Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/ad8377b4932ea089f2decec7561ab3ec027832c2.roa
File:                     ad8377b4932ea089f2decec7561ab3ec027832c2.roa (raw, json)
Hash identifier:          9NoT74zPVnPuaZb2uw4YK9w8NLDW/oY0SCbBUALUNJA=
Subject key identifier:   92:E2:A0:FB:D7:39:37:CB:21:97:03:95:C5:57:6C:E4:AB:0A:1F:C6
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       1BA35B
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/ad8377b4932ea089f2decec7561ab3ec027832c2.roa
Signing time:             Tue 13 Dec 2022 07:30:00 +0000
ROA not before:           Mon 12 Dec 2022 07:30:00 +0000
ROA not after:            Wed 11 Dec 2024 07:30:00 +0000
asID:                     269862
IP address blocks:        168.194.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1811291 (0x1ba35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Dec 12 07:30:00 2022 GMT
            Not After : Dec 11 07:30:00 2024 GMT
        Subject: CN=ad8377b4932ea089f2decec7561ab3ec027832c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:78:7f:34:2a:2e:b5:08:1e:7b:19:cb:96:
                    4c:3b:8c:f6:6b:36:8b:b5:f0:8c:1a:e6:8b:f8:0a:
                    cb:f1:a9:90:7e:44:02:02:7c:25:e3:d9:f0:c2:d6:
                    2e:c9:8d:f8:45:fd:15:d7:b4:3a:54:6c:a6:cb:cc:
                    a6:8f:ae:73:74:69:07:14:67:e2:69:2f:55:0d:10:
                    b7:a8:d4:a3:ab:ce:de:76:1e:d6:9a:cd:00:ba:c5:
                    6b:87:f0:b8:6d:39:53:1d:dc:b1:4a:e1:f3:51:51:
                    cb:25:11:65:5a:eb:94:36:68:d5:1c:2d:e6:24:3a:
                    fb:c6:f9:f8:e8:1b:fd:99:75:f8:ab:cf:d3:92:5d:
                    5f:9f:ff:c5:80:3c:a2:d7:ab:c8:1b:d4:97:49:f3:
                    3b:e5:87:0e:a6:df:5d:b6:4e:02:69:73:6b:0f:81:
                    46:47:ce:79:be:c1:01:f3:ea:1e:40:b7:77:a8:52:
                    a6:cf:85:6b:d3:93:b5:28:2a:8d:a5:0b:5e:ea:21:
                    f5:0a:c4:39:69:6b:4a:db:03:e7:ee:e5:c2:10:f1:
                    74:c1:03:a8:2c:b5:1d:3d:be:c2:8b:18:06:6d:3f:
                    06:6d:51:9f:96:c6:cc:ff:30:7b:d6:fa:a2:a7:2e:
                    44:88:80:b9:f2:21:1e:80:96:f5:21:65:44:a9:70:
                    58:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E2:A0:FB:D7:39:37:CB:21:97:03:95:C5:57:6C:E4:AB:0A:1F:C6
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/ad8377b4932ea089f2decec7561ab3ec027832c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:e3:59:30:a4:37:ab:d9:f7:8f:fa:5a:81:8d:7b:14:65:c5:
         c8:7f:42:19:dc:c9:b8:8b:ad:8d:01:a8:6c:3a:e7:2d:ea:a8:
         11:43:ff:cf:35:95:27:e1:e8:08:5c:e0:df:55:0f:19:f6:d7:
         06:4d:96:3e:f8:93:83:8c:88:ef:9c:a0:d6:90:32:e7:a9:4b:
         74:8a:63:42:37:59:cd:de:88:41:b8:d1:d0:4f:3b:d7:08:e6:
         e2:83:0b:c0:84:07:50:73:83:bf:d0:19:72:01:91:60:0b:6c:
         46:29:85:9c:ed:ef:fd:5f:c6:34:04:90:5e:56:aa:6b:5b:19:
         69:08:00:11:a8:5b:5c:96:d9:27:8b:c3:10:9b:dd:f7:07:78:
         67:df:10:aa:03:8e:55:fd:65:33:3f:15:91:29:ad:1f:a1:d2:
         df:18:75:bb:26:7c:ca:1b:62:88:cc:39:0a:75:27:4b:50:f7:
         96:c5:81:77:53:b0:db:48:6c:2d:b8:a6:59:78:2f:bf:86:2f:
         1f:d0:f1:6d:5e:ed:ac:84:dd:7f:2e:f6:8a:41:00:76:74:cd:
         37:e3:00:c7:1f:0d:a9:c0:d9:01:bf:18:18:7b:fa:39:ea:f1:
         8e:61:ab:ef:3e:15:c8:db:14:60:10:78:0c:10:b8:b5:e1:d7:
         37:18:6a:f8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDG6NbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZi
Y2M4ZGVkNDBiYzI0OTM3YTJhZTRmYjdhNTIxYmQzODhlZTAyNGIwHhcNMjIxMjEy
MDczMDAwWhcNMjQxMjExMDczMDAwWjAzMTEwLwYDVQQDEyhhZDgzNzdiNDkzMmVh
MDg5ZjJkZWNlYzc1NjFhYjNlYzAyNzgzMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtYB4fzQqLrUIHnsZy5ZMO4z2azaLtfCMGuaL+ArL8amQfkQC
Anwl49nwwtYuyY34Rf0V17Q6VGymy8ymj65zdGkHFGfiaS9VDRC3qNSjq87edh7W
ms0AusVrh/C4bTlTHdyxSuHzUVHLJRFlWuuUNmjVHC3mJDr7xvn46Bv9mXX4q8/T
kl1fn//FgDyi16vIG9SXSfM75YcOpt9dtk4CaXNrD4FGR855vsEB8+oeQLd3qFKm
z4Vr05O1KCqNpQte6iH1CsQ5aWtK2wPn7uXCEPF0wQOoLLUdPb7CixgGbT8GbVGf
lsbM/zB71vqipy5EiIC58iEegJb1IWVEqXBYiwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJLioPvXOTfLIZcDlcVXbOSrCh/GMB8GA1UdIwQYMBaAFIFE0O4gQeqqO3rX
w05lAvlvq/hcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmJjYzhk
ZWQ0MGJjMjQ5MzdhMmFlNGZiN2E1MjFiZDM4OGVlMDI0Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODRjNjM3YzYtYWE3OS00MTQxLTg5MWUtNjhkYzBh
OTA2YTE0L2FkODM3N2I0OTMyZWEwODlmMmRlY2VjNzU2MWFiM2VjMDI3ODMyYzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NGM2MzdjNi1hYTc5LTQxNDEtODkxZS02OGRj
MGE5MDZhMTQvZmJjYzhkZWQ0MGJjMjQ5MzdhMmFlNGZiN2E1MjFiZDM4OGVlMDI0
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKjCqDANBgkqhkiG9w0BAQsFAAOCAQEAWONZMKQ3q9n3j/pa
gY17FGXFyH9CGdzJuIutjQGobDrnLeqoEUP/zzWVJ+HoCFzg31UPGfbXBk2WPviT
g4yI75yg1pAy56lLdIpjQjdZzd6IQbjR0E871wjm4oMLwIQHUHODv9AZcgGRYAts
RimFnO3v/V/GNASQXlaqa1sZaQgAEahbXJbZJ4vDEJvd9wd4Z98QqgOOVf1lMz8V
kSmtH6HS3xh1uyZ8yhtiiMw5CnUnS1D3lsWBd1Ow20hsLbimWXgvv4YvH9DxbV7t
rITdfy72ikEAdnTNN+MAxx8NqcDZAb8YGHv6OerxjmGr7z4VyNsUYBB4DBC4teHX
Nxhq+A==
-----END CERTIFICATE-----
Generated at Fri Oct 20 05:27:53 2023 by rpki-client on console-ams.rpki-client.org