Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f96dbc5-b6e6-4e1c-9cf3-7dd0065f944e/920288868b22106a7276b4fb172a8d1ed73e9dca.roa
File:                     920288868b22106a7276b4fb172a8d1ed73e9dca.roa (raw, json)
Hash identifier:          mIZMDDe3QtI3wZAC5KtaS6M2NacPwWpD1SzCgDUMuXA=
Subject key identifier:   66:76:BB:63:5A:DC:BB:3B:AF:A9:05:27:CA:7C:F5:A9:B9:5F:D0:2B
Certificate issuer:       /CN=db69e9d926a8fd56475445765b011adad2f2d430
Certificate serial:       0D2765
Authority key identifier: 73:31:E7:AE:AE:29:D6:9F:96:AB:D4:EF:80:B2:8B:C0:3F:30:DC:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/db69e9d926a8fd56475445765b011adad2f2d430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9f96dbc5-b6e6-4e1c-9cf3-7dd0065f944e/920288868b22106a7276b4fb172a8d1ed73e9dca.roa
Signing time:             Wed 24 Mar 2021 22:50:45 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     266872
IP address blocks:        45.160.28.0/23 maxlen: 23
                          45.160.28.0/24 maxlen: 24
                          45.160.29.0/24 maxlen: 24
                          45.160.30.0/23 maxlen: 23
                          45.160.30.0/24 maxlen: 24
                          45.160.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862053 (0xd2765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db69e9d926a8fd56475445765b011adad2f2d430
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=920288868b22106a7276b4fb172a8d1ed73e9dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:45:51:48:4c:96:18:c5:13:ee:e7:f7:44:03:
                    19:03:57:74:78:b6:aa:67:10:1c:ae:01:af:16:45:
                    d7:a5:d0:e1:4d:20:69:55:dc:77:dd:2a:48:bd:6a:
                    7d:8d:97:c1:d7:8c:8d:78:d8:c3:44:83:5d:9a:4e:
                    ac:d4:61:b3:34:ab:b8:dc:e6:28:47:70:70:b1:cf:
                    98:7b:92:65:bd:db:54:92:e3:83:fb:7e:34:a8:79:
                    57:6f:00:a9:04:6e:e6:3e:b1:22:87:3b:bc:2d:a8:
                    4a:3f:8f:d6:f2:2f:0c:68:9b:e0:d0:6a:71:7e:5b:
                    ab:6c:e7:fe:f5:9c:9d:42:e8:11:b5:d4:ad:a9:39:
                    f5:d9:22:82:8d:1d:ae:fe:2f:43:73:ff:f5:47:75:
                    76:96:18:d3:8f:93:5e:41:8c:a6:bc:54:c6:dd:26:
                    c7:c5:49:a7:1d:fc:77:85:fc:d4:c6:7a:ed:d8:1e:
                    14:82:62:ff:98:b6:0d:42:84:d3:31:60:b5:78:6c:
                    98:e5:e5:7c:bc:b8:0e:6d:d7:f5:a7:9d:fa:1f:e0:
                    1b:f3:b0:61:7d:d6:98:7d:1e:08:e1:92:44:7f:cf:
                    c0:a3:a1:53:0a:7c:30:6b:0b:81:d8:8d:28:ae:b7:
                    36:49:48:dc:ac:35:e0:3c:3f:9a:ed:98:9f:bd:3d:
                    1a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:76:BB:63:5A:DC:BB:3B:AF:A9:05:27:CA:7C:F5:A9:B9:5F:D0:2B
            X509v3 Authority Key Identifier:
                keyid:73:31:E7:AE:AE:29:D6:9F:96:AB:D4:EF:80:B2:8B:C0:3F:30:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/db69e9d926a8fd56475445765b011adad2f2d430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f96dbc5-b6e6-4e1c-9cf3-7dd0065f944e/920288868b22106a7276b4fb172a8d1ed73e9dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9f96dbc5-b6e6-4e1c-9cf3-7dd0065f944e/db69e9d926a8fd56475445765b011adad2f2d430.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:8f:de:4a:93:d5:d0:2b:61:eb:88:62:45:50:c2:5b:37:ed:
         76:e9:36:bf:19:84:b3:ea:77:6c:10:35:f7:82:aa:03:59:ee:
         66:95:a4:0f:a8:7c:94:e2:e3:ba:d0:68:d7:ca:60:ca:2f:d3:
         d6:f1:90:a0:63:0e:99:f8:cc:d8:38:fd:a1:55:b7:b5:fc:12:
         e9:72:85:29:1b:bd:5a:58:86:7e:1e:a5:ab:b4:11:34:20:6d:
         01:ad:b1:04:bf:a1:93:05:ab:0f:d5:f0:e9:63:92:d4:c8:2d:
         ef:d6:80:ed:c0:85:20:2d:2e:81:b3:59:a9:89:53:f6:a5:4c:
         47:72:0d:d5:73:fc:92:b9:ec:22:ec:bd:44:e6:ba:ec:01:cc:
         28:a7:9e:bd:3a:1e:b8:17:9e:47:1a:d2:52:fb:65:8e:d9:5c:
         36:10:f4:ae:71:c6:8a:3a:10:ce:8c:1f:62:2a:b8:2d:57:03:
         9d:b6:7f:f4:c7:8c:77:bb:67:78:5a:6f:65:15:57:f4:8c:a1:
         84:7c:02:4d:2e:e0:6e:e9:df:fb:aa:46:1b:17:61:31:d9:ec:
         44:ac:29:9c:ca:e2:52:6f:a9:93:4c:ec:08:00:78:f2:bd:4e:
         4d:27:f6:50:22:f9:b4:05:1f:c9:15:ec:23:5a:2e:92:ee:30:
         ce:7b:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org