Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/3770f4f8972c8148f710ab09dd86b9e952102393.roa
File:                     3770f4f8972c8148f710ab09dd86b9e952102393.roa (raw, json)
Hash identifier:          mYYPEj67GXmXB7XUkmQ8a/MHDtmTUDc/UgByykDG7Hc=
Subject key identifier:   3F:83:5F:98:36:9B:F8:6F:1A:98:C2:13:D4:9F:1E:19:80:93:CE:D0
Certificate issuer:       /CN=71551dc34af40822e5acdd443b22d6450fe5317b
Certificate serial:       0D5A63
Authority key identifier: 7E:23:9D:47:99:CC:5B:47:C4:3B:81:43:B3:10:DE:BB:45:D1:9A:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71551dc34af40822e5acdd443b22d6450fe5317b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/3770f4f8972c8148f710ab09dd86b9e952102393.roa
Signing time:             Wed 24 Mar 2021 14:46:20 +0000
ROA not before:           Wed 24 Mar 2021 14:46:20 +0000
ROA not after:            Tue 24 Mar 2026 14:46:20 +0000
asID:                     266782
IP address blocks:        45.234.84.0/23 maxlen: 23
                          45.234.86.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875107 (0xd5a63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71551dc34af40822e5acdd443b22d6450fe5317b
        Validity
            Not Before: Mar 24 14:46:20 2021 GMT
            Not After : Mar 24 14:46:20 2026 GMT
        Subject: CN=3770f4f8972c8148f710ab09dd86b9e952102393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:e5:fc:cd:fc:0b:3d:37:f9:c7:f9:a3:ec:
                    b4:04:79:1d:65:6f:16:59:50:3a:e9:bc:f5:9f:92:
                    6f:df:c0:6f:6f:49:bf:9d:53:b6:bd:79:20:7b:b0:
                    07:80:0f:46:08:a7:4e:52:f8:9e:8c:0f:17:b1:33:
                    3c:aa:6b:ab:96:45:75:41:a2:7e:8d:96:80:d4:67:
                    4d:6b:4b:9d:f0:1b:b4:bc:24:2d:c2:d5:98:bf:e4:
                    b6:d6:96:a7:7d:cb:47:86:08:6a:81:6d:a4:31:cc:
                    48:1b:8a:e0:ca:2f:d0:76:5a:e2:d9:0b:a2:b1:2a:
                    46:68:73:11:6c:35:5a:b9:c3:90:7c:36:05:0e:cf:
                    4e:c9:c5:f3:25:89:85:85:8d:c5:5f:fc:f7:1f:ff:
                    89:fb:91:9d:65:be:56:d0:a4:a5:a9:2e:7f:18:2c:
                    e0:9e:84:f2:2b:d7:b6:fd:a3:14:37:ee:13:5a:89:
                    b1:98:d7:e1:10:88:8c:0d:7e:50:fc:86:c9:21:3c:
                    a1:20:69:cc:94:76:1a:3d:83:f9:59:54:dd:dd:9f:
                    aa:e1:b9:4a:80:73:56:dd:eb:cc:b0:0d:cd:dd:3b:
                    3a:b7:26:27:64:ee:fa:22:8d:ab:d7:be:ed:a0:d8:
                    3b:56:bd:cf:46:c4:9a:9f:b3:6a:f4:11:18:10:9d:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:83:5F:98:36:9B:F8:6F:1A:98:C2:13:D4:9F:1E:19:80:93:CE:D0
            X509v3 Authority Key Identifier:
                keyid:7E:23:9D:47:99:CC:5B:47:C4:3B:81:43:B3:10:DE:BB:45:D1:9A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71551dc34af40822e5acdd443b22d6450fe5317b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/3770f4f8972c8148f710ab09dd86b9e952102393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/71551dc34af40822e5acdd443b22d6450fe5317b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.84.0-45.234.86.255

    Signature Algorithm: sha256WithRSAEncryption
         06:2e:90:c3:54:3f:f1:30:8a:f6:ba:33:5d:5c:5a:b0:7c:86:
         14:08:c1:8a:43:36:27:07:d4:81:b1:82:5e:5e:d1:4c:cf:63:
         08:7d:e6:d2:34:c1:29:e1:b6:72:d7:25:85:8c:3a:ee:5e:43:
         d2:a1:f8:30:dd:64:bb:89:06:98:4f:0f:cd:24:1a:e7:91:82:
         e0:a2:00:c4:b0:96:46:b3:84:6d:db:ef:11:d1:0b:42:88:8d:
         42:89:bd:f2:ec:59:4b:b1:c9:bf:06:17:88:66:a1:49:6d:38:
         13:ca:b1:b2:7f:da:39:10:fa:2b:b7:80:bc:94:9e:02:af:22:
         dc:2c:f3:f5:ba:1d:60:c4:27:69:d0:db:86:a0:b8:81:38:9b:
         2f:d5:64:c3:b1:aa:27:3c:ac:1c:f3:ae:27:11:68:c2:35:30:
         0a:49:20:34:df:c6:b8:42:6a:f4:bb:48:17:9c:31:82:e8:43:
         c4:12:1b:84:b4:2b:08:68:e1:6c:7b:8d:9d:28:5e:3d:4f:5e:
         cd:2d:79:0d:0f:17:50:68:50:8d:4c:4f:cc:42:a7:c6:a4:34:
         f9:99:42:f4:de:6c:d2:8f:a0:1a:ba:0d:6c:23:85:07:73:15:
         c3:64:a9:ee:b6:cd:47:f8:c6:0d:51:c0:b7:00:9f:9d:8b:88:
         d5:bc:67:a7
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDDVpjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
NTUxZGMzNGFmNDA4MjJlNWFjZGQ0NDNiMjJkNjQ1MGZlNTMxN2IwHhcNMjEwMzI0
MTQ0NjIwWhcNMjYwMzI0MTQ0NjIwWjAzMTEwLwYDVQQDEygzNzcwZjRmODk3MmM4
MTQ4ZjcxMGFiMDlkZDg2YjllOTUyMTAyMzkzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAy6Tl/M38Cz03+cf5o+y0BHkdZW8WWVA66bz1n5Jv38Bvb0m/
nVO2vXkge7AHgA9GCKdOUviejA8XsTM8qmurlkV1QaJ+jZaA1GdNa0ud8Bu0vCQt
wtWYv+S21panfctHhghqgW2kMcxIG4rgyi/Qdlri2QuisSpGaHMRbDVaucOQfDYF
Ds9OycXzJYmFhY3FX/z3H/+J+5GdZb5W0KSlqS5/GCzgnoTyK9e2/aMUN+4TWomx
mNfhEIiMDX5Q/IbJITyhIGnMlHYaPYP5WVTd3Z+q4blKgHNW3evMsA3N3Ts6tyYn
ZO76Io2r177toNg7Vr3PRsSan7Nq9BEYEJ0c4QIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFD+DX5g2m/hvGpjCE9SfHhmAk87QMB8GA1UdIwQYMBaAFH4jnUeZzFtHxDuB
Q7MQ3rtF0ZqHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzE1NTFk
YzM0YWY0MDgyMmU1YWNkZDQ0M2IyMmQ2NDUwZmU1MzE3Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjdiYjlkYTktZThmOC00MTFmLThmM2YtYTNlZDg5
NWE4MjJlLzM3NzBmNGY4OTcyYzgxNDhmNzEwYWIwOWRkODZiOWU5NTIxMDIzOTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iN2JiOWRhOS1lOGY4LTQxMWYtOGYzZi1hM2Vk
ODk1YTgyMmUvNzE1NTFkYzM0YWY0MDgyMmU1YWNkZDQ0M2IyMmQ2NDUwZmU1MzE3
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQCLepUAwQALepWMA0GCSqGSIb3DQEBCwUAA4IBAQAGLpDD
VD/xMIr2ujNdXFqwfIYUCMGKQzYnB9SBsYJeXtFMz2MIfebSNMEp4bZy1yWFjDru
XkPSofgw3WS7iQaYTw/NJBrnkYLgogDEsJZGs4Rt2+8R0QtCiI1Cib3y7FlLscm/
BheIZqFJbTgTyrGyf9o5EPort4C8lJ4CryLcLPP1uh1gxCdp0NuGoLiBOJsv1WTD
saonPKwc864nEWjCNTAKSSA038a4Qmr0u0gXnDGC6EPEEhuEtCsIaOFse42dKF49
T17NLXkNDxdQaFCNTE/MQqfGpDT5mUL03mzSj6Aaug1sI4UHcxXDZKnuts1H+MYN
UcC3AJ+di4jVvGen
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:52 2023 by rpki-client on console-ams.rpki-client.org