Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/5c9142209aefb379ed59c2133f49d479630dbaf7.roa
File:                     5c9142209aefb379ed59c2133f49d479630dbaf7.roa (raw, json)
Hash identifier:          eHQfxg3lanMad19evZrDW4NA5zQmY9pgOXcg/vgwPF8=
Subject key identifier:   0D:D9:52:68:E5:6D:C1:26:91:EA:65:DA:B2:19:7E:09:33:69:8B:3E
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       177E64
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/5c9142209aefb379ed59c2133f49d479630dbaf7.roa
Signing time:             Sun 30 Jul 2023 01:09:06 +0000
ROA not before:           Sat 29 Jul 2023 01:09:06 +0000
ROA not after:            Wed 30 Jul 2025 01:09:06 +0000
asID:                     269918
IP address blocks:        161.22.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539684 (0x177e64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Jul 29 01:09:06 2023 GMT
            Not After : Jul 30 01:09:06 2025 GMT
        Subject: CN=5c9142209aefb379ed59c2133f49d479630dbaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:82:b2:9f:57:92:59:45:31:4c:cb:e7:bc:e3:
                    3d:4f:f2:f0:11:92:ff:cd:7f:c5:ae:be:a1:e8:a0:
                    bd:65:d9:c1:fd:f8:1d:b2:a1:7e:43:ea:ed:24:50:
                    50:58:a7:51:4a:12:18:da:b0:05:c8:2a:79:be:6a:
                    53:42:63:41:59:fb:43:fb:3e:52:aa:61:1b:4a:77:
                    bb:82:bf:ad:4a:04:5b:95:c1:50:ef:1c:7e:fa:3f:
                    f5:60:1d:a9:3e:9c:7d:12:41:cc:6e:b1:c6:51:c3:
                    14:a7:97:d7:7e:ad:34:90:4b:8b:8a:fa:f6:55:48:
                    23:24:91:5b:b0:09:ee:81:48:de:27:03:b2:fb:47:
                    90:8e:08:c8:51:16:56:09:60:d3:21:d8:55:41:fb:
                    e3:55:35:bf:2d:cf:c5:d3:6a:56:4a:f7:61:0c:32:
                    c0:4a:fc:9b:76:ac:6a:8a:fc:e5:2c:aa:ac:15:9b:
                    d0:20:a0:8c:8f:d4:d1:9a:b1:16:fd:88:d7:6c:16:
                    e8:18:d6:1c:6e:9b:48:45:74:ba:36:a4:35:cc:f7:
                    09:85:35:03:f1:56:96:75:f0:ee:43:7a:e5:40:08:
                    85:4b:66:42:b4:ab:aa:a4:84:0d:69:92:4d:cd:9a:
                    6a:14:bf:d5:43:c9:e9:f9:a0:78:01:b3:c6:7f:fe:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D9:52:68:E5:6D:C1:26:91:EA:65:DA:B2:19:7E:09:33:69:8B:3E
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/5c9142209aefb379ed59c2133f49d479630dbaf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:4f:d2:c4:75:9c:9e:87:69:c3:31:44:67:e1:94:18:ef:83:
         e2:33:99:49:37:3b:08:e8:6a:ae:63:b8:44:7b:b6:e8:35:73:
         52:33:0a:41:c6:c3:3d:14:12:27:fe:d7:e4:c0:8e:77:c7:07:
         55:ed:40:e9:48:b3:50:69:4b:08:f6:b2:91:eb:b7:55:d5:1c:
         9c:97:5c:c1:50:c0:a1:f5:b4:6f:52:5f:30:01:1d:a9:6e:8a:
         72:21:c3:02:7a:ab:4e:2a:b1:bb:f0:bd:7c:84:88:85:61:9a:
         bd:db:b2:17:f1:86:8a:f1:89:c7:3b:00:51:bd:79:7b:6b:61:
         c3:ff:20:39:a3:25:b3:41:38:57:f6:26:7e:e7:c6:19:d1:9e:
         80:ca:3a:d2:1c:ee:b5:63:1c:1b:11:69:e6:e9:66:60:06:21:
         07:81:b7:da:98:4c:ab:cb:a8:9b:7e:e6:6f:0c:19:4a:c6:49:
         0c:99:e9:e8:15:d5:26:a4:96:f2:dd:7f:7b:9b:eb:4b:b3:c1:
         0a:fc:c5:41:33:7d:0f:87:5c:51:b0:44:c5:e3:da:00:25:a1:
         3c:c2:62:e3:b9:81:40:21:2f:71:4b:df:44:e3:eb:bd:31:0d:
         f3:2d:3a:c4:d2:86:3f:08:6f:7b:a4:be:3b:69:2a:64:c7:01:
         16:a4:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 6 01:01:26 2023 by rpki-client on console-fra.rpki-client.org