Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95aafc61-2f63-4674-90b6-b116e4ccc566/761a6a2f8a3779979812c8c477d4f277652583ab.roa
File:                     761a6a2f8a3779979812c8c477d4f277652583ab.roa (raw, json)
Hash identifier:          CU0nk76GblxbRM6X6YdKKcKAgYEQhcJbajS09QqkVI8=
Subject key identifier:   C0:BC:6B:EF:F3:86:D1:BC:87:5F:6A:49:39:2C:DE:AF:0B:19:92:86
Certificate issuer:       /CN=07d51c51fa41f0daf492ff76adb2090700e83829
Certificate serial:       0D2B3B
Authority key identifier: 8F:84:92:6D:72:61:C7:12:D8:FB:27:75:83:4E:F9:E3:D6:D3:85:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07d51c51fa41f0daf492ff76adb2090700e83829.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95aafc61-2f63-4674-90b6-b116e4ccc566/761a6a2f8a3779979812c8c477d4f277652583ab.roa
Signing time:             Fri 30 Apr 2021 18:20:50 +0000
ROA not before:           Fri 30 Apr 2021 03:00:00 +0000
ROA not after:            Sun 30 Apr 2023 03:00:00 +0000
asID:                     52327
IP address blocks:        45.224.156.0/22 maxlen: 24
                          2803:220::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863035 (0xd2b3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d51c51fa41f0daf492ff76adb2090700e83829
        Validity
            Not Before: Apr 30 03:00:00 2021 GMT
            Not After : Apr 30 03:00:00 2023 GMT
        Subject: CN=761a6a2f8a3779979812c8c477d4f277652583ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:c0:ad:cc:ac:3b:ca:7f:6e:3f:b6:0b:a2:
                    6a:bb:08:55:87:fb:f1:72:50:63:16:1e:29:07:28:
                    c6:76:e2:8d:4f:e9:af:8c:8c:76:59:66:1f:d2:4d:
                    cc:b4:99:c2:a4:91:46:65:e5:a0:b1:9f:ad:e2:f4:
                    9e:15:aa:06:78:b5:b2:85:88:9c:4a:eb:c1:b5:de:
                    78:8e:29:4e:bb:67:6b:26:6b:6f:eb:d1:6d:02:39:
                    00:f9:c1:9c:94:a4:a2:d1:bc:b1:31:52:ab:d8:c0:
                    8b:8f:9a:ea:bc:12:f0:7f:e5:82:3d:bb:64:b3:c4:
                    b3:7a:93:e8:c7:6e:74:11:b9:f1:bc:22:cf:65:bc:
                    c0:db:72:b8:69:4c:cb:19:05:4d:8b:c4:f3:31:d8:
                    62:fc:7a:53:fd:e6:06:52:21:20:8e:34:ee:3e:c4:
                    75:c4:f7:27:a1:04:4b:fe:25:af:9b:f5:f2:df:88:
                    58:3c:1b:d0:bc:45:88:2c:77:78:4c:80:3f:0f:7b:
                    92:b4:24:78:c1:3e:95:4e:ef:a0:62:12:a0:83:cf:
                    b4:eb:f9:6f:f4:d2:60:86:fe:6c:33:f1:9b:a0:62:
                    29:c7:ae:53:b8:4e:4f:ff:1e:39:59:70:f5:16:a6:
                    27:63:8a:de:91:2a:9f:0a:d9:34:3f:7f:10:51:6d:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BC:6B:EF:F3:86:D1:BC:87:5F:6A:49:39:2C:DE:AF:0B:19:92:86
            X509v3 Authority Key Identifier:
                keyid:8F:84:92:6D:72:61:C7:12:D8:FB:27:75:83:4E:F9:E3:D6:D3:85:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07d51c51fa41f0daf492ff76adb2090700e83829.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95aafc61-2f63-4674-90b6-b116e4ccc566/761a6a2f8a3779979812c8c477d4f277652583ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95aafc61-2f63-4674-90b6-b116e4ccc566/07d51c51fa41f0daf492ff76adb2090700e83829.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.156.0/22
                IPv6:
                  2803:220::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:d8:b0:17:0f:31:6a:0a:21:b6:97:0e:94:49:e5:7a:df:8e:
         40:2c:d0:3f:96:aa:41:bd:03:c3:71:1a:68:6d:f1:51:76:57:
         3f:2b:91:5d:ef:5c:78:e8:a0:cd:6c:3e:e0:56:51:01:33:60:
         14:b2:37:43:00:fc:eb:a3:2d:99:0c:72:ca:5b:e0:eb:4e:79:
         20:57:9f:83:a6:e0:d8:82:b0:83:ba:f9:77:0d:3d:fb:b9:5b:
         7e:ac:f5:af:12:78:65:6b:1c:a6:38:08:fb:53:84:9a:21:87:
         27:af:40:28:ae:f6:aa:b3:08:52:4d:30:c5:51:23:05:a7:42:
         0e:df:83:00:30:55:8d:08:34:03:a9:71:35:2e:c8:0c:d3:d1:
         3c:0a:ac:69:55:88:03:61:a1:70:c1:cd:5a:e4:86:92:28:ce:
         f7:ce:77:39:dd:7b:a2:36:ac:3b:15:28:02:01:07:e3:dd:3f:
         ea:78:25:6b:8c:4b:89:ae:60:d1:dc:c1:3e:52:79:5a:f3:38:
         24:35:66:43:78:36:b0:d4:4b:52:dd:c5:de:02:bf:9e:ab:ce:
         f5:28:66:79:26:82:4b:34:12:96:c7:eb:2e:bd:07:59:6e:54:
         4e:69:7b:c4:4a:f8:62:b1:40:53:cf:00:c4:55:05:be:4b:98:
         66:45:a6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org