Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e4ef49c95ee5c2d5f331cb187b67381052b2057e.roa
File:                     e4ef49c95ee5c2d5f331cb187b67381052b2057e.roa (raw, json)
Hash identifier:          3t1+XwJGS462AXiqOSzTBD0uBnlN1BqU/MqFLPs1fcM=
Subject key identifier:   EF:68:7C:0C:EF:2E:69:A1:41:3C:1D:3A:D8:90:8E:BC:E3:31:04:9C
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FF5DE
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e4ef49c95ee5c2d5f331cb187b67381052b2057e.roa
Signing time:             Wed 24 Mar 2021 14:44:09 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045982 (0xff5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=e4ef49c95ee5c2d5f331cb187b67381052b2057e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:d2:8a:ec:59:a7:49:c9:e3:e9:c5:c8:43:
                    af:7d:ab:e5:da:ca:b9:22:0b:00:05:2f:23:7d:06:
                    12:e6:7f:f8:d1:05:08:3f:e8:ed:f7:b6:45:6c:ff:
                    34:6b:5f:e6:21:f3:d6:bc:29:56:16:fa:5d:60:2d:
                    47:d0:71:d5:9f:a7:fa:65:9d:fa:f2:4f:2d:8a:58:
                    0b:d4:63:ce:b9:df:26:52:3a:66:62:7c:86:25:3a:
                    71:0d:fa:d8:6f:55:39:de:93:15:b2:ef:a0:b0:ac:
                    e1:d0:0e:9e:fc:e3:2c:eb:ec:30:0c:4d:60:8b:bf:
                    73:9e:fc:fa:21:63:68:79:fe:a6:7b:b9:87:66:a2:
                    cb:1a:e1:11:ed:fd:a3:a5:5e:5d:65:10:48:91:6c:
                    67:98:20:15:40:e6:f7:a4:16:fc:8c:4f:16:91:90:
                    e3:11:9e:a6:18:d1:e0:82:7f:2a:19:96:b2:9c:73:
                    48:fb:bb:c1:a1:40:70:2b:9f:0b:62:14:a4:22:4e:
                    2f:79:53:e8:a9:a6:26:df:6e:33:4b:6a:d5:87:c1:
                    9b:f5:da:d8:24:02:a2:89:d5:ce:70:75:01:49:f2:
                    aa:60:42:d3:d7:a5:a6:7c:16:c4:19:09:41:68:0f:
                    8c:c4:03:84:ab:8a:69:ba:49:08:7b:5e:59:7c:8e:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:68:7C:0C:EF:2E:69:A1:41:3C:1D:3A:D8:90:8E:BC:E3:31:04:9C
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e4ef49c95ee5c2d5f331cb187b67381052b2057e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:43:d8:0d:ba:b4:29:3c:74:78:2a:fc:f7:d8:a4:ae:30:16:
         2c:d3:b7:2a:7f:dc:a7:8c:d2:4f:6c:16:ce:52:95:32:61:d2:
         e8:17:8b:95:a5:c7:90:c5:41:71:72:5a:5d:68:5a:c6:13:a3:
         a8:bd:ca:4b:bb:a4:11:4e:1e:27:4f:c1:72:54:76:63:9c:30:
         e0:55:d3:09:0e:f1:3a:5a:82:2f:5a:c3:98:5c:2b:c9:05:3a:
         ba:9d:73:c6:73:ea:d1:58:58:fa:bf:d3:de:9e:a0:1f:e5:df:
         98:e0:79:54:36:ac:b0:33:be:da:5b:16:2e:1b:d7:34:44:77:
         25:54:1d:c7:5c:77:17:af:f2:fb:8e:3b:40:e4:49:ab:f0:87:
         46:24:bf:7f:6e:58:f9:84:63:72:83:6c:78:80:b6:ba:08:f9:
         19:14:5e:cc:a2:40:8b:1d:24:00:91:6b:06:16:05:7f:08:56:
         d6:84:e8:ff:b8:72:7e:0b:2d:12:ff:03:16:97:36:e9:50:68:
         b5:4c:49:50:28:e9:55:d0:87:14:9e:46:4e:af:a0:12:df:e2:
         be:0f:b3:86:5a:a9:56:5a:e3:b1:0e:38:77:ac:5a:27:f4:cf:
         19:e5:c7:29:28:40:2c:0b:09:5d:45:36:2b:92:53:3d:dd:68:
         d4:20:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org