Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/475a2e0effe96218441056b3f90f79855fb10e85.roa
File:                     475a2e0effe96218441056b3f90f79855fb10e85.roa (raw, json)
Hash identifier:          yRM2UefG9Hik7lnONluLYoeTnckIbsSHlZptcMUCCRw=
Subject key identifier:   21:3D:41:68:EA:C8:9C:19:E5:9E:FC:38:8E:82:D1:43:21:BC:6D:8F
Certificate issuer:       /CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
Certificate serial:       0A299E
Authority key identifier: 5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/475a2e0effe96218441056b3f90f79855fb10e85.roa
Signing time:             Wed 29 Sep 2021 14:36:56 +0000
ROA not before:           Wed 29 Sep 2021 03:00:00 +0000
ROA not after:            Fri 29 Sep 2023 03:00:00 +0000
asID:                     64131
IP address blocks:        167.249.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666014 (0xa299e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
        Validity
            Not Before: Sep 29 03:00:00 2021 GMT
            Not After : Sep 29 03:00:00 2023 GMT
        Subject: CN=475a2e0effe96218441056b3f90f79855fb10e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:fb:7b:eb:ed:99:87:7e:a9:b9:28:f1:64:
                    92:37:5a:3b:77:0e:81:a3:15:a5:e1:f0:a9:f6:02:
                    de:0b:b6:1f:0d:34:d2:ff:62:f8:98:82:30:c5:04:
                    33:3f:82:b7:76:cb:c4:7e:a4:cf:ba:84:91:43:34:
                    5c:c9:d9:a2:48:11:51:b2:dc:4c:b1:33:77:55:d2:
                    18:54:1c:9a:02:87:a7:7b:44:30:fd:54:08:2a:c7:
                    c9:37:94:20:4f:76:28:5a:ea:0c:bd:fb:93:93:be:
                    3c:5a:2d:a0:e9:ed:84:71:01:1b:39:53:50:28:7f:
                    f9:0e:ec:29:59:f4:03:bd:21:f9:de:f7:67:36:78:
                    4e:ed:56:af:6b:7d:72:06:e9:5f:47:06:37:1b:e7:
                    de:37:10:54:07:f9:21:07:17:b0:ff:20:4a:1e:b5:
                    ad:64:7d:02:12:40:2e:dc:a7:4b:71:f1:91:68:c7:
                    04:81:6b:6e:33:46:53:5b:94:1f:e9:0a:b9:a8:3e:
                    69:2c:b2:1f:54:bd:31:c4:ec:00:a5:67:23:86:bd:
                    a5:2a:1a:4d:c8:4c:18:42:26:b3:b1:69:17:70:5e:
                    7b:c9:53:39:98:ca:fb:86:1c:91:d4:a6:1f:75:13:
                    e8:4f:a3:ce:35:c8:3a:22:7b:92:4e:c2:00:43:93:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3D:41:68:EA:C8:9C:19:E5:9E:FC:38:8E:82:D1:43:21:BC:6D:8F
            X509v3 Authority Key Identifier:
                keyid:5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/475a2e0effe96218441056b3f90f79855fb10e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:e4:9a:d3:93:8f:5b:f7:de:d0:a9:3d:16:9c:e1:0e:b6:95:
         99:82:34:e9:ec:a0:94:5d:36:88:48:3e:6a:ed:6b:6d:7e:5c:
         4f:d4:0d:ce:0d:48:27:85:c7:a7:39:62:7c:46:e9:5f:b3:a9:
         6e:5d:34:95:52:ff:38:37:29:d7:0c:8d:00:b3:c5:02:61:4c:
         3b:c3:59:7d:fe:53:8d:07:a3:00:ca:e6:b6:8b:68:2b:38:09:
         b5:82:47:60:01:52:f7:1a:57:69:f2:7a:8a:34:6d:ab:f3:0b:
         a5:ca:6f:cf:1c:5b:d2:12:a6:67:96:16:ec:7b:97:c9:f2:fb:
         97:f4:26:f1:9a:20:16:ad:32:ea:b0:7b:c3:9a:e0:32:67:6d:
         fc:11:c6:39:2a:0c:c3:23:78:54:6d:54:24:83:c6:a1:7d:a7:
         09:ef:15:c8:f2:a9:fd:f1:b4:0f:59:1b:2a:95:20:95:cb:6d:
         69:09:77:be:bd:11:51:96:9c:ac:30:d5:8c:57:89:16:db:c0:
         28:d2:b2:38:45:b0:1e:b7:a6:d1:ac:64:03:c5:b6:14:ab:bb:
         48:4e:fd:b5:5b:ca:3a:bd:f2:17:b7:8f:44:d1:ef:b0:76:2e:
         85:89:02:95:94:6d:e8:9a:fb:16:61:73:45:da:6c:94:37:37:
         a0:ef:ac:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:54 2023 by rpki-client on console-ams.rpki-client.org