Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/3712744bf8835d5323d4ae74411126fdfca31fd6.roa
File:                     3712744bf8835d5323d4ae74411126fdfca31fd6.roa (raw, json)
Hash identifier:          OmM/Lt+CEeah7ADCWgECSrVqthKfxdsguAFSY673Hmg=
Subject key identifier:   0E:BA:18:CE:D1:A6:7C:4D:B8:87:69:7F:8E:58:29:B6:B9:9A:29:45
Certificate issuer:       /CN=27dd18c956e9fcc73465d89de8aa38f3385acb6e
Certificate serial:       219B01
Authority key identifier: D8:FE:8D:3B:A1:29:B1:1B:12:17:DA:72:C8:A1:F2:E5:C8:25:6A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27dd18c956e9fcc73465d89de8aa38f3385acb6e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/3712744bf8835d5323d4ae74411126fdfca31fd6.roa
Signing time:             Wed 05 Jul 2023 01:51:45 +0000
ROA not before:           Tue 04 Jul 2023 01:51:45 +0000
ROA not after:            Sat 05 Jul 2025 01:51:45 +0000
asID:                     52468
IP address blocks:        164.163.132.0/23 maxlen: 23
                          164.163.134.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202369 (0x219b01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27dd18c956e9fcc73465d89de8aa38f3385acb6e
        Validity
            Not Before: Jul  4 01:51:45 2023 GMT
            Not After : Jul  5 01:51:45 2025 GMT
        Subject: CN=3712744bf8835d5323d4ae74411126fdfca31fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d3:58:6a:15:61:f3:77:e4:50:ee:60:7f:02:
                    f0:93:37:43:94:07:06:ce:86:28:7b:3a:f3:e1:8c:
                    8e:41:0a:d4:1d:bc:f3:3d:cf:d7:75:aa:51:cc:97:
                    d3:b1:74:f4:85:81:f1:3f:eb:68:73:04:d7:b9:6b:
                    04:0b:9b:7e:ae:a7:a1:76:4e:bc:e0:98:fe:f5:6d:
                    5e:b6:01:87:e8:bc:de:61:ef:71:ff:95:ad:b3:be:
                    34:3d:fa:d1:95:60:68:4e:2d:06:a0:ab:a5:52:50:
                    c9:07:aa:94:f2:b3:7b:ef:ed:cc:24:37:0d:31:c1:
                    06:d5:04:bd:37:da:0c:44:9a:3c:df:ee:21:b9:f7:
                    a3:ce:3a:9a:ec:8c:1a:dd:de:be:80:77:e7:c0:a3:
                    7e:83:d2:44:15:67:eb:dd:37:d0:8e:c6:b4:cc:1b:
                    63:e7:4c:0d:78:01:2f:11:af:13:19:fc:05:9f:bc:
                    f3:fc:6e:d0:c5:f9:8f:4e:8f:7b:2b:6c:72:97:11:
                    fb:6d:85:41:de:7f:53:7c:ba:b8:90:8f:68:e4:11:
                    07:1c:07:79:f9:f4:9b:03:da:c7:1d:63:f4:04:16:
                    71:50:a9:d4:56:3e:a6:b8:87:b5:26:ba:69:49:50:
                    48:41:c0:51:fa:d3:58:63:d8:bf:7f:05:a4:69:e4:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BA:18:CE:D1:A6:7C:4D:B8:87:69:7F:8E:58:29:B6:B9:9A:29:45
            X509v3 Authority Key Identifier:
                keyid:D8:FE:8D:3B:A1:29:B1:1B:12:17:DA:72:C8:A1:F2:E5:C8:25:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27dd18c956e9fcc73465d89de8aa38f3385acb6e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/3712744bf8835d5323d4ae74411126fdfca31fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/27dd18c956e9fcc73465d89de8aa38f3385acb6e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:35:87:07:cf:ab:2b:2b:30:1c:38:72:11:93:e3:66:d8:d4:
         cf:c9:ed:7a:63:9d:ca:09:94:cf:89:bc:3f:03:c4:9d:d4:13:
         a2:57:1d:7c:ab:7c:34:8f:25:51:e8:7f:1f:f5:82:85:fb:d1:
         e7:80:d1:b5:35:5a:65:02:82:fd:72:ea:97:03:89:d3:77:ef:
         30:cf:70:29:58:8d:de:fe:20:77:fd:45:18:09:49:f6:03:2f:
         ca:f7:49:0a:fa:6d:1d:2d:1f:73:84:a3:f6:20:d1:66:fe:16:
         b7:e6:47:c4:bf:6c:e3:cb:2a:96:c0:fb:54:b5:59:52:71:7c:
         f0:bd:f9:c5:d5:91:cf:5a:f1:a8:e2:fe:00:ec:aa:21:51:57:
         ca:93:89:e9:5b:4b:77:6f:70:fe:3b:35:14:84:da:bb:2b:8f:
         98:df:01:f5:89:24:86:e3:ab:38:84:6f:03:79:25:a4:28:c0:
         e1:82:84:19:56:46:42:e7:e2:da:0b:96:d5:90:d1:ae:9c:b3:
         b0:f1:3e:ce:b5:8f:20:56:f2:a9:b8:2d:59:91:5d:ac:71:e4:
         e8:68:b7:e9:65:49:83:05:e1:57:4a:b1:a9:15:eb:0f:d9:0b:
         78:17:0e:0f:c2:6e:e9:63:b9:9b:8e:d7:1c:66:d4:9e:c0:83:
         76:c8:28:9e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIZsBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI3
ZGQxOGM5NTZlOWZjYzczNDY1ZDg5ZGU4YWEzOGYzMzg1YWNiNmUwHhcNMjMwNzA0
MDE1MTQ1WhcNMjUwNzA1MDE1MTQ1WjAzMTEwLwYDVQQDEygzNzEyNzQ0YmY4ODM1
ZDUzMjNkNGFlNzQ0MTExMjZmZGZjYTMxZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkdNYahVh83fkUO5gfwLwkzdDlAcGzoYoezrz4YyOQQrUHbzz
Pc/XdapRzJfTsXT0hYHxP+tocwTXuWsEC5t+rqehdk684Jj+9W1etgGH6LzeYe9x
/5Wts740PfrRlWBoTi0GoKulUlDJB6qU8rN77+3MJDcNMcEG1QS9N9oMRJo83+4h
ufejzjqa7Iwa3d6+gHfnwKN+g9JEFWfr3TfQjsa0zBtj50wNeAEvEa8TGfwFn7zz
/G7QxfmPTo97K2xylxH7bYVB3n9TfLq4kI9o5BEHHAd5+fSbA9rHHWP0BBZxUKnU
Vj6muIe1JrppSVBIQcBR+tNYY9i/fwWkaeQwFQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFA66GM7RpnxNuIdpf45YKba5milFMB8GA1UdIwQYMBaAFNj+jTuhKbEbEhfa
csih8uXIJWoeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjdkZDE4
Yzk1NmU5ZmNjNzM0NjVkODlkZThhYTM4ZjMzODVhY2I2ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTRjYTYwYTMtMjA1NS00MGZkLTk0Y2MtMDlhZDg3
NDhhNGY4LzM3MTI3NDRiZjg4MzVkNTMyM2Q0YWU3NDQxMTEyNmZkZmNhMzFmZDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NGNhNjBhMy0yMDU1LTQwZmQtOTRjYy0wOWFk
ODc0OGE0ZjgvMjdkZDE4Yzk1NmU5ZmNjNzM0NjVkODlkZThhYTM4ZjMzODVhY2I2
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqSjhDANBgkqhkiG9w0BAQsFAAOCAQEAKjWHB8+rKyswHDhy
EZPjZtjUz8ntemOdygmUz4m8PwPEndQTolcdfKt8NI8lUeh/H/WChfvR54DRtTVa
ZQKC/XLqlwOJ03fvMM9wKViN3v4gd/1FGAlJ9gMvyvdJCvptHS0fc4Sj9iDRZv4W
t+ZHxL9s48sqlsD7VLVZUnF88L35xdWRz1rxqOL+AOyqIVFXypOJ6VtLd29w/js1
FITauyuPmN8B9YkkhuOrOIRvA3klpCjA4YKEGVZGQufi2guW1ZDRrpyzsPE+zrWP
IFbyqbgtWZFdrHHk6Gi36WVJgwXhV0qxqRXrD9kLeBcOD8Ju6WO5m47XHGbUnsCD
dsgong==
-----END CERTIFICATE-----
Generated at Tue Oct 17 20:29:14 2023 by rpki-client on console-fra.rpki-client.org