Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/8a7beff9516829f3cd09429de4d099c884a0225d.roa
File:                     8a7beff9516829f3cd09429de4d099c884a0225d.roa (raw, json)
Hash identifier:          N/CS7udDrmrSVLsRWtENqqvhVI3LqeU5AGa1JxUi788=
Subject key identifier:   F7:A4:73:7A:2E:38:49:7D:AB:06:A3:3E:C5:80:22:E8:A9:32:5D:AA
Certificate issuer:       /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial:       1F7DF6
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/8a7beff9516829f3cd09429de4d099c884a0225d.roa
Signing time:             Fri 24 Mar 2023 16:22:26 +0000
ROA not before:           Wed 22 Mar 2023 10:07:05 +0000
ROA not after:            Fri 24 Mar 2028 10:07:05 +0000
asID:                     22869
IP address blocks:        138.117.143.0/24 maxlen: 24
                          190.99.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063862 (0x1f7df6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
        Validity
            Not Before: Mar 22 10:07:05 2023 GMT
            Not After : Mar 24 10:07:05 2028 GMT
        Subject: CN=8a7beff9516829f3cd09429de4d099c884a0225d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:b6:9e:0e:ee:20:23:5c:c7:15:a8:e8:d7:
                    f2:78:83:9b:63:ad:cc:2f:01:b4:ee:b1:4a:c7:9b:
                    e7:31:28:77:0a:db:86:c1:97:fb:67:d3:56:f4:30:
                    c0:56:d7:60:99:ca:c4:43:ba:b2:9b:1e:20:0e:ba:
                    de:3b:ab:72:52:d0:c8:3d:59:61:3d:46:f2:d0:09:
                    ba:98:a0:aa:3a:77:ba:99:d0:7e:e5:bb:09:f4:83:
                    40:ae:09:b6:4a:06:ec:7d:97:93:4a:4b:d5:30:df:
                    de:12:01:89:8f:6e:84:fd:b4:47:4d:3f:e1:ce:3f:
                    01:2e:d7:aa:54:c5:c5:92:98:01:a2:01:23:05:c9:
                    18:d9:b7:9f:5d:0e:05:2e:c0:58:c3:d6:01:3d:e4:
                    e4:b8:39:c3:77:f6:a5:07:7f:a7:9a:67:2d:0f:be:
                    ea:4d:df:11:f0:e2:ef:0c:e6:c2:2a:1c:3b:09:b0:
                    85:b7:7c:89:4d:4a:68:37:4b:79:e5:9d:cc:8f:df:
                    b5:74:57:cd:58:e4:2e:e6:59:be:01:81:c9:46:a1:
                    79:49:f4:87:27:de:23:c9:5c:c8:43:c5:a7:87:a4:
                    6f:cc:19:c1:e3:4c:5e:d7:08:09:f2:4a:83:98:1d:
                    45:35:28:7f:4c:9d:76:82:22:c3:8b:30:30:5e:28:
                    39:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A4:73:7A:2E:38:49:7D:AB:06:A3:3E:C5:80:22:E8:A9:32:5D:AA
            X509v3 Authority Key Identifier:
                keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/8a7beff9516829f3cd09429de4d099c884a0225d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.143.0/24
                  190.99.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:2b:4c:c0:e3:51:59:09:9f:e3:e9:52:37:d7:3b:9f:3d:e6:
         1e:f0:ea:1c:79:a7:21:81:ed:59:7b:b8:83:84:9c:da:3b:21:
         75:88:57:b7:40:f6:c5:1a:33:0e:8a:17:f1:7f:49:58:29:9e:
         dc:ec:dd:f2:2e:54:13:53:d0:6a:71:41:67:99:fd:1d:09:71:
         c0:36:42:2c:bd:fe:68:31:d5:ca:7a:6f:29:2d:b3:c9:9f:46:
         b1:cc:e4:80:6c:27:56:41:5c:bc:de:6e:af:0a:25:0b:80:79:
         b5:a0:dc:d4:0f:25:f8:1b:24:64:e3:59:28:0f:1f:e5:f6:77:
         4f:78:1f:ad:6a:03:c4:5e:63:93:09:9b:d2:62:a6:2d:8f:ad:
         a5:3d:56:a6:94:9a:c8:ab:fd:20:13:70:a9:5a:6b:3e:d8:2a:
         d5:51:4c:33:09:ae:f9:b0:60:fb:03:c6:18:b1:68:7b:91:e0:
         c5:96:f2:f0:a1:33:9a:cd:52:e5:5a:c0:35:5c:d9:e2:dd:1e:
         88:33:98:8c:68:cf:b9:5a:b5:c8:b9:62:2c:0c:ab:9c:f6:c1:
         a7:e4:41:17:c1:8c:67:30:6d:dc:e9:2c:78:68:ac:29:ee:a5:
         3f:00:90:e2:67:9e:0a:21:16:56:23:cd:33:a8:a1:46:d3:15:
         32:29:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org