Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/91fd609905f802b096e4e0a7df23f7e199e82f3a.roa
File:                     91fd609905f802b096e4e0a7df23f7e199e82f3a.roa (raw, json)
Hash identifier:          1iNG72bxih2n36xucHm3+21x4d3lJeE1t8nHJn2os3I=
Subject key identifier:   1D:3C:D3:EF:07:FF:E2:CB:17:E0:08:6D:1C:2A:3F:49:BB:F5:1D:6A
Certificate issuer:       /CN=0cec7209b9057d239c9d724b057b75899fa702cf
Certificate serial:       0D4E09
Authority key identifier: 71:95:E8:00:FE:E5:80:94:51:D8:B9:24:9B:B0:31:69:CC:89:39:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cec7209b9057d239c9d724b057b75899fa702cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/91fd609905f802b096e4e0a7df23f7e199e82f3a.roa
Signing time:             Wed 24 Mar 2021 22:50:41 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     265815
IP address blocks:        201.182.148.0/24 maxlen: 24
                          201.182.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871945 (0xd4e09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cec7209b9057d239c9d724b057b75899fa702cf
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=91fd609905f802b096e4e0a7df23f7e199e82f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:7d:87:33:8b:10:22:d2:cc:9e:db:1a:e3:
                    3d:17:56:bf:3c:2c:7e:07:b6:d1:c9:da:6f:36:ad:
                    e2:9e:33:05:b3:3c:77:26:5f:e6:28:71:92:66:5c:
                    fa:4a:ab:a2:0e:2e:21:07:b6:9c:a0:7b:2f:97:2e:
                    f3:6c:68:3f:5b:0a:a0:1a:2d:ef:e1:8b:9b:19:b1:
                    5d:d3:b9:6e:f8:78:65:4a:e1:c4:78:61:9d:1e:53:
                    4a:38:72:56:33:99:03:d8:9d:c3:6c:53:6e:69:6a:
                    69:e9:88:67:91:43:be:86:da:a8:eb:e7:cf:da:00:
                    c0:24:06:95:d1:95:33:43:0b:c5:46:61:ba:05:67:
                    4c:86:ec:87:05:3d:03:bd:fd:f3:3d:a4:65:0c:e9:
                    2f:5f:c8:42:69:5e:45:77:2f:21:8e:bd:84:0e:8a:
                    6d:1b:5b:75:7d:41:7f:86:26:8c:f1:76:3a:78:89:
                    49:df:47:23:5d:2d:94:11:f5:eb:51:8a:54:67:d1:
                    78:0d:dd:14:f1:02:85:a0:58:8f:40:84:11:1b:49:
                    e5:20:3b:d6:fe:c9:87:65:2e:9f:ef:4b:f6:94:51:
                    ea:cd:aa:be:b1:75:c4:89:2e:5a:ff:ce:49:4f:32:
                    c5:bd:d0:eb:a3:2c:3a:23:34:8f:72:4e:c9:82:be:
                    1f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3C:D3:EF:07:FF:E2:CB:17:E0:08:6D:1C:2A:3F:49:BB:F5:1D:6A
            X509v3 Authority Key Identifier:
                keyid:71:95:E8:00:FE:E5:80:94:51:D8:B9:24:9B:B0:31:69:CC:89:39:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cec7209b9057d239c9d724b057b75899fa702cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/91fd609905f802b096e4e0a7df23f7e199e82f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/0cec7209b9057d239c9d724b057b75899fa702cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:6d:8d:b2:ae:56:1b:f0:7c:6d:6b:fd:e4:91:bf:6c:8c:d6:
         c0:8d:bc:74:01:12:8f:a3:86:c4:5a:9d:ea:fc:1d:dc:08:a6:
         e0:92:00:e6:20:44:b1:9b:2e:66:88:10:04:7f:2f:49:ea:3d:
         8a:9b:6e:ed:36:80:4a:98:1f:f8:a2:05:75:2d:f8:47:49:88:
         cc:c2:7d:d8:2d:b5:e3:c9:74:fb:de:1a:40:ad:95:b3:3a:a1:
         25:1a:ed:e6:f8:73:78:b7:9d:10:a4:0d:51:d5:08:65:cc:b1:
         2e:78:b0:2f:8f:2a:a7:b1:92:17:1b:b7:41:ac:fc:65:ea:0f:
         99:cf:8d:e1:01:5c:8b:0a:97:a2:ad:8f:5d:b5:d9:93:a6:c4:
         be:31:f4:af:44:b2:b0:30:20:57:fc:d5:8f:11:80:03:dd:b2:
         66:e2:28:d8:34:2e:17:40:77:14:7f:ae:61:ef:9c:d7:d2:fe:
         b7:a0:18:0a:9a:be:39:f5:f8:e7:ce:35:ce:8a:c1:85:8b:ba:
         43:a1:f8:54:82:3e:09:02:86:a2:ef:35:1b:48:2a:a9:2b:40:
         5e:f6:ad:8f:32:25:04:22:0d:ef:07:d7:bc:63:3d:99:e5:46:
         30:61:0a:3d:92:4b:15:7c:8d:a2:4d:89:d7:ad:7a:45:90:d3:
         aa:be:ac:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org