Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/400e5613761ac64684b789a5b7f8939a1d92e01c.roa
File:                     400e5613761ac64684b789a5b7f8939a1d92e01c.roa (raw, json)
Hash identifier:          N5sY7LwtkhmnAr7tFdnpDnSacVtu7J6ts6fJ/IrlrW8=
Subject key identifier:   BC:53:B1:8B:60:31:64:87:DB:4E:5C:6B:DC:56:18:79:E5:02:64:47
Certificate issuer:       /CN=a15b01c2a8902bf345199fd88a365f092418a1fe
Certificate serial:       1EE2AA
Authority key identifier: BB:FC:F1:42:C4:C7:BA:5D:1C:4B:C6:3D:85:FB:B3:90:EF:19:EE:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a15b01c2a8902bf345199fd88a365f092418a1fe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/400e5613761ac64684b789a5b7f8939a1d92e01c.roa
Signing time:             Tue 07 Mar 2023 14:10:58 +0000
ROA not before:           Mon 06 Mar 2023 14:10:34 +0000
ROA not after:            Fri 07 Mar 2025 14:10:34 +0000
asID:                     265837
IP address blocks:        45.70.88.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024106 (0x1ee2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15b01c2a8902bf345199fd88a365f092418a1fe
        Validity
            Not Before: Mar  6 14:10:34 2023 GMT
            Not After : Mar  7 14:10:34 2025 GMT
        Subject: CN=400e5613761ac64684b789a5b7f8939a1d92e01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:78:8d:f8:0d:7b:32:29:ec:44:27:aa:03:95:
                    13:cc:83:2a:30:31:b5:d7:ca:9c:6c:b7:37:d0:d6:
                    be:7f:fa:21:1d:60:5e:1f:e8:39:2f:54:0b:fd:ca:
                    7f:f1:38:fa:6f:80:ab:e0:0b:8c:4b:6e:21:bb:18:
                    8d:54:4d:77:59:51:43:65:b2:84:78:fd:23:97:32:
                    2a:be:84:97:25:26:da:6d:30:ef:96:78:24:df:9b:
                    ab:f4:2a:fe:41:5d:ab:0c:af:0c:e4:86:0c:be:02:
                    78:2c:90:52:28:5f:83:9f:01:4c:c2:25:5e:a1:aa:
                    47:ba:7f:cf:9a:ae:a9:cb:4f:8e:3e:28:6e:4c:eb:
                    21:99:c2:91:fa:56:49:be:4a:c8:c3:78:38:5c:4b:
                    47:ff:05:49:1d:6c:33:8a:4d:bd:f2:16:37:f5:2f:
                    82:91:52:a7:fd:94:26:d3:f3:e0:ca:db:13:a2:ff:
                    be:86:64:48:46:78:6f:88:80:76:7a:6b:02:da:11:
                    98:39:ba:dc:ef:ff:3c:59:29:ce:46:79:35:46:6c:
                    71:e9:93:a0:60:9f:fb:f4:e3:f2:00:10:ce:0b:77:
                    67:2a:5f:e1:1a:20:89:da:a7:1c:c1:06:94:8f:1a:
                    e3:ad:df:45:3d:75:18:1e:3c:4d:b1:90:87:32:77:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:53:B1:8B:60:31:64:87:DB:4E:5C:6B:DC:56:18:79:E5:02:64:47
            X509v3 Authority Key Identifier:
                keyid:BB:FC:F1:42:C4:C7:BA:5D:1C:4B:C6:3D:85:FB:B3:90:EF:19:EE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a15b01c2a8902bf345199fd88a365f092418a1fe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/400e5613761ac64684b789a5b7f8939a1d92e01c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/a15b01c2a8902bf345199fd88a365f092418a1fe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:33:fe:bb:c9:f6:c0:89:61:af:c5:21:db:a2:4a:6c:b4:1c:
         42:e5:73:e3:c6:de:93:85:68:6c:6c:1b:ef:a6:ab:00:bc:b3:
         a4:d5:cf:e1:6c:62:e7:29:85:81:42:e9:d9:6a:30:c2:73:71:
         76:ee:c4:66:c8:04:e6:35:af:52:1d:72:1c:2c:7a:a8:8a:58:
         ff:a7:5e:dc:d7:f0:b7:d9:07:5f:06:c1:f1:70:a4:92:c9:32:
         40:06:ad:78:9b:b5:c4:f2:3e:58:d1:80:d6:14:75:15:4f:0f:
         84:6b:60:e8:25:08:f8:ff:c8:35:3e:8a:fc:48:d6:d9:b7:fb:
         e1:a8:98:b9:55:b8:cb:3e:f7:78:73:b5:9c:4d:16:33:c3:84:
         81:a0:13:9c:e3:7c:8f:46:3d:25:b3:ff:b1:c3:0e:ca:60:ec:
         97:ea:ea:55:c2:77:e8:4c:45:4e:77:56:75:66:3d:44:aa:db:
         36:cd:17:54:11:3f:82:eb:f5:da:29:98:dc:10:02:21:a0:c5:
         83:6c:0e:19:40:c1:4f:bb:44:60:39:f3:19:b5:17:76:b6:18:
         d0:83:40:8f:4f:a3:f3:93:1e:03:67:7b:60:d2:df:b9:4a:64:
         a8:b6:53:4d:a8:72:d5:e9:74:ef:07:30:35:8a:80:b4:10:31:
         c6:9d:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org