Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/430bd247641295b46a147c6b2492401185212395.roa
File:                     430bd247641295b46a147c6b2492401185212395.roa (raw, json)
Hash identifier:          c/+h4MDUkGlIXajCYBEhb+XWaWAcUZZ25sR32I7g+Qg=
Subject key identifier:   BE:C1:56:4E:B3:6C:D5:25:7D:05:5A:7E:FF:0F:2A:0A:43:F7:80:6E
Certificate issuer:       /CN=27dd18c956e9fcc73465d89de8aa38f3385acb6e
Certificate serial:       21BC0D
Authority key identifier: D8:FE:8D:3B:A1:29:B1:1B:12:17:DA:72:C8:A1:F2:E5:C8:25:6A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27dd18c956e9fcc73465d89de8aa38f3385acb6e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/430bd247641295b46a147c6b2492401185212395.roa
Signing time:             Thu 06 Jul 2023 19:23:23 +0000
ROA not before:           Wed 05 Jul 2023 19:23:23 +0000
ROA not after:            Sun 06 Jul 2025 19:23:23 +0000
asID:                     52468
IP address blocks:        164.163.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210829 (0x21bc0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27dd18c956e9fcc73465d89de8aa38f3385acb6e
        Validity
            Not Before: Jul  5 19:23:23 2023 GMT
            Not After : Jul  6 19:23:23 2025 GMT
        Subject: CN=430bd247641295b46a147c6b2492401185212395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:f8:fa:62:cd:bd:6f:59:6a:63:be:73:42:
                    10:66:02:01:a1:b0:92:49:ec:da:95:26:8c:27:ea:
                    09:bb:bb:8e:04:40:9c:51:d3:7e:ab:53:89:38:23:
                    a5:6e:5f:2c:8d:74:5e:4a:9b:01:78:19:9e:c3:4d:
                    1a:4a:94:a1:2f:63:83:4c:c6:4e:91:1a:84:8a:2a:
                    ae:c1:4d:8a:06:f8:64:2e:2b:f8:b3:73:34:c4:7e:
                    9c:33:d7:2f:82:de:ef:18:fd:c8:21:7d:b7:de:fa:
                    2e:27:86:40:05:87:b3:4e:7e:00:6c:17:2f:b2:44:
                    26:3c:6e:10:bf:c0:89:66:cf:f6:e3:bc:c2:c0:61:
                    63:1f:1e:e9:41:97:d0:c8:3a:cf:4b:d7:2c:55:21:
                    82:6a:df:f9:83:8d:51:92:65:19:ec:0e:f3:84:e4:
                    1f:f3:9e:dd:45:2c:4f:aa:f7:b9:66:ed:75:46:88:
                    ed:fa:64:48:45:db:fb:8a:d5:b2:ac:a1:5e:f0:62:
                    2f:e3:b2:84:46:b6:d9:31:0d:5f:64:5f:02:2b:e2:
                    5c:ff:0f:77:25:c4:b1:d5:2c:a5:cc:90:cb:21:f6:
                    9e:33:02:3f:a2:3b:c0:b4:69:60:03:43:54:95:02:
                    40:71:0d:50:dd:56:4e:c3:cf:2f:97:96:60:f5:3e:
                    1f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C1:56:4E:B3:6C:D5:25:7D:05:5A:7E:FF:0F:2A:0A:43:F7:80:6E
            X509v3 Authority Key Identifier:
                keyid:D8:FE:8D:3B:A1:29:B1:1B:12:17:DA:72:C8:A1:F2:E5:C8:25:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27dd18c956e9fcc73465d89de8aa38f3385acb6e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/430bd247641295b46a147c6b2492401185212395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/27dd18c956e9fcc73465d89de8aa38f3385acb6e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:d1:d5:8e:9f:5f:b6:fa:ef:b2:c0:e4:c4:93:ad:73:82:52:
         01:57:af:35:13:73:6a:80:76:ed:b2:21:ce:3b:49:ae:2e:56:
         89:fa:43:e0:e6:b0:63:bc:eb:cf:03:eb:83:2d:f0:1b:e8:d7:
         d8:15:8c:98:28:2d:6c:c9:dc:52:e3:ab:9a:23:4c:a3:09:5f:
         2d:49:c1:a9:45:d3:71:3f:21:af:06:9e:9d:3b:0f:09:a4:b4:
         66:52:ed:45:06:41:7d:db:37:ad:9e:37:96:08:d0:ab:e9:e3:
         95:05:f2:dd:08:87:de:37:3f:f5:67:c4:bf:83:e4:55:b4:70:
         49:34:d6:49:2e:bc:79:55:41:58:76:1b:cc:62:80:8b:0d:0b:
         68:38:07:1f:87:d0:a6:ee:9f:09:20:41:dd:25:21:1e:69:a2:
         7b:a7:b7:95:86:ae:4a:03:17:40:a8:9e:71:3d:62:67:dc:7e:
         1c:e7:23:fd:52:65:e7:b8:3d:4f:12:ce:f9:80:14:b7:2e:ba:
         58:43:2c:03:55:0a:47:8f:c3:22:4d:3d:3c:27:80:3b:25:cc:
         5d:99:e9:74:4c:58:6b:c4:2d:3e:80:d9:e9:1d:dc:73:6f:3d:
         a4:c7:12:11:bd:ec:66:8d:43:4b:3c:09:13:01:a3:87:ea:61:
         e1:40:9c:d1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIbwNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI3
ZGQxOGM5NTZlOWZjYzczNDY1ZDg5ZGU4YWEzOGYzMzg1YWNiNmUwHhcNMjMwNzA1
MTkyMzIzWhcNMjUwNzA2MTkyMzIzWjAzMTEwLwYDVQQDEyg0MzBiZDI0NzY0MTI5
NWI0NmExNDdjNmIyNDkyNDAxMTg1MjEyMzk1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApCP4+mLNvW9ZamO+c0IQZgIBobCSSezalSaMJ+oJu7uOBECc
UdN+q1OJOCOlbl8sjXReSpsBeBmew00aSpShL2ODTMZOkRqEiiquwU2KBvhkLiv4
s3M0xH6cM9cvgt7vGP3IIX233vouJ4ZABYezTn4AbBcvskQmPG4Qv8CJZs/247zC
wGFjHx7pQZfQyDrPS9csVSGCat/5g41RkmUZ7A7zhOQf857dRSxPqve5Zu11Rojt
+mRIRdv7itWyrKFe8GIv47KERrbZMQ1fZF8CK+Jc/w93JcSx1SylzJDLIfaeMwI/
ojvAtGlgA0NUlQJAcQ1Q3VZOw88vl5Zg9T4fmwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFL7BVk6zbNUlfQVafv8PKgpD94BuMB8GA1UdIwQYMBaAFNj+jTuhKbEbEhfa
csih8uXIJWoeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjdkZDE4
Yzk1NmU5ZmNjNzM0NjVkODlkZThhYTM4ZjMzODVhY2I2ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTRjYTYwYTMtMjA1NS00MGZkLTk0Y2MtMDlhZDg3
NDhhNGY4LzQzMGJkMjQ3NjQxMjk1YjQ2YTE0N2M2YjI0OTI0MDExODUyMTIzOTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NGNhNjBhMy0yMDU1LTQwZmQtOTRjYy0wOWFk
ODc0OGE0ZjgvMjdkZDE4Yzk1NmU5ZmNjNzM0NjVkODlkZThhYTM4ZjMzODVhY2I2
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKSjhjANBgkqhkiG9w0BAQsFAAOCAQEAONHVjp9ftvrvssDk
xJOtc4JSAVevNRNzaoB27bIhzjtJri5WifpD4OawY7zrzwPrgy3wG+jX2BWMmCgt
bMncUuOrmiNMowlfLUnBqUXTcT8hrwaenTsPCaS0ZlLtRQZBfds3rZ43lgjQq+nj
lQXy3QiH3jc/9WfEv4PkVbRwSTTWSS68eVVBWHYbzGKAiw0LaDgHH4fQpu6fCSBB
3SUhHmmie6e3lYauSgMXQKiecT1iZ9x+HOcj/VJl57g9TxLO+YAUty66WEMsA1UK
R4/DIk09PCeAOyXMXZnpdExYa8QtPoDZ6R3cc289pMcSEb3sZo1DSzwJEwGjh+ph
4UCc0Q==
-----END CERTIFICATE-----
Generated at Tue Oct 17 20:26:36 2023 by rpki-client on console-ams.rpki-client.org