Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/57c93bff7649c9ecc676ae5653044fb42c9ce0fd.roa
File:                     57c93bff7649c9ecc676ae5653044fb42c9ce0fd.roa (raw, json)
Hash identifier:          kaUvltyq2ywEBG9g5FFt2v+10XZ/aYPS49+rrgoS/qw=
Subject key identifier:   8E:2A:86:06:EE:CB:06:98:D5:F5:9D:0D:11:7C:44:1A:FC:A8:F0:91
Certificate issuer:       /CN=4e59ab85356d25d04ce88952ed51cf85fdedace6
Certificate serial:       03D2
Authority key identifier: C2:CF:29:05:77:4E:F7:C1:04:16:37:C3:5F:1A:CD:97:1C:CB:55:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e59ab85356d25d04ce88952ed51cf85fdedace6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/57c93bff7649c9ecc676ae5653044fb42c9ce0fd.roa
Signing time:             Wed 25 Aug 2021 17:37:20 +0000
ROA not before:           Wed 25 Aug 2021 03:00:00 +0000
ROA not after:            Fri 25 Aug 2023 03:00:00 +0000
asID:                     264622
IP address blocks:        143.137.244.0/23 maxlen: 24
                          143.137.246.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978 (0x3d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e59ab85356d25d04ce88952ed51cf85fdedace6
        Validity
            Not Before: Aug 25 03:00:00 2021 GMT
            Not After : Aug 25 03:00:00 2023 GMT
        Subject: CN=57c93bff7649c9ecc676ae5653044fb42c9ce0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:0f:7f:df:7f:f8:fa:7d:cb:7b:e6:ef:e2:
                    0a:90:36:6e:aa:00:b9:b9:34:0e:5e:33:83:43:44:
                    e8:a0:21:02:d4:b2:a9:45:24:46:ab:72:53:37:a5:
                    c3:47:3c:c7:24:08:4e:f5:1a:dc:00:71:c8:d2:40:
                    07:06:60:f4:93:38:19:40:91:aa:99:a0:ac:27:5c:
                    96:c8:fa:ce:bd:2b:0a:5e:b2:84:c5:3a:0d:55:9d:
                    39:6d:68:d6:ca:5b:cf:e0:a9:96:a2:2d:e9:a9:08:
                    c7:8a:ec:53:53:50:96:44:ea:1a:2b:5f:2f:d9:12:
                    07:b4:0d:39:f5:44:53:31:43:c6:40:ac:dc:43:69:
                    c3:39:20:52:04:ef:99:75:c4:c3:0e:7a:d8:27:b9:
                    9a:8d:54:7e:ef:34:76:a9:b3:23:3f:de:fd:1a:f6:
                    0d:3a:2d:58:69:be:d3:74:03:ce:93:00:0b:91:2e:
                    2e:5f:40:52:e1:12:db:ad:9c:a0:d4:95:28:31:5a:
                    80:56:d5:f0:db:18:27:18:39:06:37:05:d1:63:8e:
                    6a:dc:85:db:39:5c:52:d4:2d:f7:6b:b7:74:ad:e6:
                    19:9d:3a:ff:2d:e5:1a:cf:18:ab:e8:61:07:63:b1:
                    3d:9d:81:65:87:01:5b:0d:81:38:e9:5d:fd:1b:e2:
                    be:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2A:86:06:EE:CB:06:98:D5:F5:9D:0D:11:7C:44:1A:FC:A8:F0:91
            X509v3 Authority Key Identifier:
                keyid:C2:CF:29:05:77:4E:F7:C1:04:16:37:C3:5F:1A:CD:97:1C:CB:55:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e59ab85356d25d04ce88952ed51cf85fdedace6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/57c93bff7649c9ecc676ae5653044fb42c9ce0fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/4e59ab85356d25d04ce88952ed51cf85fdedace6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:53:76:96:8a:13:8a:74:7f:22:e4:7b:d9:74:fe:dd:ad:
         d2:40:3b:ba:6e:36:8d:88:1c:5d:94:8e:87:dc:34:90:99:e0:
         c2:e6:0b:df:a7:13:dc:d3:d7:5a:3a:20:a9:91:1e:ff:76:71:
         ff:ea:76:ef:09:8d:75:85:b6:25:08:db:96:f4:41:bf:39:1d:
         88:2d:a8:5e:8f:fa:18:26:eb:55:a5:6f:b3:0a:15:79:40:9f:
         86:ea:ca:d8:32:3d:65:d9:fa:e9:39:31:f4:bf:c1:79:8d:7c:
         7f:6e:1b:ad:b4:bf:2a:7f:91:26:18:84:0c:8e:20:64:d2:c9:
         a6:a5:07:27:b5:de:c4:a6:97:a7:6c:00:99:a5:b8:24:9e:83:
         df:7e:df:15:db:33:66:a6:f0:a2:1f:d5:5b:4f:3e:db:a2:a2:
         a6:87:d6:7d:22:cf:b7:7d:60:2e:94:74:46:a0:a9:64:27:b7:
         bc:41:d9:9e:41:6e:de:e8:f3:c0:82:8d:62:23:22:10:75:ba:
         99:99:90:d0:d8:ed:06:6c:b3:81:97:78:10:0e:0c:6e:d9:83:
         b8:d4:83:a5:39:8c:80:30:37:39:b3:60:62:71:47:c6:a7:d0:
         17:89:d6:67:25:6a:de:42:6a:f2:36:1c:ad:30:96:20:9a:7f:
         de:d2:2f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-fra.rpki-client.org