Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/296b8d1970eba100554c0c0dca2113354cfb085a.roa
File:                     296b8d1970eba100554c0c0dca2113354cfb085a.roa (raw, json)
Hash identifier:          2yDdpalF758ZSYpG+D31FSxgO3TnqExfWAmdV1VG3ls=
Subject key identifier:   F7:CD:A3:09:F9:44:20:F3:C1:39:29:77:48:29:C6:CF:CD:53:94:78
Certificate issuer:       /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial:       139CB0
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/296b8d1970eba100554c0c0dca2113354cfb085a.roa
Signing time:             Wed 10 Nov 2021 14:33:47 +0000
ROA not before:           Wed 10 Nov 2021 03:00:00 +0000
ROA not after:            Tue 10 Nov 2026 03:00:00 +0000
asID:                     263774
IP address blocks:        170.83.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1285296 (0x139cb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Validity
            Not Before: Nov 10 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2026 GMT
        Subject: CN=296b8d1970eba100554c0c0dca2113354cfb085a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:33:19:86:3f:c6:a8:fc:e7:e8:08:56:56:
                    01:0e:55:06:61:fd:06:f1:a3:a2:22:e4:10:40:32:
                    83:0b:79:55:89:1e:51:59:9b:03:0a:87:66:f1:37:
                    21:ff:9e:cc:b4:7e:12:26:92:aa:6b:60:4f:99:bf:
                    32:ba:4c:44:52:4a:02:ea:2e:b3:8e:49:24:14:d9:
                    a7:33:27:27:03:de:ff:9b:3c:c5:0c:f6:03:bf:99:
                    f0:59:e2:79:8f:dd:c0:98:25:77:f9:c4:30:a2:a6:
                    06:7f:b5:a9:28:cd:94:b2:d9:34:f3:23:82:5e:32:
                    99:fe:55:4c:f4:2e:13:6e:c1:fa:c0:16:19:d2:a8:
                    5e:ba:e4:b1:ec:5c:79:fa:3d:72:45:0f:3c:f7:29:
                    01:c3:26:63:8a:6f:24:76:41:56:9f:31:5a:db:0d:
                    5a:d1:90:40:ba:a9:c7:90:0f:50:45:dd:a8:f6:3c:
                    7a:09:e4:cc:a4:a3:e1:9e:01:5c:22:81:6a:90:5d:
                    14:b0:ec:eb:55:53:19:c6:f1:1e:47:6e:72:c1:15:
                    39:07:d0:69:96:22:7c:21:32:ac:65:35:93:52:00:
                    85:7f:d1:09:5b:9e:30:ff:11:ef:08:58:b9:64:d6:
                    5d:a3:ab:08:34:5a:e8:e8:9d:79:79:34:f7:c6:4e:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CD:A3:09:F9:44:20:F3:C1:39:29:77:48:29:C6:CF:CD:53:94:78
            X509v3 Authority Key Identifier:
                keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/296b8d1970eba100554c0c0dca2113354cfb085a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:84:90:27:fa:e8:57:89:e1:b9:c5:e1:4b:f7:ea:be:58:fd:
         6e:48:7c:7c:b9:1f:36:a0:c9:b2:91:6f:c9:d4:48:eb:b4:76:
         3b:b7:cd:04:59:1d:56:fe:66:6f:c0:bb:b8:48:43:83:ab:63:
         42:14:48:9f:5f:0b:ba:7f:6d:ba:f8:ff:50:36:b7:65:98:0b:
         2f:aa:53:1b:8d:f5:ed:23:4e:03:c7:35:7d:24:8d:6d:bc:d3:
         85:4d:f8:9f:c0:d4:a4:b9:4d:b3:70:a1:08:e9:67:95:f7:55:
         43:59:9f:f3:9c:f2:97:f0:10:fa:85:b1:0e:08:8e:64:04:ec:
         0e:2b:ed:72:18:25:88:2a:40:1b:97:81:e5:cc:27:02:5c:6b:
         eb:b4:70:8c:d3:86:20:2a:6d:bb:53:bc:02:0c:78:51:31:de:
         eb:69:3c:58:6d:1e:9d:31:f8:53:c3:35:04:f6:d9:66:06:0c:
         56:03:da:d6:1b:43:07:a0:41:97:8d:7c:02:20:ab:94:19:e2:
         7c:ae:b1:ca:59:d0:28:31:d9:18:0b:98:a3:81:04:0a:4c:77:
         a9:aa:cc:5e:39:cb:13:e6:80:a6:1a:00:93:0d:6a:40:4b:f6:
         15:b2:5d:55:5c:e8:ba:04:1a:b9:f8:af:2a:8c:1c:ef:b5:e5:
         dc:6e:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 11:44:00 2023 by rpki-client on console-ams.rpki-client.org