Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/0ffac5d7ad1da5a16ce5647e427181169a581d10.roa
File:                     0ffac5d7ad1da5a16ce5647e427181169a581d10.roa (raw, json)
Hash identifier:          P+qDjwJsxAiyWvphL2Fe2+L7+kL9R/KxHUOVnKlc+0M=
Subject key identifier:   C6:29:1A:A5:47:74:CB:F5:C9:6A:0D:38:38:5E:61:4F:1F:0A:AE:EB
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       16FFEB
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/0ffac5d7ad1da5a16ce5647e427181169a581d10.roa
Signing time:             Thu 01 Sep 2022 15:50:36 +0000
ROA not before:           Thu 01 Sep 2022 15:48:44 +0000
ROA not after:            Sun 01 Sep 2024 15:48:44 +0000
asID:                     18734
IP address blocks:        189.202.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507307 (0x16ffeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Sep  1 15:48:44 2022 GMT
            Not After : Sep  1 15:48:44 2024 GMT
        Subject: CN=0ffac5d7ad1da5a16ce5647e427181169a581d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:46:93:22:cb:ff:be:15:39:3c:83:79:0e:
                    21:90:70:84:f4:fa:f7:6b:dc:b1:aa:d6:a8:80:49:
                    a1:08:c9:12:7d:eb:b8:75:4e:13:fe:b2:1b:b9:c2:
                    30:7d:43:65:76:44:e2:c4:9e:54:26:f5:ce:a9:54:
                    45:b3:a9:b8:7b:fa:65:6b:c6:be:20:9d:c2:a9:f8:
                    1a:b0:a8:ce:74:05:a7:b6:5c:1f:46:df:bd:75:8e:
                    1c:8c:08:52:af:0e:16:53:28:d9:46:3f:3e:4f:8d:
                    a7:7e:2b:81:d3:68:56:b9:1c:74:eb:33:b2:28:be:
                    18:af:3e:37:16:2f:99:f4:a1:be:34:bc:1a:27:de:
                    0d:bc:2d:a3:ec:e6:c4:2d:cf:3b:3d:31:e3:50:25:
                    90:dd:38:73:20:08:5a:48:72:a1:cf:b5:33:fb:c4:
                    2f:57:63:91:96:07:a5:d4:b4:f8:18:b7:56:c6:8b:
                    b3:5c:cd:79:53:13:e4:d1:78:5e:57:f4:b1:d5:ca:
                    ba:3d:f9:c5:61:99:a7:57:29:df:8d:05:75:4a:b5:
                    ac:6c:00:a0:8a:20:98:38:b9:c7:5b:d2:80:5a:e7:
                    9a:5a:f2:46:b6:85:a6:2b:b7:47:04:eb:e8:66:7f:
                    15:dc:52:ad:95:f3:a4:bd:3d:55:64:c8:27:b0:5f:
                    47:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:29:1A:A5:47:74:CB:F5:C9:6A:0D:38:38:5E:61:4F:1F:0A:AE:EB
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/0ffac5d7ad1da5a16ce5647e427181169a581d10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:1c:82:95:f3:24:23:d2:91:c7:d6:69:34:ac:e2:c8:25:20:
         08:14:fa:04:2b:36:3a:da:65:7b:6a:95:7f:bf:d9:ca:3a:96:
         77:a9:6a:7f:88:00:fa:18:0e:26:89:f1:19:ba:43:be:dd:bd:
         63:d2:c5:10:41:74:41:ee:6f:7e:e3:ad:1f:50:a1:d1:e6:d6:
         5d:46:a8:63:b7:ea:75:ec:3c:43:3f:20:0b:2b:40:36:cf:79:
         eb:9b:5f:6d:13:ab:aa:ff:90:f2:02:e7:dd:6c:39:22:db:8a:
         75:09:69:45:45:27:34:6e:b9:18:f7:d3:26:a1:76:04:b6:6e:
         28:95:08:7b:60:7d:e4:71:44:58:57:8c:74:26:5e:39:c8:13:
         a8:b3:05:48:66:21:9e:65:1b:65:14:12:ab:ac:d6:b9:00:0e:
         59:5e:75:98:18:e6:65:85:4f:93:77:ee:4d:52:fb:3d:16:6b:
         51:27:84:37:84:08:61:88:04:b6:80:39:bf:7c:8e:8b:af:7e:
         e3:0c:8a:c9:62:48:a5:3e:99:96:92:43:5b:e6:d8:37:03:f9:
         96:2f:85:87:f7:64:14:a7:68:33:49:4c:2e:ea:94:59:3d:02:
         8a:79:45:d2:6d:c3:8c:32:44:be:bc:90:92:be:41:02:06:0d:
         72:3d:33:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org