Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/a35c5b8acc53db1d97c5b4048f8760d7c94a5d2d.roa
File:                     a35c5b8acc53db1d97c5b4048f8760d7c94a5d2d.roa (raw, json)
Hash identifier:          h+5bg44ZAvLdMl9T3lElMBwCYuo90kzHQ98vl1Uq+Gw=
Subject key identifier:   8B:74:1A:54:FB:9F:24:BE:42:7F:DD:8B:2F:DF:F9:58:71:E5:7B:62
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       1456BB
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/a35c5b8acc53db1d97c5b4048f8760d7c94a5d2d.roa
Signing time:             Tue 28 Dec 2021 03:21:39 +0000
ROA not before:           Mon 27 Dec 2021 03:00:00 +0000
ROA not after:            Thu 28 Dec 2023 03:00:00 +0000
asID:                     271837
IP address blocks:        177.234.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332923 (0x1456bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Dec 27 03:00:00 2021 GMT
            Not After : Dec 28 03:00:00 2023 GMT
        Subject: CN=a35c5b8acc53db1d97c5b4048f8760d7c94a5d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b5:51:6c:cf:b0:45:31:ee:28:c2:af:5c:08:
                    22:cc:9c:3b:30:f6:70:7b:fb:75:65:fd:2a:71:99:
                    16:b5:9b:c7:b6:7b:96:49:22:b0:ee:cd:f8:09:11:
                    90:02:7e:82:3d:e3:a7:3b:c1:54:61:42:8d:1c:91:
                    84:5f:cf:52:bb:c5:cb:37:0f:92:95:2b:3a:ce:97:
                    56:24:e6:97:46:1a:e5:49:56:11:4b:f5:41:9d:a7:
                    7d:c1:d8:62:d9:1b:bd:d0:cd:a9:50:7f:7c:74:ef:
                    d6:7d:f2:66:dd:da:31:81:bf:31:cc:17:a2:0c:cd:
                    c1:61:83:e3:86:88:41:55:43:b3:08:49:de:ed:5f:
                    b2:79:4a:5d:0c:7e:08:ff:f2:c6:0b:03:e6:bf:cb:
                    46:8e:ef:57:5e:cc:55:a7:7e:57:91:71:5d:53:45:
                    d8:e3:cd:b0:a9:06:6e:f2:7f:27:5d:88:ec:16:8f:
                    c1:62:f1:26:eb:04:e0:06:21:0a:a3:cc:ef:70:b3:
                    4e:ed:c3:d0:c8:21:24:73:17:bc:98:cf:84:88:a0:
                    05:62:22:28:37:d9:dd:52:43:24:08:e0:58:d7:93:
                    c3:56:b2:7a:b5:8a:82:29:f8:62:37:c6:36:32:fd:
                    2e:83:ef:22:c5:71:4b:09:5b:22:43:67:b1:78:b0:
                    fe:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:74:1A:54:FB:9F:24:BE:42:7F:DD:8B:2F:DF:F9:58:71:E5:7B:62
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/a35c5b8acc53db1d97c5b4048f8760d7c94a5d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:95:a0:bf:8b:54:e3:65:38:cb:1a:60:10:4e:ba:f9:05:29:
         bc:a2:4f:da:30:a9:a0:78:72:4d:8c:d5:c7:f3:c0:f4:ea:53:
         31:91:a5:05:bc:b4:dd:d4:b8:8a:f8:c0:12:0e:cf:b6:9e:9e:
         eb:fa:7e:62:fe:7d:41:1c:38:bf:40:30:93:11:41:7a:f4:14:
         ad:3d:64:fa:c1:04:ec:34:cd:9a:4d:c9:4a:0d:55:20:0c:ba:
         00:4a:86:23:e2:e4:2d:5c:a7:39:a6:cc:58:40:79:22:bd:ed:
         8b:43:80:50:fd:5e:33:b4:73:f1:23:78:6a:73:16:b3:b1:18:
         11:6f:55:24:57:ec:3c:f9:61:64:9a:67:9b:ea:66:62:5b:23:
         6a:b1:d9:96:ff:14:c4:c9:96:db:52:0d:38:51:9e:ee:cb:08:
         17:88:e3:3b:e6:68:5a:25:3f:73:9e:f8:46:c3:98:48:3b:45:
         58:97:ce:99:15:c2:e1:a7:e5:99:a3:9e:28:24:7c:42:34:fa:
         b7:ab:a0:8f:46:61:2a:22:82:db:a4:41:43:37:7e:5b:4e:fa:
         98:e5:f9:eb:13:d0:a7:1a:01:61:06:97:34:11:67:01:8d:a1:
         5a:a0:09:52:39:ea:50:79:3a:36:7a:02:2b:9b:f7:45:77:d2:
         d7:86:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org