e:fb:57:a2:49:ff:bb:4f:9c:61:21:10:34:22:
         c5:e7:d1:77:6e:c5:51:9b:f0:cb:38:2e:e8:e7:07:51:b7:1e:
         fc:b3:6d:ea:7c:56:8f:a7:16:c2:d6:68:9b:ac:b7:b5:9f:59:
         9c:09:e9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org