Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95f65ce4-9a25-414e-9c8f-929dcd4bb3e3/28de0eecf0149c0d7cab28fa4b2d8b91e9b2cbb8.roa
File:                     28de0eecf0149c0d7cab28fa4b2d8b91e9b2cbb8.roa (raw, json)
Hash identifier:          YbDJeLAuonZYwWRgu7CT3uWxiOuTPN9F5DLQj4xSi34=
Subject key identifier:   8A:09:BD:66:81:D9:EF:71:ED:F1:60:C9:73:43:1F:0C:C9:F3:F6:9F
Certificate issuer:       /CN=10414523dc5e73739c593d7cdb4e9a5952afc416
Certificate serial:       028E
Authority key identifier: F3:1D:ED:E1:71:40:E5:7A:E1:73:56:DF:BF:97:BD:23:74:36:A0:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10414523dc5e73739c593d7cdb4e9a5952afc416.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95f65ce4-9a25-414e-9c8f-929dcd4bb3e3/28de0eecf0149c0d7cab28fa4b2d8b91e9b2cbb8.roa
Signing time:             Thu 22 Apr 2021 13:14:59 +0000
ROA not before:           Thu 22 Apr 2021 03:00:00 +0000
ROA not after:            Sat 22 Apr 2023 03:00:00 +0000
asID:                     269757
IP address blocks:        45.182.143.0/24 maxlen: 24
                          45.182.186.0/23 maxlen: 24
                          2803:4560::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10414523dc5e73739c593d7cdb4e9a5952afc416
        Validity
            Not Before: Apr 22 03:00:00 2021 GMT
            Not After : Apr 22 03:00:00 2023 GMT
        Subject: CN=28de0eecf0149c0d7cab28fa4b2d8b91e9b2cbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f3:34:da:29:fd:12:3d:ab:11:a1:8f:bd:39:
                    d2:cd:f3:e3:06:99:13:30:6c:81:c4:33:65:d9:ec:
                    a0:aa:98:29:08:80:67:e6:bd:36:f8:81:b1:0f:50:
                    16:7a:7b:aa:3e:51:2e:5a:d9:de:01:59:75:73:61:
                    82:6d:7d:21:ff:3b:45:e1:96:39:e4:33:b3:31:28:
                    8e:19:26:26:b5:8d:c8:c0:e5:00:73:b1:85:03:b6:
                    61:c1:ba:0f:54:9d:a9:66:16:8e:49:4c:16:ed:e8:
                    2a:8d:74:e7:72:6b:16:b2:82:b6:a4:aa:7c:84:6c:
                    36:69:bb:b8:44:93:64:f3:dd:1b:88:62:e0:07:ca:
                    ca:31:c1:b2:10:ef:a7:4b:8c:bf:29:d9:53:f9:10:
                    ef:ea:d3:ee:2a:12:3f:14:6e:53:50:ac:6b:25:68:
                    fb:34:e9:2e:45:ca:c8:c7:a9:36:ab:5f:a3:aa:93:
                    f8:70:fd:2c:09:41:e9:c4:78:c6:71:b0:b4:eb:e3:
                    f6:f5:fc:9c:65:fc:c8:72:db:9b:9c:b8:3e:6a:bf:
                    35:00:96:0b:b4:9d:ab:c3:61:f8:6f:c0:a5:26:d5:
                    3b:e5:cc:1f:3c:87:6b:c5:6f:3a:3d:bc:9f:be:ad:
                    1c:32:4a:b7:0d:11:75:2b:5d:85:8a:e4:e9:f1:19:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:09:BD:66:81:D9:EF:71:ED:F1:60:C9:73:43:1F:0C:C9:F3:F6:9F
            X509v3 Authority Key Identifier:
                keyid:F3:1D:ED:E1:71:40:E5:7A:E1:73:56:DF:BF:97:BD:23:74:36:A0:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10414523dc5e73739c593d7cdb4e9a5952afc416.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95f65ce4-9a25-414e-9c8f-929dcd4bb3e3/28de0eecf0149c0d7cab28fa4b2d8b91e9b2cbb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95f65ce4-9a25-414e-9c8f-929dcd4bb3e3/10414523dc5e73739c593d7cdb4e9a5952afc416.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.143.0/24
                  45.182.186.0/23
                IPv6:
                  2803:4560::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:98:dd:50:56:68:58:37:3c:e8:64:20:ac:be:f2:75:c8:21:
         c0:b0:fe:98:bd:43:90:4f:53:e6:24:6f:80:6d:4d:45:8a:59:
         df:37:24:17:cd:be:01:cd:6d:b7:f1:28:e6:62:80:99:aa:6b:
         a8:fa:db:35:fc:83:d5:69:a5:93:72:20:27:87:8e:ae:66:ad:
         25:ba:37:9a:46:6f:6d:19:38:ac:54:38:15:cf:20:db:59:a2:
         ae:13:27:bf:16:ea:f3:a8:12:65:c9:32:ae:c8:e7:05:21:38:
         3d:f7:28:7c:02:7f:85:99:b3:91:8f:fc:59:67:00:59:d4:5e:
         c6:b2:d1:4c:06:04:1d:55:1a:7f:39:03:fc:27:30:d0:01:ba:
         ba:26:67:98:9e:29:a4:38:f1:fa:45:f3:b2:a5:b8:2b:07:b2:
         77:d9:33:e4:fa:b5:45:54:ec:dc:f9:43:d0:db:88:e9:32:d4:
         ae:8c:bb:00:e7:79:6a:c5:51:05:ee:14:58:db:28:a4:ef:98:
         d1:0e:14:20:8e:7e:51:89:da:fa:f4:97:b1:5d:40:10:33:8f:
         cb:0c:d1:52:2d:d5:ef:2a:40:22:04:b2:39:18:81:fa:bb:0b:
         3c:50:a7:8c:b4:4e:2c:7a:9d:54:ef:ef:74:be:aa:a2:78:28:
         6a:79:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-fra.rpki-client.org