Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/7b2c7d1c952a9f14cce0d500e0532648e615e3cf.roa
File:                     7b2c7d1c952a9f14cce0d500e0532648e615e3cf.roa (raw, json)
Hash identifier:          cwZHCDpoIRPZgB01fXY3oyIR9D4VqYXpkAGEFiArwiE=
Subject key identifier:   30:0A:96:CB:D6:59:F2:BF:70:89:43:C8:34:32:D8:18:4B:1E:4C:2B
Certificate issuer:       /CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
Certificate serial:       1C4F65
Authority key identifier: 5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/7b2c7d1c952a9f14cce0d500e0532648e615e3cf.roa
Signing time:             Tue 03 Jan 2023 18:56:46 +0000
ROA not before:           Mon 02 Jan 2023 18:56:12 +0000
ROA not after:            Fri 03 Jan 2025 18:56:12 +0000
asID:                     267811
IP address blocks:        45.169.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855333 (0x1c4f65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
        Validity
            Not Before: Jan  2 18:56:12 2023 GMT
            Not After : Jan  3 18:56:12 2025 GMT
        Subject: CN=7b2c7d1c952a9f14cce0d500e0532648e615e3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:87:d1:97:c3:6d:64:9c:f5:a3:af:16:a4:08:
                    e2:e2:51:13:32:14:28:a9:32:7a:d3:c5:b6:4f:96:
                    b2:6a:78:00:c5:b9:28:46:ea:3f:81:c8:0c:20:e1:
                    9d:06:59:ed:b3:ea:e7:b7:02:83:48:ea:ac:76:76:
                    ea:dc:9e:51:54:02:f2:5e:92:79:22:1d:eb:5d:c0:
                    22:ec:16:38:ef:33:54:3f:e9:f2:3c:a8:3d:d6:24:
                    50:60:78:df:d1:e5:67:aa:ba:3d:e4:01:46:e8:c1:
                    36:2e:f3:cb:d8:ee:7b:3d:c8:42:79:47:2d:ec:42:
                    08:d8:27:d0:73:17:49:bd:97:b1:87:3a:3c:ff:95:
                    01:38:8b:28:a1:35:ee:90:fd:62:0e:0b:6a:11:07:
                    a8:02:c7:83:49:85:b5:bc:9f:41:ad:5a:a0:65:5e:
                    a2:cb:b0:7b:c6:c9:ab:b4:dc:ed:e0:d8:d9:9a:84:
                    6d:ae:90:5e:ba:b0:16:19:4a:ab:76:ab:df:75:ff:
                    25:88:61:42:32:8a:06:1a:52:6c:c0:f8:7f:2f:1c:
                    38:50:89:95:22:11:53:b7:26:da:47:a3:2f:89:5b:
                    f0:4f:1c:3f:cb:35:fa:c3:f6:f1:fc:64:83:9d:4a:
                    a2:06:dc:27:ef:d1:65:54:06:b9:3a:d4:42:b9:e6:
                    7b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0A:96:CB:D6:59:F2:BF:70:89:43:C8:34:32:D8:18:4B:1E:4C:2B
            X509v3 Authority Key Identifier:
                keyid:5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/7b2c7d1c952a9f14cce0d500e0532648e615e3cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ba:cd:c0:48:61:61:3d:61:b1:28:d4:53:a1:35:16:80:56:
         51:ea:b6:62:11:f2:bc:8f:a9:b0:1b:f7:f8:a5:28:ab:a8:6d:
         69:67:ea:7b:12:9d:a0:69:92:69:db:ec:a3:1a:21:d4:1f:1d:
         aa:36:38:3c:ab:7f:66:5a:bd:4c:88:f9:55:71:b9:13:10:5f:
         8b:22:64:7a:48:be:21:98:50:61:d7:13:03:27:c6:21:bd:ea:
         b6:60:c9:19:bf:8b:a4:38:69:31:63:d7:25:a6:b4:cd:62:f3:
         92:dc:13:65:c6:e5:a7:19:5f:1a:3e:c4:c4:8e:f8:6a:64:13:
         27:dc:3a:ab:98:a3:75:3c:1d:a9:9f:c7:74:76:25:d6:86:17:
         8b:7a:9b:6c:3e:38:cf:fb:6e:bc:da:ee:af:da:3c:6d:29:95:
         9a:e5:0c:c8:19:5e:ed:a3:e5:b2:2c:be:27:cc:ff:cd:c3:f8:
         a8:07:53:dd:d2:ff:91:45:31:c1:a3:3c:df:fb:fd:ec:55:47:
         41:b6:b7:cb:7d:e7:73:b6:bf:35:05:60:24:21:d3:87:0a:5b:
         30:e0:29:74:f4:7b:44:c2:e7:4d:1a:91:fc:33:a1:c6:c6:bc:
         08:96:fc:52:05:5d:e4:b7:d1:d1:6d:ea:a8:32:a6:2a:b2:4e:
         58:aa:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 18:46:47 2023 by rpki-client on console-ams.rpki-client.org