Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/bae0d2a60c74e5b3da2ecb1c9a0c58c4461c0c17.roa
File:                     bae0d2a60c74e5b3da2ecb1c9a0c58c4461c0c17.roa (raw, json)
Hash identifier:          mCW3UvgYyYjRUiG9PHMLmEQ2kKj4gq6LJD5wTkglBFQ=
Subject key identifier:   F5:7D:01:40:0B:62:20:6F:75:A9:4A:10:35:D9:8A:DD:CA:48:47:EE
Certificate issuer:       /CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
Certificate serial:       0C7D69
Authority key identifier: EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/bae0d2a60c74e5b3da2ecb1c9a0c58c4461c0c17.roa
Signing time:             Wed 14 Apr 2021 04:44:45 +0000
ROA not before:           Wed 14 Apr 2021 03:00:00 +0000
ROA not after:            Fri 22 Apr 2022 03:00:00 +0000
asID:                     265621
IP address blocks:        45.176.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818537 (0xc7d69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
        Validity
            Not Before: Apr 14 03:00:00 2021 GMT
            Not After : Apr 22 03:00:00 2022 GMT
        Subject: CN=bae0d2a60c74e5b3da2ecb1c9a0c58c4461c0c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:b3:1d:1a:db:ce:c2:08:5d:e5:80:92:80:
                    ec:e3:f7:5a:f2:9c:c0:cd:3b:81:e8:c4:be:56:fa:
                    92:a4:a5:b4:f6:18:da:0f:6e:fa:be:46:e4:ac:18:
                    77:3e:bd:8d:a5:77:d7:13:57:43:90:65:6a:84:ab:
                    8b:4d:c9:4f:f4:f3:1e:50:03:75:0e:e7:96:40:ea:
                    73:9f:74:df:e4:81:c5:2f:03:c8:5e:32:9d:12:df:
                    17:f9:c0:73:49:76:9f:4b:bb:b7:bd:92:97:a3:be:
                    10:3c:11:0b:cc:86:a5:76:74:53:ff:08:03:19:f6:
                    3f:9b:5d:52:28:6b:1c:8b:01:01:ca:48:46:f3:fa:
                    9a:f2:59:bf:8b:7d:72:44:43:ba:47:f2:3d:01:16:
                    09:25:57:1a:fc:a6:4a:d0:35:8e:22:63:81:e9:c9:
                    41:e1:fd:e9:99:29:7c:1a:d3:1f:4c:e3:1a:1e:a1:
                    3a:8f:e3:5e:7b:fe:df:5c:f5:c4:4f:3f:61:57:cf:
                    f8:7f:3c:4e:8b:76:b2:59:32:01:1e:b0:98:54:4d:
                    51:30:56:73:bf:86:c7:7a:ee:30:d7:a9:ff:f1:e6:
                    e7:d0:a4:82:f8:8e:ac:e5:de:38:03:72:4a:d8:c6:
                    f7:1e:8a:d8:86:1d:6c:39:87:cd:4c:3e:a1:78:d5:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7D:01:40:0B:62:20:6F:75:A9:4A:10:35:D9:8A:DD:CA:48:47:EE
            X509v3 Authority Key Identifier:
                keyid:EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/bae0d2a60c74e5b3da2ecb1c9a0c58c4461c0c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:4d:16:2a:3b:d1:72:8d:06:1b:91:de:d1:79:1f:54:49:56:
         90:fe:7b:a1:43:f3:01:ef:e6:1b:32:6d:78:d0:5a:af:66:4d:
         dd:3c:57:00:4e:c0:b2:e5:c0:d9:24:fe:72:40:5c:89:41:d4:
         42:6f:e9:0f:ca:04:8a:68:2c:e6:10:ac:e8:8b:69:53:12:cf:
         0e:ad:16:0b:c4:07:0e:0a:91:05:0c:d1:70:46:92:b2:de:69:
         a3:cb:de:81:3c:0a:82:46:e6:38:ae:19:c5:89:92:b2:3a:11:
         05:a5:1d:31:21:e4:fe:57:1c:1c:98:e5:64:db:4e:76:1b:2d:
         4f:bb:b5:f0:2a:73:34:51:de:01:b1:d6:f4:e4:7f:dd:7f:27:
         99:fe:ca:6e:49:40:93:7e:77:e2:17:9a:1e:a3:7c:7e:d5:b1:
         8a:cb:58:fa:a4:09:80:54:13:f6:32:ec:b3:00:b2:10:7f:5a:
         39:2c:b4:75:1a:3b:89:16:c3:1d:9a:83:69:dc:fb:07:b1:9a:
         0b:b2:31:65:80:4a:ed:4c:0d:04:1f:82:42:95:70:84:8e:29:
         d1:62:c8:25:7d:da:11:94:5f:55:25:13:77:47:b1:f4:62:8a:
         2c:e1:50:45:f2:72:70:8f:06:cf:bf:58:a4:c6:cb:31:45:aa:
         d7:21:f1:dd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDH1pMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
OTQ0ODJlYTIzZjhhMzRkNGMyOGYwY2RkNDAzOGM2NDFlNjNiYmMwHhcNMjEwNDE0
MDMwMDAwWhcNMjIwNDIyMDMwMDAwWjAzMTEwLwYDVQQDEyhiYWUwZDJhNjBjNzRl
NWIzZGEyZWNiMWM5YTBjNThjNDQ2MWMwYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtcazHRrbzsIIXeWAkoDs4/da8pzAzTuB6MS+VvqSpKW09hja
D276vkbkrBh3Pr2NpXfXE1dDkGVqhKuLTclP9PMeUAN1DueWQOpzn3Tf5IHFLwPI
XjKdEt8X+cBzSXafS7u3vZKXo74QPBELzIaldnRT/wgDGfY/m11SKGsciwEBykhG
8/qa8lm/i31yREO6R/I9ARYJJVca/KZK0DWOImOB6clB4f3pmSl8GtMfTOMaHqE6
j+Nee/7fXPXETz9hV8/4fzxOi3ayWTIBHrCYVE1RMFZzv4bHeu4w16n/8ebn0KSC
+I6s5d44A3JK2Mb3HorYhh1sOYfNTD6heNUbxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPV9AUALYiBvdalKEDXZit3KSEfuMB8GA1UdIwQYMBaAFOuss2xa9YVEMgiW
gLMgsBm7KF6SMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWE5NDQ4
MmVhMjNmOGEzNGQ0YzI4ZjBjZGQ0MDM4YzY0MWU2M2JiYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOThmNzkwZGQtYWVhOC00YmNkLTk4OWQtOTAyZjUw
YTIxNThhL2JhZTBkMmE2MGM3NGU1YjNkYTJlY2IxYzlhMGM1OGM0NDYxYzBjMTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OGY3OTBkZC1hZWE4LTRiY2QtOTg5ZC05MDJm
NTBhMjE1OGEvNWE5NDQ4MmVhMjNmOGEzNGQ0YzI4ZjBjZGQ0MDM4YzY0MWU2M2Ji
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2wvzANBgkqhkiG9w0BAQsFAAOCAQEAd00WKjvRco0GG5He
0XkfVElWkP57oUPzAe/mGzJteNBar2ZN3TxXAE7AsuXA2ST+ckBciUHUQm/pD8oE
imgs5hCs6ItpUxLPDq0WC8QHDgqRBQzRcEaSst5po8vegTwKgkbmOK4ZxYmSsjoR
BaUdMSHk/lccHJjlZNtOdhstT7u18CpzNFHeAbHW9OR/3X8nmf7KbklAk3534hea
HqN8ftWxistY+qQJgFQT9jLsswCyEH9aOSy0dRo7iRbDHZqDadz7B7GaC7IxZYBK
7UwNBB+CQpVwhI4p0WLIJX3aEZRfVSUTd0ex9GKKLOFQRfJycI8Gz79YpMbLMUWq
1yHx3Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-fra.rpki-client.org