Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e9d63a96dbce94bbb5878c0c3f29d3fdb87298ce.roa
File:                     e9d63a96dbce94bbb5878c0c3f29d3fdb87298ce.roa (raw, json)
Hash identifier:          8R7jHcBuGurr/qVlMXKp9mLrCjkRm6Kp7O0qRJhfiys=
Subject key identifier:   18:6C:83:51:76:07:A5:E4:84:F2:BD:A5:8F:A5:BF:CE:53:AD:72:9C
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10E635
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e9d63a96dbce94bbb5878c0c3f29d3fdb87298ce.roa
Signing time:             Wed 24 Mar 2021 14:44:27 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107509 (0x10e635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=e9d63a96dbce94bbb5878c0c3f29d3fdb87298ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:45:11:61:44:a9:02:61:ec:c3:45:9d:75:0a:
                    f2:94:21:0b:99:48:1d:90:8e:fa:dc:fe:82:d3:6a:
                    6c:ea:e8:f8:bd:f6:2a:15:9c:2f:d0:8b:5f:f2:cf:
                    42:94:a7:5b:47:e9:39:1d:79:ed:a2:64:98:2f:1e:
                    03:7d:83:80:32:6c:46:7d:0f:94:dc:9d:2f:77:e4:
                    3b:b3:d9:d7:3f:c2:09:43:52:08:45:a6:29:41:09:
                    ec:3a:86:20:41:85:ef:85:29:f4:7d:5a:82:0f:4b:
                    50:35:12:9b:c8:70:82:9d:f8:69:89:5e:17:ff:d7:
                    68:c8:55:7d:96:88:6b:f0:b8:07:e7:d4:3d:1a:9b:
                    33:c3:3c:68:66:cb:db:89:23:5d:b1:8e:2a:9d:6a:
                    2e:5a:16:79:1f:7d:13:66:75:2d:78:51:7f:51:5f:
                    4a:c4:0b:0c:3f:01:5a:68:1d:9d:d3:f4:3c:d3:99:
                    7a:f8:d9:0f:18:8f:8b:44:50:a6:3c:f7:98:aa:9e:
                    d4:88:b2:70:7b:5c:98:11:0a:d3:17:f0:c0:c4:bf:
                    38:20:fb:ca:15:58:a5:1e:40:53:49:d2:d7:38:19:
                    93:73:df:7b:cf:57:2a:ce:b5:de:d3:82:d7:00:df:
                    cf:1d:14:5b:37:c2:8f:a8:66:b8:e6:c3:d4:34:5c:
                    18:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6C:83:51:76:07:A5:E4:84:F2:BD:A5:8F:A5:BF:CE:53:AD:72:9C
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e9d63a96dbce94bbb5878c0c3f29d3fdb87298ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:58:6e:aa:29:6b:eb:35:75:40:62:4c:8c:21:45:bc:a5:68:
         91:0d:22:cb:00:47:85:91:23:96:45:e6:a6:ca:5e:4c:60:bd:
         0b:1e:44:e6:b5:f5:45:e5:d1:ad:7e:4d:dd:28:cf:cf:9f:e3:
         01:8b:9a:11:20:a6:c0:df:70:01:7e:d9:95:72:dd:1e:1a:f1:
         76:9c:e0:ed:89:52:2a:c0:9b:51:41:36:ef:e9:6c:26:7d:b9:
         99:bc:f5:b4:8d:6a:74:a9:0b:e2:63:19:5a:1b:ae:57:cc:5b:
         c8:11:24:f5:f6:de:8a:54:2f:ae:42:c9:fa:dc:88:de:02:f5:
         b6:a4:84:d6:f2:f0:a7:a1:52:9b:b8:5e:64:c1:24:73:cf:4d:
         2b:42:75:e8:30:6b:a4:4f:61:8f:98:fd:c2:68:32:cf:d7:09:
         ec:e3:e0:f2:8b:0b:87:52:1c:52:9a:3b:22:68:05:03:0d:3b:
         51:38:bd:cd:7b:45:92:7f:3c:a3:81:d3:bc:39:c6:04:f9:ee:
         af:3c:bf:9e:53:9a:30:b7:8f:55:e8:d2:5f:2e:49:08:cb:a4:
         20:09:5e:87:0d:bc:9a:53:7d:30:68:a4:33:71:e6:03:6e:bd:
         b6:8e:b3:60:bf:6d:05:c3:fc:0e:20:23:9a:85:c8:96:ad:be:
         e9:df:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org