Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/1aaa0a42af67ef07c5b4f43bc7fbad0c464aec7a.roa
File:                     1aaa0a42af67ef07c5b4f43bc7fbad0c464aec7a.roa (raw, json)
Hash identifier:          KLzU+7MMPxrngaLGz1zUZ4XcT/8IqcQgFtmPhvf56a0=
Subject key identifier:   26:BC:4B:EB:9B:04:27:D4:69:0D:F6:7F:B0:27:CB:41:18:9D:00:BF
Certificate issuer:       /CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Certificate serial:       1260C5
Authority key identifier: 65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/1aaa0a42af67ef07c5b4f43bc7fbad0c464aec7a.roa
Signing time:             Thu 07 Oct 2021 04:17:11 +0000
ROA not before:           Thu 30 Sep 2021 03:00:00 +0000
ROA not after:            Sat 30 Sep 2023 03:00:00 +0000
asID:                     3549
IP address blocks:        170.83.216.0/22 maxlen: 24
                          2803:b2c0::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204421 (0x1260c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
        Validity
            Not Before: Sep 30 03:00:00 2021 GMT
            Not After : Sep 30 03:00:00 2023 GMT
        Subject: CN=1aaa0a42af67ef07c5b4f43bc7fbad0c464aec7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:a2:1a:d7:c0:ac:2e:3b:27:c4:a9:ed:20:
                    cd:50:3f:52:0e:b6:4a:4a:15:35:db:2b:7d:bf:20:
                    96:e0:1d:08:38:9c:01:65:83:a0:cc:82:a7:e3:00:
                    41:18:ba:ef:60:49:f5:4a:b5:c1:15:83:df:ce:6a:
                    75:5d:a1:e6:af:cf:b0:33:4b:b9:48:c4:4e:f2:78:
                    bc:b5:80:e1:34:54:e0:7e:6c:83:03:2d:4c:99:a5:
                    8c:65:8b:7c:1d:7b:c5:d3:26:40:58:e5:39:76:b9:
                    eb:1b:10:8f:04:64:e6:88:90:44:99:f0:84:ed:d9:
                    d8:79:14:a8:f8:53:b0:bb:8f:00:10:5d:09:50:38:
                    f5:11:ef:16:09:82:b5:e8:aa:84:01:77:d3:71:22:
                    cb:21:6e:03:84:78:12:18:b8:3f:5e:ee:5c:d3:7f:
                    69:43:61:1d:76:81:ec:da:df:28:52:0b:d5:79:46:
                    ad:55:fe:83:05:e8:7d:d5:33:80:05:5e:1d:a7:e2:
                    83:a9:24:b1:db:a3:02:40:28:8f:c5:cc:02:f6:65:
                    4a:5a:10:c8:de:c7:a0:e2:53:ae:4d:a1:42:f6:6f:
                    18:3e:cc:5b:e7:94:02:99:4e:4e:21:ed:ba:87:d2:
                    32:7d:56:c7:fe:53:bf:5b:08:c4:7a:fc:00:17:46:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BC:4B:EB:9B:04:27:D4:69:0D:F6:7F:B0:27:CB:41:18:9D:00:BF
            X509v3 Authority Key Identifier:
                keyid:65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/1aaa0a42af67ef07c5b4f43bc7fbad0c464aec7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/f4a582f6c7807f5fdd31b69ae270f85d00c39706.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.216.0/22
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:f0:89:8c:7e:7b:42:fd:a4:ca:84:ba:93:f9:5a:4a:11:fd:
         0d:f6:ff:e3:64:eb:cd:a0:4b:f3:4b:c0:e7:d9:c8:c4:52:80:
         02:1f:08:fb:b5:15:e7:a3:f2:96:49:b2:75:ef:84:df:5f:d7:
         28:ba:13:92:89:80:a7:70:1c:3a:61:ef:fd:a7:ec:f7:a4:d0:
         72:65:b2:9f:89:47:4b:fd:66:d7:32:cd:f0:31:0e:c2:6e:c0:
         e6:55:98:da:5d:64:aa:c0:1b:93:a6:2c:1c:10:15:ee:6a:73:
         08:bc:24:2a:84:8b:52:c4:71:15:58:bc:22:55:22:27:6e:a1:
         9b:03:89:ec:f3:d6:51:ce:b6:2e:bb:e7:50:0d:20:de:05:a7:
         18:91:ae:c6:88:fb:01:99:6e:a3:d3:54:c2:48:b2:bd:b1:b3:
         84:80:00:58:d4:54:50:e2:fc:b1:39:6f:6b:d1:c1:39:b4:a6:
         84:26:3f:5e:1d:27:d2:01:1b:aa:ff:2b:82:c6:1b:0c:d2:a8:
         bb:5f:97:d0:7a:44:73:45:17:8d:a8:1b:e6:8c:ab:40:ac:18:
         72:6f:5c:1a:f7:70:ae:ad:3b:04:02:24:a1:b1:b3:99:ac:a9:
         b4:63:9e:e2:de:75:f8:01:f0:db:5e:69:ab:fa:01:83:00:d9:
         bd:92:26:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEmDFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY0
YTU4MmY2Yzc4MDdmNWZkZDMxYjY5YWUyNzBmODVkMDBjMzk3MDYwHhcNMjEwOTMw
MDMwMDAwWhcNMjMwOTMwMDMwMDAwWjAzMTEwLwYDVQQDEygxYWFhMGE0MmFmNjdl
ZjA3YzViNGY0M2JjN2ZiYWQwYzQ2NGFlYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv7miGtfArC47J8Sp7SDNUD9SDrZKShU12yt9vyCW4B0IOJwB
ZYOgzIKn4wBBGLrvYEn1SrXBFYPfzmp1XaHmr8+wM0u5SMRO8ni8tYDhNFTgfmyD
Ay1MmaWMZYt8HXvF0yZAWOU5drnrGxCPBGTmiJBEmfCE7dnYeRSo+FOwu48AEF0J
UDj1Ee8WCYK16KqEAXfTcSLLIW4DhHgSGLg/Xu5c039pQ2EddoHs2t8oUgvVeUat
Vf6DBeh91TOABV4dp+KDqSSx26MCQCiPxcwC9mVKWhDI3seg4lOuTaFC9m8YPsxb
55QCmU5OIe26h9IyfVbH/lO/WwjEevwAF0Y/6wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFCa8S+ubBCfUaQ32f7Any0EYnQC/MB8GA1UdIwQYMBaAFGUKgwJwZrHds66C
FoPPNNKLdGZ7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjRhNTgy
ZjZjNzgwN2Y1ZmRkMzFiNjlhZTI3MGY4NWQwMGMzOTcwNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWFlYmVkNjktMzBkZS00MjYyLWE0OTQtZDI2MmIz
M2MyYzljLzFhYWEwYTQyYWY2N2VmMDdjNWI0ZjQzYmM3ZmJhZDBjNDY0YWVjN2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YWViZWQ2OS0zMGRlLTQyNjItYTQ5NC1kMjYy
YjMzYzJjOWMvZjRhNTgyZjZjNzgwN2Y1ZmRkMzFiNjlhZTI3MGY4NWQwMGMzOTcw
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqpT2DANBAIAAjAHAwUAKAOywDANBgkqhkiG9w0BAQsFAAOC
AQEAd/CJjH57Qv2kyoS6k/laShH9Dfb/42TrzaBL80vA59nIxFKAAh8I+7UV56Py
lkmyde+E31/XKLoTkomAp3AcOmHv/afs96TQcmWyn4lHS/1m1zLN8DEOwm7A5lWY
2l1kqsAbk6YsHBAV7mpzCLwkKoSLUsRxFVi8IlUiJ26hmwOJ7PPWUc62LrvnUA0g
3gWnGJGuxoj7AZluo9NUwkiyvbGzhIAAWNRUUOL8sTlva9HBObSmhCY/Xh0n0gEb
qv8rgsYbDNKou1+X0HpEc0UXjagb5oyrQKwYcm9cGvdwrq07BAIkobGzmayptGOe
4t51+AHw215pq/oBgwDZvZIm/g==
-----END CERTIFICATE-----
Generated at Fri Sep 29 09:16:51 2023 by rpki-client on console-ams.rpki-client.org