Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/fc65f467b5d23a9617c5448f98a8b0e5ce5c570a.roa
File:                     fc65f467b5d23a9617c5448f98a8b0e5ce5c570a.roa (raw, json)
Hash identifier:          3jOy9pZKS1frrNSOgq/NngVB48d+KSYfBtkC8CTT3aQ=
Subject key identifier:   F2:9A:22:03:E9:77:8B:0B:B3:8E:DC:62:16:9B:E4:C1:5B:FE:AC:21
Certificate issuer:       /CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Certificate serial:       0B37AD
Authority key identifier: 95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/fc65f467b5d23a9617c5448f98a8b0e5ce5c570a.roa
Signing time:             Wed 24 Mar 2021 14:36:23 +0000
ROA not before:           Wed 24 Mar 2021 14:36:22 +0000
ROA not after:            Tue 24 Mar 2026 14:36:22 +0000
asID:                     267799
IP address blocks:        45.173.14.0/23 maxlen: 23
                          45.173.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735149 (0xb37ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
        Validity
            Not Before: Mar 24 14:36:22 2021 GMT
            Not After : Mar 24 14:36:22 2026 GMT
        Subject: CN=fc65f467b5d23a9617c5448f98a8b0e5ce5c570a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b5:91:51:b3:89:e1:e1:13:c8:3f:29:cd:98:
                    46:42:7f:d4:ec:00:49:7b:33:86:54:68:30:42:37:
                    22:8b:24:36:40:84:a7:a5:22:b7:19:a3:97:35:0c:
                    20:32:18:52:1c:8a:62:aa:df:b1:a0:83:56:9c:aa:
                    e8:30:8e:39:8b:db:d8:d6:67:e7:89:86:03:ad:99:
                    4f:07:2b:94:3f:69:36:e9:a3:f5:d6:ac:c7:60:fd:
                    c0:ba:c2:17:36:0c:fe:92:a2:65:c1:b3:fb:d7:80:
                    19:35:b8:7a:4c:b3:46:5a:a5:62:64:eb:50:92:41:
                    2d:4e:93:86:72:c0:60:e8:bb:e6:f6:5b:e9:67:c9:
                    b0:ef:61:74:60:9e:ae:0a:bf:6b:7b:22:00:7c:6f:
                    65:47:95:5d:ca:2a:be:37:36:68:f5:34:7f:74:63:
                    66:ba:85:0f:e5:42:73:16:96:4c:d8:28:84:d7:f5:
                    36:1c:2c:ea:b1:3c:b7:5c:91:79:4f:a0:1e:78:be:
                    24:4e:5f:55:fd:8d:e6:22:48:f5:4b:b4:6b:4f:ce:
                    9c:2c:1b:32:60:af:74:c0:a8:db:49:41:96:74:f3:
                    49:2d:31:d2:27:a6:7c:f9:0b:a3:f6:68:41:8a:64:
                    3e:ef:2d:5c:3c:e2:41:86:7d:f2:52:d2:c4:e9:97:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9A:22:03:E9:77:8B:0B:B3:8E:DC:62:16:9B:E4:C1:5B:FE:AC:21
            X509v3 Authority Key Identifier:
                keyid:95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/fc65f467b5d23a9617c5448f98a8b0e5ce5c570a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.14.0/23
                  45.173.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:13:6b:02:7b:27:90:71:24:1c:c8:31:03:b0:9a:90:b4:f5:
         47:0a:4b:dc:f3:b1:80:d4:4c:9e:65:97:e8:b7:41:46:0c:17:
         56:9f:91:41:a0:2d:c2:2a:8e:26:65:ca:2b:0a:da:6b:40:b3:
         59:bf:f0:db:b0:4c:c6:87:e1:5b:1c:05:1b:1f:b6:8e:90:c8:
         92:5a:d6:17:5a:1d:3e:ba:86:c5:c7:73:6d:ef:4a:11:d0:27:
         82:96:e0:f2:5f:0c:46:54:66:67:bc:44:75:c3:e3:3b:e5:ce:
         be:fa:a3:dd:b8:a7:e4:30:7e:1a:95:f2:93:00:23:1e:90:2a:
         04:71:0e:15:9f:c7:2f:c0:30:e9:a5:de:3c:52:95:4a:9c:64:
         88:09:05:da:48:16:73:8a:d5:8c:34:a8:5b:99:9c:29:c1:ca:
         8c:44:7b:05:5a:e6:47:a7:08:00:db:9c:aa:f5:13:4b:59:e2:
         44:ef:6a:1e:57:47:2e:6e:b2:e5:41:03:0c:3e:5d:79:96:5c:
         ee:ca:fe:90:3f:0d:51:14:8d:1d:b4:cf:1d:16:10:9a:1b:af:
         71:3f:b1:c3:1f:3a:27:47:ff:b5:d3:f8:9f:4b:1a:e5:01:04:
         82:1a:5b:b3:a6:bb:51:03:86:84:3c:62:13:5e:c0:e2:05:01:
         20:c6:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 04:29:56 2023 by rpki-client on console-ams.rpki-client.org