Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/6eaba97e17f70fb32f9cc6976cd03a2434596bbf.roa
File:                     6eaba97e17f70fb32f9cc6976cd03a2434596bbf.roa (raw, json)
Hash identifier:          U/CtGMNFvRCNMsmlyVf6jeiFSFNhFgSsxXW5a+T5jxg=
Subject key identifier:   23:AF:6F:7E:A4:68:29:F9:E7:B7:34:CB:E8:01:18:D1:67:3A:0C:E7
Certificate issuer:       /CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
Certificate serial:       215F92
Authority key identifier: 8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/6eaba97e17f70fb32f9cc6976cd03a2434596bbf.roa
Signing time:             Thu 06 Jul 2023 04:41:15 +0000
ROA not before:           Wed 05 Jul 2023 04:41:15 +0000
ROA not after:            Sun 06 Jul 2025 04:41:15 +0000
asID:                     52468
IP address blocks:        160.20.164.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187154 (0x215f92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
        Validity
            Not Before: Jul  5 04:41:15 2023 GMT
            Not After : Jul  6 04:41:15 2025 GMT
        Subject: CN=6eaba97e17f70fb32f9cc6976cd03a2434596bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:41:bb:d3:1d:69:37:f1:12:33:90:67:46:07:
                    c6:11:06:ad:cc:8e:ea:9f:af:5f:59:d0:ad:03:3d:
                    b7:18:d2:05:88:34:cf:b0:18:44:8b:b4:97:2c:f7:
                    26:e7:ba:9f:68:ec:01:ff:4a:45:8e:77:32:a4:7b:
                    5a:04:30:ed:a3:b4:08:6c:84:3b:04:6a:fb:97:39:
                    55:7b:33:4c:51:3d:9e:19:fd:59:9c:03:f9:47:ba:
                    f3:31:18:93:07:cc:70:60:d8:99:54:ec:d2:aa:f8:
                    e8:c0:a0:60:cc:71:d2:0c:4d:1b:63:ce:9e:59:6f:
                    49:30:e7:27:eb:7e:5d:38:20:51:c4:08:5b:9c:71:
                    2f:ff:8d:13:05:2f:75:ac:b9:7b:ab:0e:4b:1c:38:
                    78:a0:f5:0c:51:3c:f4:4f:15:dd:3d:0f:9e:95:ff:
                    5b:e8:44:1e:1f:06:81:a2:9a:6d:99:dd:b5:8a:16:
                    be:3a:b2:39:be:ac:6c:d6:c0:0b:cc:df:20:1f:f4:
                    bf:e4:87:6d:b0:08:82:8e:2d:b0:00:ab:f3:99:52:
                    06:e2:8a:0f:a6:7a:a7:3d:07:cd:3e:0e:0f:a8:9b:
                    d3:c8:09:80:5f:37:0c:47:8a:f3:c7:33:60:00:e1:
                    62:cc:0a:76:29:35:a3:69:6b:ff:96:9c:e0:e5:2c:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AF:6F:7E:A4:68:29:F9:E7:B7:34:CB:E8:01:18:D1:67:3A:0C:E7
            X509v3 Authority Key Identifier:
                keyid:8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/6eaba97e17f70fb32f9cc6976cd03a2434596bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:34:03:05:16:63:19:39:e4:25:8f:58:05:00:4d:b7:2e:c5:
         96:04:92:fd:3f:37:d3:9d:d8:37:1d:69:38:4f:c0:e5:9b:3b:
         ec:29:7f:47:18:af:90:67:99:79:09:93:9a:b9:db:73:59:d6:
         c9:71:15:8a:4c:15:27:8c:a9:f1:9a:f1:53:2b:53:62:11:42:
         1c:ce:ac:f9:60:95:5a:f7:38:8c:28:88:38:56:76:f7:35:38:
         01:b8:eb:89:1d:2c:1c:6a:54:bf:b7:de:d1:01:02:46:a6:22:
         0b:2a:5b:68:7b:07:e6:04:25:76:97:b4:0e:b6:0b:45:3a:2f:
         4b:c0:ac:58:22:65:9f:f2:55:b2:a0:ee:da:8b:7b:cf:ff:5d:
         b7:e3:a4:ab:9f:fc:d8:29:63:05:fe:c6:91:ca:21:bc:4b:b0:
         dc:98:5b:ba:4f:bf:b5:0e:c0:91:57:1c:df:25:fb:ef:a7:ef:
         83:da:6d:03:66:f6:42:68:21:cb:dc:56:d7:fb:c5:3f:e9:06:
         84:b4:c3:8c:43:fd:97:08:15:bd:78:99:6e:8f:af:92:c4:99:
         2b:37:0f:72:83:a1:b2:98:de:e6:d5:7a:18:b0:d1:f4:47:51:
         f5:9f:d3:14:c7:c0:b2:eb:5b:83:c9:5b:3f:bd:2c:71:31:83:
         5a:c8:90:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:26:36 2023 by rpki-client on console-ams.rpki-client.org