Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/16844c35426529cd14d79dc249e3a1e3ea5fe78c.roa
File:                     16844c35426529cd14d79dc249e3a1e3ea5fe78c.roa (raw, json)
Hash identifier:          NNTwhr8cQ8w8bgNNljb1QXo1ypr7JhyJt4M3pNF4bdU=
Subject key identifier:   3F:8D:FE:69:AB:54:81:75:9D:85:37:98:CE:9F:53:97:B6:9C:E4:89
Certificate issuer:       /CN=5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae
Certificate serial:       0E11A7
Authority key identifier: 75:77:AF:10:66:15:D9:6D:1C:24:42:60:6A:86:60:57:EE:9F:48:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/16844c35426529cd14d79dc249e3a1e3ea5fe78c.roa
Signing time:             Wed 24 Mar 2021 14:32:05 +0000
ROA not before:           Wed 24 Mar 2021 14:32:05 +0000
ROA not after:            Tue 24 Mar 2026 14:32:05 +0000
asID:                     27735
IP address blocks:        186.0.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922023 (0xe11a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae
        Validity
            Not Before: Mar 24 14:32:05 2021 GMT
            Not After : Mar 24 14:32:05 2026 GMT
        Subject: CN=16844c35426529cd14d79dc249e3a1e3ea5fe78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:92:e6:af:70:6b:09:10:01:d0:55:f9:6e:
                    da:6a:e2:cd:4c:7c:e7:27:0a:dd:3e:87:f5:a2:9a:
                    27:0e:25:bf:7a:ea:90:dd:b6:1a:fb:06:1f:83:e0:
                    d2:e5:81:0c:8e:78:c9:af:6a:29:c5:d9:e5:06:f6:
                    17:12:27:fa:36:d9:26:7b:79:a3:db:cb:50:8c:7a:
                    ec:db:ad:ae:dd:5c:e9:99:26:35:d1:cb:08:06:12:
                    a2:9d:cf:c2:8f:08:2f:a6:b4:34:1c:77:a2:82:a0:
                    4d:cf:02:39:c7:e9:1f:6c:2a:4c:6a:7a:b6:3c:ab:
                    9f:57:a7:93:8c:91:cb:a1:7e:c5:0e:9f:52:e4:92:
                    ed:26:4d:c2:0e:72:7b:41:21:8b:b8:27:ab:b0:d2:
                    11:b1:e4:51:7d:a2:51:f9:a5:ae:ab:c6:de:71:98:
                    53:0a:65:2c:3c:0a:e2:ed:98:23:7b:30:3a:ad:d0:
                    55:57:84:a3:f7:4a:60:89:9b:3e:ee:d3:34:f5:81:
                    af:d1:8f:4e:4a:c9:3e:61:8a:c0:7e:ac:46:66:7d:
                    98:0b:bc:fb:f0:3f:4e:69:22:7f:de:8f:ef:1d:18:
                    0b:a6:34:68:4b:76:2f:89:d6:77:99:9f:7c:0c:44:
                    a7:ce:b7:65:1a:f2:e0:6c:9a:86:68:5a:45:cc:c2:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8D:FE:69:AB:54:81:75:9D:85:37:98:CE:9F:53:97:B6:9C:E4:89
            X509v3 Authority Key Identifier:
                keyid:75:77:AF:10:66:15:D9:6D:1C:24:42:60:6A:86:60:57:EE:9F:48:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/16844c35426529cd14d79dc249e3a1e3ea5fe78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f3:2b:52:76:e3:ab:67:bc:c2:a8:d8:4e:33:bc:6b:77:6b:
         af:dc:48:e8:28:71:78:ee:b2:d5:5c:43:f8:2f:8b:26:c1:8e:
         6f:e4:dc:57:e9:df:9a:74:6b:9a:32:e9:ff:33:92:59:67:d0:
         92:5c:87:83:6a:2a:c3:62:c9:62:e0:cf:00:d2:48:a2:74:89:
         ad:72:23:be:67:73:5f:d5:0c:e3:82:06:44:92:c3:1d:4d:a9:
         d5:87:bd:75:33:e1:c4:1b:b7:d7:1a:ed:7e:a9:25:c3:ce:48:
         8e:b2:8e:38:0d:8e:9a:85:2e:75:00:2e:d5:46:a1:66:6b:53:
         09:1a:9a:1f:e7:93:12:93:9d:24:01:c9:bb:6d:5d:47:d0:c7:
         31:71:d2:48:1b:1f:d8:d7:ee:b1:2d:34:37:4d:67:9e:9e:e1:
         f7:a4:66:27:2e:f9:db:4b:fe:ed:d7:65:bd:fd:b0:3d:86:23:
         63:ec:c7:de:98:63:24:53:9e:51:c3:6e:ae:c5:46:d0:9e:ec:
         d5:63:e6:2b:1b:9f:5e:65:3e:44:52:92:83:95:ae:ff:b5:09:
         5a:76:c1:c4:b0:58:2c:e5:df:41:e2:44:fd:cd:45:7d:06:41:
         30:5c:9d:78:c1:ed:ea:a5:d5:b9:58:40:31:b0:20:59:07:58:
         84:6a:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org