Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be17fe30-26bf-4a2b-83d8-1e80e398c063/675ccc05b1ef0b25386eb2ca3b51220ffc876ed5.roa
File:                     675ccc05b1ef0b25386eb2ca3b51220ffc876ed5.roa (raw, json)
Hash identifier:          BZ3pK2FIdMq2PApUVVNfyAenRkkdBEGRvasJYmwONGE=
Subject key identifier:   77:E9:BC:28:E0:A2:E9:2D:5E:A0:5F:DA:2C:FD:47:51:55:5D:4F:34
Certificate issuer:       /CN=224dea1fd2772d1b6b4820cdf6e1d40eeafef4c5
Certificate serial:       044BB5
Authority key identifier: 9E:E5:D1:FF:15:91:45:AE:59:15:D0:C3:A0:54:B8:92:42:48:34:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/224dea1fd2772d1b6b4820cdf6e1d40eeafef4c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be17fe30-26bf-4a2b-83d8-1e80e398c063/675ccc05b1ef0b25386eb2ca3b51220ffc876ed5.roa
Signing time:             Mon 31 May 2021 16:41:00 +0000
ROA not before:           Mon 31 May 2021 03:00:00 +0000
ROA not after:            Wed 31 May 2023 03:00:00 +0000
asID:                     269991
IP address blocks:        24.152.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281525 (0x44bb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=224dea1fd2772d1b6b4820cdf6e1d40eeafef4c5
        Validity
            Not Before: May 31 03:00:00 2021 GMT
            Not After : May 31 03:00:00 2023 GMT
        Subject: CN=675ccc05b1ef0b25386eb2ca3b51220ffc876ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:ec:be:81:70:eb:71:53:aa:3e:08:9e:0a:
                    89:cb:9d:7c:cb:e5:79:bc:f1:d0:e7:2e:9c:e4:16:
                    fa:43:31:bb:50:71:c3:35:1c:08:67:e9:af:83:e3:
                    27:0e:e8:49:d0:6d:d1:f2:0f:ce:c2:5b:1e:f1:36:
                    13:7c:c0:a8:58:0b:9f:48:4e:2d:c5:4c:b2:27:ae:
                    95:5d:10:d0:17:81:eb:d1:ab:37:45:47:b0:16:64:
                    c3:99:72:fb:f8:49:6b:9b:dc:df:dc:e0:03:9a:f9:
                    a9:8e:13:db:2b:1e:25:f0:84:18:a5:84:64:be:66:
                    ce:23:3f:a3:5a:a8:32:64:b4:63:53:1d:16:85:68:
                    ef:d7:c4:44:57:b5:88:44:38:8f:7c:fb:ba:b9:f7:
                    55:49:d6:05:53:5c:86:8e:4f:0d:b6:07:dd:86:16:
                    71:75:e6:60:3c:97:95:91:d7:9e:19:ff:4d:22:99:
                    b0:43:83:f8:10:76:89:6b:56:19:38:67:59:21:2b:
                    f4:04:31:64:20:e0:3c:8e:2b:50:45:fb:22:54:86:
                    c1:9e:53:92:d4:53:be:59:ba:18:00:25:d4:e4:2d:
                    1b:73:51:c7:b5:f4:9c:11:3e:9a:11:22:07:d3:7f:
                    d8:82:af:0b:7f:24:7d:46:48:d9:b3:c3:1b:00:1d:
                    12:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E9:BC:28:E0:A2:E9:2D:5E:A0:5F:DA:2C:FD:47:51:55:5D:4F:34
            X509v3 Authority Key Identifier:
                keyid:9E:E5:D1:FF:15:91:45:AE:59:15:D0:C3:A0:54:B8:92:42:48:34:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/224dea1fd2772d1b6b4820cdf6e1d40eeafef4c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be17fe30-26bf-4a2b-83d8-1e80e398c063/675ccc05b1ef0b25386eb2ca3b51220ffc876ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be17fe30-26bf-4a2b-83d8-1e80e398c063/224dea1fd2772d1b6b4820cdf6e1d40eeafef4c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:4a:74:ed:5b:5d:61:5b:fc:76:04:35:40:ca:4e:d0:55:0b:
         12:00:db:f7:7e:5a:aa:45:76:94:85:55:5a:64:77:2d:2f:e9:
         72:9e:ae:8a:d4:b8:be:8f:76:ea:ac:d2:05:62:b3:83:24:04:
         fb:cb:e2:00:4d:73:b1:7f:7e:df:bb:57:dd:80:e5:24:f6:91:
         17:48:92:80:98:bf:1b:b3:59:41:a3:26:27:04:1d:34:67:15:
         7e:47:ee:be:e3:21:f9:d5:44:e1:26:30:cd:c0:78:4a:64:10:
         9d:8e:2d:f5:2e:ca:fb:9d:a1:65:b9:b3:ca:50:40:d9:30:c6:
         bc:ce:d6:5f:1c:d1:65:8f:04:bf:50:dc:af:0c:df:f1:40:77:
         94:cf:0b:30:b5:06:48:87:61:29:31:0d:4f:d8:d1:ff:c6:81:
         64:60:3d:77:7c:c2:7e:40:a8:5b:e7:90:4a:9e:2c:55:df:f5:
         75:d1:1c:eb:6a:1c:cc:bf:e8:99:97:d5:88:f9:29:da:8d:9b:
         f5:05:27:61:d8:1a:e2:c5:c8:5f:a1:ed:fd:cb:57:d8:83:1d:
         c8:30:2b:ec:83:fd:1c:b2:70:9c:75:e6:0d:f4:fa:6a:9e:91:
         c7:1c:44:06:c9:82:f8:9e:42:2b:07:0e:b3:cf:58:c7:3e:0f:
         7e:8e:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org