Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/29b621be501d8cab53c4bd76b6e0fe68151a718c.roa
File:                     29b621be501d8cab53c4bd76b6e0fe68151a718c.roa (raw, json)
Hash identifier:          PQq9oC8UvO15ENSkjKf/pZuYhDDY0yUJodisjAf1uZg=
Subject key identifier:   AE:21:F6:5D:C2:7D:48:8B:DA:73:EB:F8:20:19:FA:7C:DC:FA:CE:A6
Certificate issuer:       /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial:       0DACAB
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/29b621be501d8cab53c4bd76b6e0fe68151a718c.roa
Signing time:             Wed 24 Mar 2021 14:47:31 +0000
ROA not before:           Wed 24 Mar 2021 14:47:30 +0000
ROA not after:            Tue 24 Mar 2026 14:47:30 +0000
asID:                     27890
IP address blocks:        150.186.64.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896171 (0xdacab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
        Validity
            Not Before: Mar 24 14:47:30 2021 GMT
            Not After : Mar 24 14:47:30 2026 GMT
        Subject: CN=29b621be501d8cab53c4bd76b6e0fe68151a718c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:1b:53:0c:70:7f:85:5b:cc:dc:6c:47:a2:
                    f6:fe:76:cd:ba:cd:ee:22:e9:ee:69:02:e1:8e:7d:
                    f6:54:8d:ee:d8:11:9a:b4:f1:a7:a7:2f:44:ef:20:
                    c9:80:f7:b1:82:aa:cd:80:c0:22:c9:9e:bf:2d:bf:
                    38:f5:72:fa:01:90:38:c0:c3:34:a5:c3:ba:82:d1:
                    58:78:54:1c:f1:4c:58:e9:87:31:b7:aa:b9:44:f1:
                    2a:bd:cb:89:f1:92:0b:4f:02:57:d2:28:e5:c5:53:
                    8f:6e:68:71:9c:0a:22:e9:bc:e5:32:be:21:22:4b:
                    a5:3f:34:8f:da:f6:aa:a4:24:8d:7a:42:37:4c:74:
                    09:49:d2:e9:c8:c8:fd:df:29:6e:e1:d8:a7:36:0b:
                    e5:27:31:bd:0d:e8:cc:e4:98:d3:0a:21:65:76:3b:
                    7e:2a:c8:0d:9d:98:36:05:2c:cc:10:fe:00:6f:85:
                    a6:2f:a1:db:93:73:9c:c5:b6:27:7d:9b:ed:c4:e8:
                    2e:44:07:4b:8e:8c:08:e5:24:0f:e2:9d:85:fe:c8:
                    e8:cf:11:6a:8b:32:fb:8b:6e:30:de:0b:a1:e8:8b:
                    64:fb:1a:dd:5a:ef:da:c8:8a:03:9a:3b:e2:23:42:
                    1d:81:dd:17:f0:50:13:d6:ac:0f:ee:89:54:29:48:
                    04:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:21:F6:5D:C2:7D:48:8B:DA:73:EB:F8:20:19:FA:7C:DC:FA:CE:A6
            X509v3 Authority Key Identifier:
                keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/29b621be501d8cab53c4bd76b6e0fe68151a718c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.186.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:5d:e6:fd:84:41:12:3d:6f:38:dd:87:01:03:8e:97:9c:26:
         73:d0:96:4a:56:b8:28:9c:e1:68:ec:25:ba:97:68:60:7e:cc:
         d1:04:f5:95:93:59:4f:cb:c7:78:88:a7:d3:48:71:09:5d:70:
         a2:02:c2:37:d5:30:58:54:e8:89:50:96:55:7d:27:14:75:80:
         63:aa:0e:23:4b:45:ef:4d:ac:e7:a2:c3:00:c6:98:6b:ed:9d:
         11:26:1e:86:26:e0:30:82:29:13:fa:a4:61:f4:4d:f7:3b:3d:
         ea:5c:3c:3c:b4:49:79:52:86:1c:df:93:0b:b6:37:1b:d2:31:
         98:52:6b:57:c3:ca:80:e6:76:db:88:ce:7a:36:f3:90:a1:49:
         4d:19:4c:cc:f4:04:9f:22:4c:91:ac:31:65:19:f0:48:4e:38:
         b9:97:79:31:2d:b7:24:a2:19:71:5e:fb:a1:f0:0a:b0:0c:00:
         ed:2c:83:28:4e:38:e5:b2:be:db:1d:94:dd:17:1e:2e:e8:24:
         fa:46:f4:12:e9:7a:6c:de:ad:e7:d4:cd:f5:4d:e3:ed:2f:0e:
         67:eb:fb:f1:05:5f:9e:e8:54:45:93:51:70:5c:f7:b4:85:33:
         ea:1b:3f:4d:3d:d1:50:7f:b5:a0:e3:fe:2e:3e:87:7e:43:e4:
         79:4b:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 16:21:50 2023 by rpki-client on console-ams.rpki-client.org