Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ada4e857-8cc5-4e9d-a281-1dafc68a7203/658c4afd6ec1f1dec32171674ef0fb7e1a122c2e.roa
File:                     658c4afd6ec1f1dec32171674ef0fb7e1a122c2e.roa (raw, json)
Hash identifier:          S3y1e4Ou1hD6ENuR2mVkZjW0vPAYpcIBEQaKlMFVTuQ=
Subject key identifier:   AE:C5:EB:CC:7E:A2:8C:3B:01:6A:F2:80:DD:1B:72:06:8B:01:63:23
Certificate issuer:       /CN=a282b488a30f6e8b70f0d85fd8cddfd7888f98a2
Certificate serial:       04DC
Authority key identifier: 12:A7:2B:66:E3:12:28:9E:97:67:96:DB:FA:BB:8F:F0:2A:54:F8:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ada4e857-8cc5-4e9d-a281-1dafc68a7203/658c4afd6ec1f1dec32171674ef0fb7e1a122c2e.roa
Signing time:             Mon 05 Apr 2021 12:58:15 +0000
ROA not before:           Mon 05 Apr 2021 03:00:00 +0000
ROA not after:            Wed 05 Apr 2023 03:00:00 +0000
asID:                     271800
IP address blocks:        170.246.76.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a282b488a30f6e8b70f0d85fd8cddfd7888f98a2
        Validity
            Not Before: Apr  5 03:00:00 2021 GMT
            Not After : Apr  5 03:00:00 2023 GMT
        Subject: CN=658c4afd6ec1f1dec32171674ef0fb7e1a122c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c2:60:0f:a0:0c:f2:c8:1d:c1:8e:4a:17:c3:
                    c1:13:a0:af:8f:04:8e:20:18:6b:57:95:0a:d2:4f:
                    2d:20:ef:5a:23:28:b5:b4:89:4f:ac:ef:e2:9d:9c:
                    9b:bc:7c:ff:2a:f1:3c:82:83:e4:22:52:14:46:43:
                    f7:46:55:4d:77:4f:0a:51:c6:91:8d:6d:09:bc:b9:
                    1e:3d:45:ce:16:f7:46:ce:ff:91:c0:ae:29:64:be:
                    29:d6:86:39:82:ea:f2:2f:1e:17:fc:a0:77:f0:b4:
                    b6:a3:d1:f8:55:c6:7c:6b:84:10:6a:0f:17:8f:e3:
                    c1:40:88:8e:0b:9e:9c:b0:22:3b:bd:4e:d2:b4:13:
                    5d:84:08:56:a0:86:03:03:cd:1d:a7:a4:0a:ce:65:
                    c1:01:2a:ee:66:b8:08:f1:a0:3a:71:eb:4b:de:fd:
                    cf:db:e1:22:66:c7:5d:f9:95:94:36:05:d0:b2:ae:
                    70:61:45:6b:33:26:7f:be:bb:38:e1:bb:b4:de:cd:
                    7c:d0:a2:a3:c7:c3:68:c9:a9:8e:64:a3:0d:cd:11:
                    42:b4:d9:57:64:5f:80:cf:30:ee:ad:42:5b:be:f8:
                    d9:bb:11:14:ae:46:a7:a6:38:b2:7c:e9:48:49:f7:
                    f7:c3:bc:51:0f:d4:a3:c8:b0:a1:a9:ab:e8:0c:f4:
                    dc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C5:EB:CC:7E:A2:8C:3B:01:6A:F2:80:DD:1B:72:06:8B:01:63:23
            X509v3 Authority Key Identifier:
                keyid:12:A7:2B:66:E3:12:28:9E:97:67:96:DB:FA:BB:8F:F0:2A:54:F8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ada4e857-8cc5-4e9d-a281-1dafc68a7203/658c4afd6ec1f1dec32171674ef0fb7e1a122c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ada4e857-8cc5-4e9d-a281-1dafc68a7203/a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:cf:dd:62:a6:36:d7:57:ff:d7:69:a9:87:4c:c1:bc:de:02:
         26:90:6d:b5:ee:95:e6:d2:ec:e1:36:d6:8b:de:38:92:64:ae:
         27:f3:ad:38:79:d2:87:7c:7c:4c:e0:3e:18:62:68:2a:5c:ba:
         73:3b:62:0b:89:f0:6e:c2:cb:95:b3:7c:52:6b:c4:5e:9b:48:
         ef:b8:67:7e:2d:02:31:2d:0d:47:01:62:30:c8:f9:f2:9a:f9:
         1a:01:32:91:24:43:a4:9b:74:c1:1d:5b:35:ee:cc:01:03:0f:
         dd:b7:85:47:76:b0:83:8f:fd:35:31:32:e0:82:58:67:86:0b:
         f7:3c:d6:fe:d3:3a:84:c1:9c:1f:11:44:6b:d5:a0:65:13:bb:
         6f:8a:e6:f5:f1:be:0d:39:cf:0e:72:80:2c:1f:47:2f:81:09:
         1f:40:c9:6f:de:ba:4b:54:61:b3:69:d6:e4:be:bf:dd:12:4b:
         94:a1:bf:e2:ba:56:4f:2f:1f:d7:56:86:a2:97:06:55:c2:bb:
         ee:87:2d:db:bd:1b:64:f0:0e:bc:9a:f3:bc:56:a2:e7:ec:bb:
         86:7d:c9:79:22:fa:2b:f7:b1:76:dc:af:86:b8:77:df:4d:f8:
         ce:3e:c0:9f:ac:c8:e7:d0:c1:85:d6:e1:fc:6b:5c:19:d7:06:
         2d:62:bf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org