Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/3c59758b6e4562a4ae9a26866de4a2d33af020a9.roa
File:                     3c59758b6e4562a4ae9a26866de4a2d33af020a9.roa (raw, json)
Hash identifier:          AZGAKGa2bYqEGPTVuVKrgKKhC8uVNPfiEu4fVJ3e2zg=
Subject key identifier:   61:C6:93:8A:3F:24:9D:B2:69:79:59:1B:88:80:FC:C3:9A:87:12:CF
Certificate issuer:       /CN=3070426b746ffaf94407f39e1e550bba97179b09
Certificate serial:       046321
Authority key identifier: 4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/3c59758b6e4562a4ae9a26866de4a2d33af020a9.roa
Signing time:             Wed 24 Mar 2021 14:42:58 +0000
ROA not before:           Wed 24 Mar 2021 14:42:55 +0000
ROA not after:            Tue 24 Mar 2026 14:42:55 +0000
asID:                     265540
IP address blocks:        192.141.246.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287521 (0x46321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3070426b746ffaf94407f39e1e550bba97179b09
        Validity
            Not Before: Mar 24 14:42:55 2021 GMT
            Not After : Mar 24 14:42:55 2026 GMT
        Subject: CN=3c59758b6e4562a4ae9a26866de4a2d33af020a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:b2:90:8e:76:5d:5d:89:f5:eb:0a:5b:5d:
                    4c:a4:84:70:c7:33:87:f4:b2:42:c7:54:41:36:b7:
                    cd:9c:98:75:f3:98:c3:01:17:ab:de:54:56:49:64:
                    49:a0:6c:07:d0:2b:20:9c:ae:ea:33:bf:fd:7f:b4:
                    a8:73:02:24:1a:82:f6:a9:f3:51:f0:d1:fd:26:e5:
                    17:08:04:67:88:f8:53:45:96:d2:bd:b7:dd:84:31:
                    59:93:7b:d1:c1:59:29:47:db:8d:35:1d:a2:a3:ff:
                    de:11:68:4d:c1:fc:4b:ab:c3:4d:75:99:8f:d2:32:
                    28:24:51:f9:72:20:f6:e4:bf:ce:8b:be:c7:cf:5b:
                    e4:fc:40:9d:ed:80:7d:4e:92:1a:b3:a8:6e:cb:ff:
                    7d:04:68:16:23:3b:95:4e:93:4a:4c:88:69:ef:84:
                    6d:c0:28:d0:2e:b9:9c:30:09:f6:1b:33:f7:53:a0:
                    d8:97:b8:0b:34:44:19:01:47:18:ec:53:1d:0d:97:
                    f3:f0:d4:82:1b:71:f3:6e:5b:c3:b4:1b:df:7c:e7:
                    69:4e:86:83:5d:c5:b6:3c:9d:b1:08:ee:bb:14:60:
                    07:cd:16:57:e3:23:25:4b:dd:76:93:9f:2c:df:a8:
                    f1:e6:a6:7a:c9:e4:3b:97:17:36:e3:90:10:d3:31:
                    5e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C6:93:8A:3F:24:9D:B2:69:79:59:1B:88:80:FC:C3:9A:87:12:CF
            X509v3 Authority Key Identifier:
                keyid:4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/3c59758b6e4562a4ae9a26866de4a2d33af020a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/3070426b746ffaf94407f39e1e550bba97179b09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:fc:bf:55:56:79:b3:84:8b:78:e4:d1:a6:20:23:76:b3:af:
         0b:0a:5b:0c:45:32:31:51:05:af:c7:ba:cf:dc:1a:c3:0f:fb:
         1b:bb:f6:db:0c:88:0d:19:bf:1a:1f:f5:1d:74:b3:3c:0c:33:
         25:99:10:37:6c:b2:cb:1c:c5:7e:fd:0f:89:c6:1e:a2:68:fd:
         a9:91:5c:97:25:75:ca:d9:38:ed:41:7d:83:4f:a2:af:a7:09:
         9d:ee:f5:43:df:d3:49:82:60:ce:02:38:22:1f:6e:ae:30:0f:
         d9:d1:46:bb:6c:bf:2e:36:2a:86:4a:0a:ef:b7:c6:5f:eb:e6:
         24:9a:48:17:17:2e:7a:53:9d:6d:20:ad:41:50:2c:a9:6a:3d:
         3f:bb:f6:2f:35:96:0b:44:2d:61:7e:ef:5f:7a:fe:cb:40:9f:
         c9:f9:7c:a2:6c:88:57:3e:36:69:c0:c4:78:c2:ed:1e:38:dd:
         70:ab:2d:ea:0b:8f:99:bc:5b:7f:53:32:1e:96:7e:2b:fb:28:
         13:96:2c:f9:6e:7b:89:74:6c:49:38:9c:e5:66:e0:75:82:79:
         8d:31:32:7d:2e:59:b7:b2:dd:aa:f9:c2:b7:f8:a0:31:10:d5:
         34:42:86:a8:ee:f9:42:e4:ea:40:33:f3:80:d4:30:18:0f:b0:
         69:17:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 16:48:52 2023 by rpki-client on console-fra.rpki-client.org