Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/da908bb84879538a20e089daf8aee91ef125d424.roa
File:                     da908bb84879538a20e089daf8aee91ef125d424.roa (raw, json)
Hash identifier:          FltCLttRhJHa9iZtjY5/S0CQ52rRH2/DtEmm6kGySfM=
Subject key identifier:   7E:67:F6:D8:49:CA:01:FF:A0:10:4E:D2:7E:71:FC:E6:B9:0D:55:BE
Certificate issuer:       /CN=0ab54f870629d44668b4eafe72acded873a82381
Certificate serial:       051B
Authority key identifier: A4:41:BB:8F:20:69:00:3A:99:9F:64:F7:32:C2:CB:84:64:17:39:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ab54f870629d44668b4eafe72acded873a82381.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/da908bb84879538a20e089daf8aee91ef125d424.roa
Signing time:             Mon 04 Oct 2021 23:02:08 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     394474
IP address blocks:        45.5.64.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307 (0x51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab54f870629d44668b4eafe72acded873a82381
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=da908bb84879538a20e089daf8aee91ef125d424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:2e:12:26:1a:46:63:61:1b:d8:d7:60:7f:
                    7f:a3:55:cf:ad:16:fe:cb:85:c1:3b:87:6c:44:bb:
                    0c:bc:73:81:50:77:84:d7:e0:b9:25:dd:0a:ef:39:
                    64:ba:9d:a8:54:c2:2f:5f:da:37:ee:10:04:23:6e:
                    a2:b2:fd:3f:2e:29:36:79:02:ce:ac:d8:08:4b:e1:
                    13:be:11:89:f4:c4:fb:85:56:1a:cf:77:a7:18:f5:
                    66:34:e2:7b:1d:dc:90:4c:e9:ae:06:c8:37:f8:e1:
                    df:32:3b:89:41:e1:88:60:fe:e6:5b:45:67:45:f4:
                    a7:16:af:13:bf:75:5a:6f:7d:ba:e5:9c:45:de:3a:
                    d0:8a:45:fa:fd:40:3a:b7:9d:06:84:3d:46:99:be:
                    7e:6e:18:c1:d9:16:39:6e:63:be:0d:f9:d6:c7:53:
                    e6:67:28:22:eb:d4:95:73:e7:24:76:b8:e6:43:91:
                    9c:33:4d:53:81:6a:93:ea:3c:49:6c:9a:2a:b7:5b:
                    85:23:c5:0a:cc:65:1e:82:33:87:9a:dd:32:30:e0:
                    cc:94:50:17:ef:01:45:dc:93:36:e9:ad:a6:1a:c8:
                    a7:2d:24:25:10:92:34:82:f9:48:cd:a6:71:82:3e:
                    7c:b7:f1:49:76:ae:f7:6e:1c:d5:a4:bf:19:ba:d4:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:67:F6:D8:49:CA:01:FF:A0:10:4E:D2:7E:71:FC:E6:B9:0D:55:BE
            X509v3 Authority Key Identifier:
                keyid:A4:41:BB:8F:20:69:00:3A:99:9F:64:F7:32:C2:CB:84:64:17:39:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ab54f870629d44668b4eafe72acded873a82381.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/da908bb84879538a20e089daf8aee91ef125d424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/0ab54f870629d44668b4eafe72acded873a82381.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:f2:c3:54:de:1c:88:3b:8d:5b:12:37:cb:9e:9d:c4:3a:9d:
         5b:03:91:5d:c6:54:19:4b:de:19:7e:64:eb:5f:b5:47:51:4c:
         e0:8e:06:25:e8:29:5d:41:0c:55:78:68:4a:df:fa:a4:29:8c:
         58:9f:e1:ec:cb:96:57:ee:f6:78:d4:de:08:7d:7a:dc:7a:e3:
         c4:4c:41:02:d1:71:9f:65:d0:a3:6f:34:46:61:3a:fb:ac:ca:
         7f:1d:c6:96:de:42:d2:bd:40:a1:23:4a:57:d7:56:22:1c:d9:
         61:d7:8b:f6:b1:b5:4e:e9:f1:be:bf:45:00:b8:7b:5f:0b:ff:
         ca:e8:37:1c:5b:f8:24:0c:99:09:87:d6:71:40:3d:6e:ee:c7:
         d6:91:d1:df:a1:c3:46:6c:f5:31:67:6d:df:40:b9:c5:b3:7e:
         a4:08:8d:ee:a3:0f:f9:82:ff:f8:41:2a:d9:d0:21:08:82:c4:
         22:99:01:70:af:af:6a:62:e0:d0:87:73:5d:29:77:2f:bf:9e:
         7b:6e:f9:4f:cc:89:46:77:3d:65:01:b0:cc:3a:69:08:ab:c6:
         5b:f7:42:08:20:81:8a:c8:a1:69:05:dd:c4:55:5a:2b:39:9c:
         5f:75:91:c0:6e:bc:ee:10:b3:cb:b1:81:c2:0e:af:f9:32:cf:
         bd:2f:73:6a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMGFi
NTRmODcwNjI5ZDQ0NjY4YjRlYWZlNzJhY2RlZDg3M2E4MjM4MTAeFw0yMTEwMDQw
MzAwMDBaFw0yMzEwMDQwMzAwMDBaMDMxMTAvBgNVBAMTKGRhOTA4YmI4NDg3OTUz
OGEyMGUwODlkYWY4YWVlOTFlZjEyNWQ0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoXS4SJhpGY2Eb2Ndgf3+jVc+tFv7LhcE7h2xEuwy8c4FQd4TX
4Lkl3QrvOWS6nahUwi9f2jfuEAQjbqKy/T8uKTZ5As6s2AhL4RO+EYn0xPuFVhrP
d6cY9WY04nsd3JBM6a4GyDf44d8yO4lB4Yhg/uZbRWdF9KcWrxO/dVpvfbrlnEXe
OtCKRfr9QDq3nQaEPUaZvn5uGMHZFjluY74N+dbHU+ZnKCLr1JVz5yR2uOZDkZwz
TVOBapPqPElsmiq3W4UjxQrMZR6CM4ea3TIw4MyUUBfvAUXckzbpraYayKctJCUQ
kjSC+UjNpnGCPny38Ul2rvduHNWkvxm61LOFAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUfmf22EnKAf+gEE7SfnH85rkNVb4wHwYDVR0jBBgwFoAUpEG7jyBpADqZn2T3
MsLLhGQXOdEwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8wYWI1NGY4
NzA2MjlkNDQ2NjhiNGVhZmU3MmFjZGVkODczYTgyMzgxLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hZDkxZDMyZC05NTc4LTQzMzQtYjNlNC0wN2JmZDY0
YzZmNTcvZGE5MDhiYjg0ODc5NTM4YTIwZTA4OWRhZjhhZWU5MWVmMTI1ZDQyNC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2FkOTFkMzJkLTk1NzgtNDMzNC1iM2U0LTA3YmZk
NjRjNmY1Ny8wYWI1NGY4NzA2MjlkNDQ2NjhiNGVhZmU3MmFjZGVkODczYTgyMzgx
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLQVAMA0GCSqGSIb3DQEBCwUAA4IBAQAR8sNU3hyIO41bEjfL
np3EOp1bA5FdxlQZS94ZfmTrX7VHUUzgjgYl6CldQQxVeGhK3/qkKYxYn+Hsy5ZX
7vZ41N4IfXrceuPETEEC0XGfZdCjbzRGYTr7rMp/HcaW3kLSvUChI0pX11YiHNlh
14v2sbVO6fG+v0UAuHtfC//K6DccW/gkDJkJh9ZxQD1u7sfWkdHfocNGbPUxZ23f
QLnFs36kCI3uow/5gv/4QSrZ0CEIgsQimQFwr69qYuDQh3NdKXcvv557bvlPzIlG
dz1lAbDMOmkIq8Zb90IIIIGKyKFpBd3EVVorOZxfdZHAbrzuELPLsYHCDq/5Ms+9
L3Nq
-----END CERTIFICATE-----
Generated at Tue Oct 3 08:55:25 2023 by rpki-client on console-ams.rpki-client.org