Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/9267e9b37b00e9526d501509a8b4407aabfde96d.roa
File:                     9267e9b37b00e9526d501509a8b4407aabfde96d.roa (raw, json)
Hash identifier:          reg7WVOSiEKCrZt/3hjPd6XdwCGlNrcAEIgwZRbLWGM=
Subject key identifier:   CC:0E:25:61:41:B9:D6:7F:E8:3C:22:A3:EC:E8:D3:29:76:14:BD:6A
Certificate issuer:       /CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Certificate serial:       0DCCDA
Authority key identifier: 2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/9267e9b37b00e9526d501509a8b4407aabfde96d.roa
Signing time:             Wed 24 Mar 2021 14:36:28 +0000
ROA not before:           Wed 24 Mar 2021 14:36:26 +0000
ROA not after:            Tue 24 Mar 2026 14:36:26 +0000
asID:                     52468
IP address blocks:        138.186.20.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904410 (0xdccda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cca422c9ff30980ab758c3310c2e40a2e836482
        Validity
            Not Before: Mar 24 14:36:26 2021 GMT
            Not After : Mar 24 14:36:26 2026 GMT
        Subject: CN=9267e9b37b00e9526d501509a8b4407aabfde96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:86:52:cd:07:5c:9d:93:1f:f7:55:28:dc:
                    84:76:cf:ea:cc:59:b0:93:df:fd:e1:49:fb:1b:76:
                    5e:5d:a2:69:78:a3:a0:09:4e:0f:a9:0a:74:c8:fb:
                    e3:df:1d:ef:65:96:b9:f7:cd:83:43:9a:64:ed:0b:
                    5e:57:99:6f:93:d0:49:a5:3c:84:2f:6a:21:b5:62:
                    ed:c1:1f:43:18:fa:63:59:46:b8:72:40:ee:02:1b:
                    04:ee:b7:a6:37:ee:e9:4e:c3:a1:9d:8d:40:2a:80:
                    72:18:57:72:74:a3:c5:4a:c8:c5:63:32:03:44:4c:
                    b0:24:50:d8:8e:ae:81:45:f4:04:12:90:ec:42:7a:
                    c7:37:f2:86:a6:b8:f3:8c:30:13:d0:6e:44:90:88:
                    a7:3b:13:04:d0:58:99:7e:aa:b0:4b:d4:8f:42:65:
                    53:9f:89:df:66:82:16:fa:55:02:57:89:74:66:ee:
                    ec:a5:13:92:19:4f:41:72:89:20:9e:49:f7:08:a5:
                    2d:50:9d:b2:c9:b5:c3:66:65:ac:e2:fe:b5:9c:31:
                    fa:d1:67:6a:f6:96:f3:68:a6:ef:e8:23:0d:fb:7a:
                    2c:8b:3e:6e:bc:d3:c2:a0:26:aa:94:03:13:0e:f7:
                    c6:9d:23:5a:a2:ae:83:6e:4b:ac:d5:c5:bb:7c:18:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0E:25:61:41:B9:D6:7F:E8:3C:22:A3:EC:E8:D3:29:76:14:BD:6A
            X509v3 Authority Key Identifier:
                keyid:2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/9267e9b37b00e9526d501509a8b4407aabfde96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:57:b0:58:c7:4d:17:8e:49:05:00:16:fa:04:44:ca:f8:31:
         03:cf:52:9e:c7:6e:c7:43:2c:0b:f1:dd:ea:ed:74:5b:e7:68:
         c4:ac:3b:24:2e:4d:11:d1:7c:72:b3:59:83:01:41:46:a1:9f:
         ef:6c:89:9e:f2:5b:7d:0d:05:37:70:47:24:f8:14:8e:6f:77:
         01:44:53:04:e2:94:f7:05:de:c7:98:5d:00:a4:07:24:f7:78:
         8b:61:c8:2f:70:19:49:48:f7:7a:bd:e2:f7:c6:10:3a:41:69:
         f7:03:11:91:b6:01:3f:d1:cd:e4:dd:52:12:68:ef:09:51:ae:
         04:bc:86:2a:bb:0a:32:ee:2f:8c:61:3b:02:b4:0f:3f:4a:6e:
         7f:31:8b:11:9f:0f:f5:17:f8:8a:f3:b7:6e:28:fa:3f:6c:1e:
         48:02:a4:5d:1e:0d:13:b8:e0:fa:43:18:ec:0c:f3:02:c4:c6:
         f0:e7:db:15:be:59:df:a2:84:98:02:52:31:78:42:fe:6c:59:
         36:98:f6:91:d9:1f:c7:46:59:64:ea:c0:83:b8:da:5f:73:84:
         1e:68:45:32:37:e1:82:0f:ce:9d:4b:0e:ce:04:5e:ad:b6:19:
         5b:3a:a0:cb:86:2e:96:d3:70:ea:f3:d8:51:e3:61:7f:0c:af:
         6e:f6:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org