Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/f21a1f89d52b40243d6cb0e9cc9d0daf7a1426f4.roa
File:                     f21a1f89d52b40243d6cb0e9cc9d0daf7a1426f4.roa (raw, json)
Hash identifier:          NV1aPCn2I/n0og/yHAM8DObUC4dGuGWK1Fd3jQXMnQg=
Subject key identifier:   9A:6B:24:93:A2:D1:37:A7:8F:56:3D:60:6E:2C:B2:29:CF:D4:22:A1
Certificate issuer:       /CN=751a67f045f8f4106edcbcac4a291b68cb4fca20
Certificate serial:       0B38
Authority key identifier: 74:56:F4:FA:00:5B:BD:C8:10:41:D1:84:B9:90:6E:8D:AB:B8:9B:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/751a67f045f8f4106edcbcac4a291b68cb4fca20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/f21a1f89d52b40243d6cb0e9cc9d0daf7a1426f4.roa
Signing time:             Wed 19 Oct 2022 13:53:09 +0000
ROA not before:           Tue 18 Oct 2022 13:52:31 +0000
ROA not after:            Sat 19 Oct 2024 13:52:31 +0000
asID:                     271832
IP address blocks:        181.174.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2872 (0xb38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=751a67f045f8f4106edcbcac4a291b68cb4fca20
        Validity
            Not Before: Oct 18 13:52:31 2022 GMT
            Not After : Oct 19 13:52:31 2024 GMT
        Subject: CN=f21a1f89d52b40243d6cb0e9cc9d0daf7a1426f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:a9:aa:3c:10:41:2b:06:4d:ad:7a:eb:f2:
                    e9:47:44:e9:6d:f4:38:79:91:73:67:ed:f1:ee:ba:
                    8b:54:cd:a1:90:fd:c5:db:30:b8:d4:7e:78:be:c3:
                    5e:27:72:70:a3:b3:0d:26:16:d4:0f:d9:61:93:f3:
                    bb:7e:47:1b:8b:cd:4e:5b:57:57:54:2c:e2:54:cb:
                    12:1a:de:e5:71:c6:de:36:6c:4e:82:49:41:db:4d:
                    79:2f:71:70:8f:6f:47:2a:01:7a:0f:5f:33:e4:b9:
                    11:ee:76:fe:e2:f6:11:0d:8b:9b:62:f9:f7:85:c0:
                    d7:e2:76:e2:42:1e:a5:3f:b7:55:90:9f:0d:9d:88:
                    98:d1:79:c6:a9:71:7a:ca:a8:29:1c:f5:50:49:3f:
                    37:fe:f8:93:25:0b:64:a9:0b:f0:aa:07:cc:23:2c:
                    05:e3:b0:4d:e5:99:95:57:a8:f3:c3:fe:8e:25:cb:
                    63:c3:1f:b1:a6:a9:dc:5a:eb:02:97:01:11:be:fb:
                    7c:f4:9d:c1:20:18:ca:4a:16:90:f3:bd:10:e8:a5:
                    5d:41:52:3b:48:33:89:a3:13:a0:43:20:25:8c:16:
                    54:42:e7:30:0b:9e:b7:a8:74:c6:3c:cf:35:6b:64:
                    6c:d9:2b:dd:f7:8d:c6:8b:16:2b:00:1d:b1:4e:f3:
                    2a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6B:24:93:A2:D1:37:A7:8F:56:3D:60:6E:2C:B2:29:CF:D4:22:A1
            X509v3 Authority Key Identifier:
                keyid:74:56:F4:FA:00:5B:BD:C8:10:41:D1:84:B9:90:6E:8D:AB:B8:9B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/751a67f045f8f4106edcbcac4a291b68cb4fca20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/f21a1f89d52b40243d6cb0e9cc9d0daf7a1426f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/751a67f045f8f4106edcbcac4a291b68cb4fca20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:52:89:4c:ff:e7:26:73:07:f7:bb:de:2c:1c:4b:fa:a9:7a:
         40:05:4c:af:94:0d:ad:ad:8e:2e:5a:73:3b:f5:72:8c:ec:29:
         6b:72:82:3c:fb:46:52:41:2c:71:7b:83:2d:a8:1b:f8:fc:8e:
         73:ab:90:a8:6d:60:71:f1:a0:8d:b5:15:cb:ef:40:2e:5e:ae:
         97:4b:66:b6:17:70:a4:1a:13:08:03:72:66:6d:25:c2:cf:7e:
         84:05:8e:04:22:cd:ff:8d:d1:28:6d:19:b5:20:ed:cd:4d:e4:
         99:91:7e:88:c9:2d:6f:6a:42:1a:6a:81:b2:69:7f:3b:0f:dc:
         39:bc:de:55:1d:0f:32:62:d3:e5:fc:5a:9a:1f:f0:d4:cb:fa:
         28:06:15:02:8f:bf:9c:3c:83:64:4c:2e:38:86:f1:e8:e9:ad:
         6b:c9:d6:88:32:e5:06:89:fd:15:7a:c4:23:6c:46:3b:03:5f:
         b7:1e:05:28:e1:e1:04:73:f2:5c:07:d1:2e:83:fd:09:f8:13:
         1c:f0:fe:24:df:46:93:57:c8:4e:36:cc:96:59:7b:64:ba:76:
         06:e0:ea:52:d1:3e:0b:c6:82:e9:b7:8d:93:b5:5d:d6:d5:a1:
         94:a5:36:79:4a:76:f5:d8:c2:8a:56:34:00:b3:f1:d3:c1:94:
         d1:f5:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-fra.rpki-client.org