Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/889aca0c75d25a3163a31e82c7f530783d2ddde9.roa
File:                     889aca0c75d25a3163a31e82c7f530783d2ddde9.roa (raw, json)
Hash identifier:          jlhUsqWKhdb1v3/VvtzbBTReqRMdk8HDdhlbXh86clo=
Subject key identifier:   65:1A:F1:E1:E7:29:D4:96:8E:01:99:50:14:3C:68:40:F2:CC:EA:27
Certificate issuer:       /CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901
Certificate serial:       0CFC41
Authority key identifier: BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/889aca0c75d25a3163a31e82c7f530783d2ddde9.roa
Signing time:             Mon 31 May 2021 01:09:51 +0000
ROA not before:           Sun 30 May 2021 03:00:00 +0000
ROA not after:            Tue 30 May 2023 03:00:00 +0000
asID:                     267871
IP address blocks:        45.177.20.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851009 (0xcfc41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901
        Validity
            Not Before: May 30 03:00:00 2021 GMT
            Not After : May 30 03:00:00 2023 GMT
        Subject: CN=889aca0c75d25a3163a31e82c7f530783d2ddde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:0c:4f:e9:ce:b1:36:06:98:82:ef:53:cd:
                    f2:26:7e:4c:8f:33:0b:54:74:81:99:3c:5d:fb:1c:
                    45:b8:c0:1f:0e:0f:56:22:83:9e:8f:b3:2a:d2:c8:
                    84:01:9b:7b:a5:26:07:ee:12:0c:7a:f3:fe:8d:46:
                    31:a0:3b:3c:40:36:0e:dd:6e:96:88:b8:b5:3a:18:
                    e7:82:37:e1:93:dd:ad:a9:ee:8a:07:ec:ca:bc:7e:
                    07:a8:7f:0a:31:6e:b5:58:56:51:1b:c7:37:34:06:
                    25:2c:6c:c6:ad:10:49:41:47:66:34:84:80:a6:f7:
                    1e:f5:41:16:73:1c:da:1d:1b:2b:45:0d:f0:42:4d:
                    94:bd:a2:30:1e:78:31:c5:9f:79:69:cd:5c:9e:49:
                    a9:96:f6:62:a7:3d:ad:fb:fc:40:79:19:0a:e9:0e:
                    e8:4e:fa:eb:48:a2:d3:3b:80:b9:56:74:07:4a:35:
                    9e:ef:df:3e:ac:c0:10:a0:bf:6b:a8:a6:6b:ea:85:
                    ac:18:21:cf:0d:94:ac:c3:32:26:ed:ce:9b:ba:60:
                    38:36:5f:e1:fe:fa:dc:90:88:ec:77:7a:0f:4f:f0:
                    26:c7:3d:9b:53:98:57:93:a6:f1:d7:fa:34:b8:12:
                    0c:2a:85:9c:83:f6:27:f6:1c:9b:fc:34:60:2b:b6:
                    be:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1A:F1:E1:E7:29:D4:96:8E:01:99:50:14:3C:68:40:F2:CC:EA:27
            X509v3 Authority Key Identifier:
                keyid:BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/889aca0c75d25a3163a31e82c7f530783d2ddde9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:b3:e5:1d:02:36:8e:8e:78:63:8e:d2:d4:e3:f9:79:89:3f:
         2b:a9:4b:13:9f:74:81:b2:ff:40:7b:68:8b:7d:61:52:e5:d7:
         62:a9:67:ec:4f:bb:b5:aa:ef:39:cd:63:98:3d:b0:38:13:d9:
         b3:03:d9:ac:48:a2:a6:a1:c8:c2:3f:3f:58:c4:50:c2:b0:6f:
         14:ed:6b:99:82:9a:88:88:68:da:6b:7b:01:2d:35:0f:55:6c:
         23:4b:9c:8d:e9:c6:9f:1a:82:31:98:d9:ac:81:b6:46:33:f5:
         e2:57:5b:93:97:89:da:0d:0c:94:7b:23:f0:17:d9:79:99:1b:
         9c:99:bb:cf:a9:15:3d:d3:a2:b0:af:9f:3c:16:10:68:22:61:
         89:02:c9:e5:28:44:79:ae:b6:48:b1:1e:d9:6e:80:6f:a4:8b:
         a6:3d:7c:ce:67:63:03:28:09:8d:52:33:8c:a7:52:dc:7c:8d:
         18:10:1c:ab:64:d6:8b:10:71:fa:56:a9:47:8b:1e:04:25:d0:
         10:31:0f:fc:c3:d4:54:b7:17:e6:25:be:7b:e5:64:10:18:63:
         d7:7e:a2:60:53:b8:49:1a:5b:45:68:f9:8f:b9:e2:85:87:41:
         aa:a3:53:5a:08:8a:bb:29:ea:6e:a0:dd:eb:99:ba:80:ce:1e:
         ba:80:22:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org