Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/aa59292c2c5de7ba782f63a7cb2824d4c89a58cd.roa
File:                     aa59292c2c5de7ba782f63a7cb2824d4c89a58cd.roa (raw, json)
Hash identifier:          gDVrp84AEnnlGZlh4AYeiJAuEbzoZCWR5WkKgQelekQ=
Subject key identifier:   73:EA:56:88:E1:9B:A7:E5:7E:4B:F7:28:D7:81:BD:12:AF:89:28:F9
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D7BD4
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/aa59292c2c5de7ba782f63a7cb2824d4c89a58cd.roa
Signing time:             Wed 24 Mar 2021 14:35:12 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        201.245.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883668 (0xd7bd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=aa59292c2c5de7ba782f63a7cb2824d4c89a58cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fb:09:b2:e5:6b:37:9c:e0:ce:3e:f1:a0:19:
                    6d:ec:7c:9a:63:a6:e0:c4:5f:33:70:f9:62:38:c9:
                    2d:1f:84:89:e4:bd:d4:fb:b8:84:58:cb:4e:ee:bc:
                    89:49:53:dd:2a:a9:1b:56:00:44:c1:cd:09:ee:54:
                    78:ec:43:00:b2:d8:2b:51:85:ef:b8:f6:b9:be:21:
                    4d:98:fc:f6:2a:3c:26:e3:95:02:5a:25:a1:99:d8:
                    7e:0f:ce:20:44:f5:8c:c4:aa:fd:98:aa:b9:4f:67:
                    89:11:2b:f6:76:c1:20:ab:34:0c:a9:e5:45:99:fe:
                    85:2b:77:b0:37:cb:14:15:b1:57:5c:d7:3b:bd:38:
                    91:3b:d4:a6:d6:a4:d9:b1:af:26:01:3e:bf:37:b7:
                    e5:44:14:46:5b:7e:c0:d5:fc:b0:7c:49:b0:8a:dd:
                    27:c6:36:4f:5f:52:7c:74:b1:f8:3e:e9:1d:55:b8:
                    6f:18:22:d0:82:ac:1e:0c:4c:5d:b6:ae:a9:96:05:
                    f8:16:3f:30:91:d8:0d:8b:5b:86:08:ed:c2:f2:1e:
                    21:d4:7a:a7:db:76:b7:16:e0:f2:4c:6f:3d:79:ce:
                    3b:31:41:af:5e:4e:a7:2e:37:d8:e9:3a:24:69:c3:
                    f0:d4:e8:ec:18:df:5d:b2:2c:d8:25:45:a9:b9:b2:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EA:56:88:E1:9B:A7:E5:7E:4B:F7:28:D7:81:BD:12:AF:89:28:F9
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/aa59292c2c5de7ba782f63a7cb2824d4c89a58cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.245.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:f2:4e:0f:e5:87:4b:2c:e3:d6:dd:09:23:cf:90:36:2a:2e:
         6f:d4:35:31:91:83:e9:7d:3c:c2:6b:19:88:b0:15:ce:b6:e5:
         ed:95:24:b5:a2:71:cd:eb:ef:b3:f9:a9:60:db:5b:aa:5d:04:
         2c:a2:ee:b6:e5:a7:63:16:64:61:17:3a:ac:2c:dd:8c:95:33:
         66:9d:33:96:82:c6:fd:93:34:2c:0c:8f:64:f6:1a:e9:7b:04:
         24:72:48:62:64:f5:50:cb:fc:e7:94:b7:b7:d2:41:d3:08:09:
         7a:27:11:8a:43:b7:95:db:20:40:4e:87:7c:cb:62:5f:c2:59:
         aa:fd:7d:23:b2:15:43:a8:2d:48:37:08:f4:3a:b1:ae:23:e5:
         b4:c4:45:d3:fe:f9:e2:bf:9e:dc:13:a0:83:fd:cb:0c:50:d7:
         38:bc:5a:e7:c8:71:14:63:97:97:c1:89:47:1b:89:57:4b:eb:
         3d:b7:c4:5c:82:74:d8:60:0d:b0:ce:ab:96:dd:f0:f2:d9:15:
         81:2f:0e:35:2c:07:91:81:35:67:c8:e3:15:b2:fd:30:9a:07:
         13:f4:72:74:d8:58:4d:c8:df:2a:b7:58:51:f2:28:e7:e0:c5:
         7e:32:e7:99:55:dc:e2:91:0b:18:77:36:24:f5:80:f1:6c:31:
         14:38:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:49 2023 by rpki-client on console-ams.rpki-client.org