Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/faf14df4faef3641bf082e4510532e17d3e4b2f7.roa
File:                     faf14df4faef3641bf082e4510532e17d3e4b2f7.roa (raw, json)
Hash identifier:          sDvDKnF6tm8EJSIPMZwzezy+uwOqWQMKvrO4Iv95Pt4=
Subject key identifier:   D0:0C:37:E1:BD:AB:D6:CE:14:A5:D7:71:3C:5D:C7:CD:DC:08:FC:52
Certificate issuer:       /CN=415bbdadc090f33ec878e16eb6264e70c552a90c
Certificate serial:       0DC5F4
Authority key identifier: 75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/faf14df4faef3641bf082e4510532e17d3e4b2f7.roa
Signing time:             Wed 24 Mar 2021 14:41:15 +0000
ROA not before:           Wed 24 Mar 2021 14:41:13 +0000
ROA not after:            Tue 24 Mar 2026 14:41:13 +0000
asID:                     27947
IP address blocks:        186.33.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902644 (0xdc5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415bbdadc090f33ec878e16eb6264e70c552a90c
        Validity
            Not Before: Mar 24 14:41:13 2021 GMT
            Not After : Mar 24 14:41:13 2026 GMT
        Subject: CN=faf14df4faef3641bf082e4510532e17d3e4b2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:57:72:8e:c9:20:b9:12:92:29:0c:e8:1f:
                    08:86:40:9d:2a:f9:9b:9c:ef:3b:ff:30:a6:1d:b6:
                    8d:74:c0:58:2b:40:fa:6d:bd:dd:f9:60:4c:35:5e:
                    16:3b:d1:44:5a:8e:35:5c:b1:da:c7:e2:2f:71:e1:
                    99:4d:ee:bb:8a:84:38:37:24:c2:37:50:eb:20:61:
                    de:2f:f7:2d:6d:b7:a3:5f:64:8c:45:b4:85:0a:bf:
                    54:79:4b:b2:db:fb:58:6b:68:67:93:b9:42:1d:d4:
                    87:19:87:38:ce:d5:85:eb:81:a3:73:60:4c:f4:1d:
                    b8:70:26:98:e1:a8:2a:75:9f:46:13:c3:80:ca:a6:
                    4c:7c:e3:42:c7:5d:db:ef:5f:27:29:d9:a2:be:28:
                    04:92:bd:06:9a:12:40:51:c2:36:7b:e9:6c:24:3b:
                    77:c8:30:44:3c:48:62:26:b0:4a:ab:4f:75:ff:21:
                    87:e4:0d:44:97:c4:58:c8:8d:ac:99:6f:b8:15:46:
                    26:4b:1e:d8:e1:51:b0:e9:76:1b:e6:f5:7d:22:d1:
                    62:8f:f5:cc:ce:89:84:51:65:a1:a8:34:f5:00:af:
                    42:4b:08:10:41:63:cf:a3:49:91:05:d9:42:40:d7:
                    49:7e:69:7e:e5:5c:ca:bd:ff:7a:f7:ec:10:4d:bc:
                    21:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0C:37:E1:BD:AB:D6:CE:14:A5:D7:71:3C:5D:C7:CD:DC:08:FC:52
            X509v3 Authority Key Identifier:
                keyid:75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/faf14df4faef3641bf082e4510532e17d3e4b2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/415bbdadc090f33ec878e16eb6264e70c552a90c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:75:6c:9c:c8:28:d0:34:70:4c:ec:55:29:f4:c5:de:2f:1b:
         31:96:4d:4f:97:7a:5b:14:c2:2a:30:b2:e6:13:1d:a2:35:c6:
         22:39:02:c4:e0:02:ea:18:fc:ea:97:17:1a:c2:18:92:8b:17:
         ab:25:8c:3a:a6:f9:64:65:d2:fa:39:28:ab:0e:5f:27:81:9b:
         31:41:51:16:43:95:85:03:96:8d:ca:ac:c8:9a:70:58:2d:67:
         4c:aa:a8:3f:b8:5a:e8:0d:a5:ec:92:00:af:e2:12:5a:a5:49:
         83:f2:35:62:e2:7c:b0:28:30:eb:f5:31:62:0b:d8:e3:1a:de:
         cc:1b:f9:3c:fb:59:12:81:f3:00:d8:2b:2d:55:21:a8:4f:12:
         c8:82:f7:f1:3a:33:c4:bc:fa:b7:e1:1e:77:fd:6c:eb:52:56:
         b6:73:03:90:4e:8a:5e:82:6e:1c:0e:ba:73:ac:34:03:1b:6e:
         1b:6f:1b:0c:00:80:f8:e3:d1:2f:c3:d0:1c:c6:40:f1:4b:ee:
         3f:07:26:ad:25:c3:cd:98:e3:6c:df:c9:68:73:b9:d8:4a:4c:
         7c:af:81:1d:52:d3:f7:3f:99:bb:56:e8:ee:a4:41:bb:57:ea:
         77:b5:94:97:5f:e5:51:f0:af:fa:9c:6c:1f:8f:62:34:31:ee:
         f6:7a:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 17:43:41 2023 by rpki-client on console-ams.rpki-client.org