Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/b7c8c16fc90842d1ea5a1b3163d571ce558ed28d.roa
File:                     b7c8c16fc90842d1ea5a1b3163d571ce558ed28d.roa (raw, json)
Hash identifier:          73C67IP0Vjwtzgzns3s0v2KWx9vLVZOfsaYy0A3Sr5c=
Subject key identifier:   A7:B9:C8:A2:AB:77:03:45:88:C8:BD:EE:62:1A:B1:29:3F:FF:50:67
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       18D264
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/b7c8c16fc90842d1ea5a1b3163d571ce558ed28d.roa
Signing time:             Tue 19 Sep 2023 16:20:26 +0000
ROA not before:           Mon 18 Sep 2023 16:20:26 +0000
ROA not after:            Fri 19 Sep 2025 16:20:26 +0000
asID:                     269918
IP address blocks:        161.22.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1626724 (0x18d264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Sep 18 16:20:26 2023 GMT
            Not After : Sep 19 16:20:26 2025 GMT
        Subject: CN=b7c8c16fc90842d1ea5a1b3163d571ce558ed28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:55:90:80:9f:ea:55:ec:d8:53:52:8e:5c:05:
                    f7:75:18:2f:c0:d5:fc:73:90:ae:de:41:cf:ed:52:
                    55:fa:8c:84:1d:01:de:12:20:79:d4:73:f8:7e:97:
                    5a:78:c7:07:82:c3:d5:55:4b:b6:02:7b:85:2f:63:
                    ee:a7:dc:31:bf:4a:99:0c:a8:eb:71:81:0f:27:a8:
                    e1:26:a5:28:bf:24:52:39:bb:ef:b2:ff:2c:bd:42:
                    5c:30:10:4b:d2:cc:01:5e:31:3e:1f:e5:dd:f8:83:
                    66:55:94:3d:f1:3c:dc:ca:ed:4d:08:3f:3b:05:50:
                    11:68:95:0b:11:50:6c:9c:b5:6b:cc:fe:09:be:ec:
                    32:fa:78:ae:a0:61:5b:98:e7:93:b8:4f:2d:ff:7e:
                    8c:f9:a8:e3:a4:66:4a:f6:df:58:67:44:50:b1:c5:
                    62:35:63:52:a7:4f:0a:6b:46:f4:eb:20:89:26:d7:
                    61:81:49:0c:71:b1:9c:e9:b8:0c:e1:bb:33:66:87:
                    59:7d:7c:6d:8a:16:83:a1:9e:b1:45:b1:b6:10:4c:
                    15:8f:d8:cf:1e:d7:ea:b0:1d:89:d2:fa:62:46:45:
                    9e:8c:95:3d:58:bb:af:9c:03:cb:4e:b6:c8:b6:22:
                    13:1d:91:32:70:7b:59:09:34:17:c8:9a:e7:ad:0e:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B9:C8:A2:AB:77:03:45:88:C8:BD:EE:62:1A:B1:29:3F:FF:50:67
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/b7c8c16fc90842d1ea5a1b3163d571ce558ed28d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:80:5c:4d:ae:43:3c:ac:67:45:97:f3:61:58:b4:e5:7b:88:
         de:5e:21:5e:40:5a:94:aa:00:14:4d:ef:3c:3f:6b:fa:1c:56:
         93:ed:c2:9e:5a:a0:22:49:e8:1f:f8:b2:e5:fa:44:66:8b:13:
         3c:de:10:62:03:92:0c:97:a9:97:e8:fa:7e:69:9f:35:8b:31:
         62:c0:27:b5:c0:11:05:e6:be:bd:15:e3:c7:8e:1b:90:f8:fa:
         20:4e:27:a7:95:d1:f7:9b:6d:ba:12:2f:ba:d7:3f:84:9b:4a:
         c9:c5:51:40:0e:8d:a4:5c:19:3b:bd:1c:7e:ec:d3:09:5c:42:
         c2:b2:c5:80:ab:7a:f8:56:98:9c:fc:ba:52:12:e9:66:1a:a9:
         75:71:e2:27:24:e6:fa:be:51:e9:2e:b2:e4:e8:5f:be:95:af:
         ab:22:e8:02:2f:40:8d:ba:0c:5c:2d:47:d4:b2:3f:3b:30:98:
         8a:69:96:17:cc:83:28:1a:8c:af:d0:e7:be:07:3b:91:9b:1a:
         57:85:aa:b3:78:9c:2b:a2:94:14:36:14:eb:79:80:15:75:fd:
         77:6b:6b:8d:4d:c6:14:28:bd:1e:bc:a2:35:22:ef:a7:93:30:
         71:05:99:b2:25:28:28:e0:1d:27:5f:d0:37:5f:33:7f:d9:fc:
         0c:6c:cd:28
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 24 02:30:25 2023 by rpki-client on console-ams.rpki-client.org