Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f84800abff3fb5220af5e49b08e1483218c557cd.roa
File:                     f84800abff3fb5220af5e49b08e1483218c557cd.roa (raw, json)
Hash identifier:          5TwQggp2FqBYqkfuo4tbSoQhlBKhqQS/RAcxiiWK+pA=
Subject key identifier:   F3:5F:08:6F:82:C2:66:B6:97:C8:08:58:6E:E5:0B:40:BA:B8:D9:6E
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FB495
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f84800abff3fb5220af5e49b08e1483218c557cd.roa
Signing time:             Wed 24 Mar 2021 14:44:04 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029269 (0xfb495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=f84800abff3fb5220af5e49b08e1483218c557cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:72:19:db:b7:1b:97:06:cd:69:9b:94:06:d4:
                    1d:bc:a3:c0:aa:97:c0:e6:5f:b9:ef:49:00:7c:80:
                    29:22:7f:3c:65:6b:71:dc:88:dc:89:32:89:66:e0:
                    dc:65:ef:84:f4:bb:59:16:f2:a1:fe:01:69:e3:e2:
                    95:3c:b3:49:de:8c:63:3a:ed:d4:1b:78:ad:70:3d:
                    32:7f:f9:ab:19:fa:9a:2d:48:a2:30:04:ec:6c:28:
                    a2:62:2d:c5:5c:6d:5f:06:bf:a7:7a:e7:d6:c0:f3:
                    3c:6f:29:51:c3:6f:2b:09:e0:38:d9:bb:83:3c:a3:
                    71:16:70:e7:c8:54:1d:00:6a:3f:30:b6:65:1a:8f:
                    f6:47:3a:31:a0:09:74:86:80:96:2c:c9:d3:14:fb:
                    46:ba:a0:ac:63:a6:b4:88:15:a2:56:4b:17:b2:83:
                    0c:bc:e5:c3:ef:69:ca:25:a5:82:3a:7f:6f:aa:24:
                    3b:22:6f:04:0f:e5:91:b8:7c:a8:45:46:89:2c:c5:
                    3f:fc:90:e3:ce:01:01:30:22:fe:70:09:54:ac:60:
                    01:21:d1:e7:4a:6f:80:b8:c6:e2:21:7f:84:f9:24:
                    86:37:0c:ed:9c:c0:48:73:c3:22:cd:6f:48:47:b2:
                    4b:62:90:77:49:2f:45:72:2e:7f:72:78:d6:18:1c:
                    8b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5F:08:6F:82:C2:66:B6:97:C8:08:58:6E:E5:0B:40:BA:B8:D9:6E
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f84800abff3fb5220af5e49b08e1483218c557cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:19:8d:ad:6f:0b:4e:82:f8:1d:c4:c6:0f:b3:cc:be:aa:f0:
         53:2f:1c:09:08:93:25:ad:53:b1:2b:5a:64:2f:80:da:c8:5a:
         ab:bd:44:64:11:13:07:f1:a7:22:b1:e4:35:d2:ac:4a:9f:7b:
         4a:5c:0b:57:db:12:8d:78:50:69:ae:9d:e4:bd:9b:fd:2b:2e:
         d3:91:22:a9:d3:12:8d:e9:97:7d:4a:b6:24:ec:0b:bd:7b:ce:
         bd:f6:dc:92:41:d2:a7:91:de:b8:53:e0:86:1e:9e:e7:73:4a:
         d2:e8:3e:e6:7b:07:06:a0:64:22:99:35:a6:6c:aa:7d:aa:94:
         2e:b3:2f:44:fd:a9:12:76:bb:2b:75:9d:a6:ac:47:ff:e0:44:
         76:f0:3e:52:48:85:23:76:70:71:7a:7c:80:29:c6:af:08:36:
         9c:54:5d:d1:16:94:44:52:ff:3f:39:b7:31:b9:f7:02:54:20:
         48:c3:60:65:a0:fb:79:03:30:bc:40:0c:99:95:17:98:1a:6e:
         cf:2d:4b:fe:4f:47:5c:74:66:c2:7c:15:4d:06:74:96:ed:e2:
         8a:34:b4:18:7c:a9:aa:e1:38:aa:a0:27:e4:54:47:32:9f:97:
         10:26:8f:03:1e:97:2d:93:19:46:0e:47:f7:75:b1:63:3b:66:
         f6:92:1a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org