Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/09b16a9e1614ede5f70a01f8c82b479492200969.roa
File:                     09b16a9e1614ede5f70a01f8c82b479492200969.roa (raw, json)
Hash identifier:          dlsGiyuMWV1Y6mGGfn2EX7Ixgo6lvRmG3rwdqh30Ci4=
Subject key identifier:   1B:EF:72:1F:A4:1C:72:22:06:A4:A6:11:A7:47:74:84:67:BD:0E:53
Certificate issuer:       /CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Certificate serial:       1BD129
Authority key identifier: D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/09b16a9e1614ede5f70a01f8c82b479492200969.roa
Signing time:             Sat 29 Oct 2022 14:01:39 +0000
ROA not before:           Tue 23 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     264660
IP address blocks:        170.247.212.0/22 maxlen: 22
                          170.247.212.0/23 maxlen: 23
                          170.247.212.0/24 maxlen: 24
                          170.247.213.0/24 maxlen: 24
                          170.247.214.0/23 maxlen: 23
                          170.247.214.0/24 maxlen: 24
                          170.247.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1823017 (0x1bd129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
        Validity
            Not Before: Mar 23 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=09b16a9e1614ede5f70a01f8c82b479492200969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:4d:ca:42:fc:e1:91:86:20:fa:d8:e2:7f:
                    b8:d5:2e:61:15:56:22:5a:96:ec:fd:e5:2d:75:54:
                    68:a6:b1:b5:26:51:84:cd:94:df:8e:90:51:14:3e:
                    06:ea:1f:53:45:21:a2:d2:d0:33:e1:3c:e6:8c:49:
                    0e:fa:6b:2b:e4:5a:06:6a:46:17:79:aa:a1:59:29:
                    34:de:bc:28:de:d4:85:5b:f5:6b:87:29:d7:6b:cc:
                    5f:ed:6a:2b:37:e1:90:05:6f:03:b0:25:7f:47:40:
                    82:02:6c:05:64:35:85:72:34:1a:e1:ee:8e:eb:0d:
                    bf:c2:51:58:0c:90:ac:61:0c:f2:e3:1b:84:de:8f:
                    c1:61:d5:7f:72:c6:05:da:3a:da:2a:09:8c:35:60:
                    b6:06:8c:a6:e8:5c:39:01:0d:79:d8:82:29:88:d9:
                    8a:9e:9a:70:94:35:d7:66:24:22:41:5c:74:86:76:
                    c1:b2:af:97:74:95:65:78:64:67:a7:a9:5c:d3:58:
                    b2:ba:48:07:a7:87:60:8e:11:bc:40:64:fa:9b:a0:
                    7b:5e:25:33:ff:81:58:94:b0:91:f9:c0:7e:6e:a3:
                    65:bd:c6:f5:6b:f0:14:a2:3e:f9:e8:32:7d:56:04:
                    df:56:49:2d:65:8b:d2:2f:95:be:09:e4:a9:15:bd:
                    07:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EF:72:1F:A4:1C:72:22:06:A4:A6:11:A7:47:74:84:67:BD:0E:53
            X509v3 Authority Key Identifier:
                keyid:D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/09b16a9e1614ede5f70a01f8c82b479492200969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0e4cadafcf7e03afe28925adf350f1286db7b25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:69:c6:c2:44:95:3a:3f:34:91:22:dd:2d:51:ee:e1:3d:12:
         2e:22:3d:36:ef:1e:39:0a:91:27:d1:9a:be:f2:2a:20:04:d8:
         ca:ac:aa:8f:58:84:b3:20:5a:1f:9c:dc:9e:a4:b0:3f:77:fb:
         c8:f4:e0:4c:53:0c:82:f2:13:e0:d8:1a:0d:c3:d9:1a:77:45:
         cb:4f:30:2a:34:f7:bf:ce:e5:4e:e8:d9:f2:80:b2:00:2f:c5:
         4f:fe:b2:25:8e:da:7b:63:48:16:69:b3:52:ae:ee:1b:b3:f4:
         08:16:41:ab:c5:7b:7b:62:fb:3c:06:a6:d3:15:12:7d:65:3a:
         b2:f9:14:4e:d5:3f:87:61:00:95:29:1e:dd:3d:ec:13:be:27:
         45:5e:9f:b3:4f:d1:83:57:c6:2d:27:e9:50:61:0d:cb:d6:ca:
         3e:38:fd:98:52:e8:b2:ab:0b:30:08:0f:db:b8:16:f4:64:c7:
         2a:66:30:d6:f1:bc:4f:ee:11:38:90:52:22:78:6e:70:f9:e4:
         b4:df:a9:0f:9d:40:d4:32:2b:ef:94:8e:23:6c:02:5f:65:0b:
         ac:de:7d:c2:0e:a6:f4:3b:91:5b:22:d3:cd:43:30:00:cc:85:
         4e:ad:d8:1e:2b:b0:df:a0:d9:88:1d:ab:dd:27:68:eb:2e:c7:
         9b:69:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org