Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/6a9de43faa1b16eecfaa3870977938196003c671.roa
File:                     6a9de43faa1b16eecfaa3870977938196003c671.roa (raw, json)
Hash identifier:          abR3SvWrQ9G/yOkZ5brCHimOjhr58wPxsbnsLLv7h1o=
Subject key identifier:   7B:AE:EB:45:DA:E2:7C:A0:10:FD:55:67:F2:8D:36:1C:1F:FD:7A:2A
Certificate issuer:       /CN=8634873a21a0af40a01354647ad4978d3847d365
Certificate serial:       0D9597
Authority key identifier: 0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/6a9de43faa1b16eecfaa3870977938196003c671.roa
Signing time:             Wed 24 Mar 2021 14:41:00 +0000
ROA not before:           Wed 24 Mar 2021 14:40:58 +0000
ROA not after:            Tue 24 Mar 2026 14:40:58 +0000
asID:                     28058
IP address blocks:        179.60.48.0/20 maxlen: 23
                          200.105.112.0/21 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890263 (0xd9597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8634873a21a0af40a01354647ad4978d3847d365
        Validity
            Not Before: Mar 24 14:40:58 2021 GMT
            Not After : Mar 24 14:40:58 2026 GMT
        Subject: CN=6a9de43faa1b16eecfaa3870977938196003c671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:0f:e2:b6:89:71:07:2d:f0:80:18:e8:a4:
                    a9:a2:d3:f7:5e:d1:3c:6a:e5:11:7d:ec:8e:65:45:
                    8e:1f:d9:c7:1d:c5:cb:cd:3a:4c:69:a0:3d:87:2c:
                    cd:ca:a7:27:0d:24:d6:a8:c0:c5:aa:31:dd:98:d4:
                    4b:13:45:1a:63:cd:13:4c:21:a3:06:9f:fb:df:82:
                    b0:63:61:e7:a5:00:61:78:22:20:f3:f4:2b:95:4e:
                    d8:7e:59:4d:b5:c5:ac:41:57:d8:e4:e3:3d:e0:c8:
                    91:bf:57:c1:1c:92:15:b8:a6:a8:47:25:e8:52:46:
                    21:4d:43:cb:51:95:8b:a5:10:c6:26:2a:9e:2f:a9:
                    a4:32:5c:25:7f:23:45:08:f1:14:75:c4:47:8e:3c:
                    70:c4:b2:3a:8c:76:fa:f7:3b:b1:f1:e4:9d:b7:04:
                    41:40:e1:09:f0:8f:b2:be:5a:da:99:bd:80:20:dd:
                    06:cc:2f:72:07:8b:99:f9:01:67:d7:51:2c:8c:2a:
                    2d:23:2e:a6:4e:82:76:96:8f:a1:77:fc:95:1a:e2:
                    cf:4e:41:42:b8:03:fd:53:47:00:8c:ec:cb:ad:25:
                    9b:cc:4a:5e:df:51:61:81:97:83:c1:7b:96:30:fa:
                    0a:72:3b:ac:76:6f:3b:f7:66:81:79:fc:83:bf:ad:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AE:EB:45:DA:E2:7C:A0:10:FD:55:67:F2:8D:36:1C:1F:FD:7A:2A
            X509v3 Authority Key Identifier:
                keyid:0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/6a9de43faa1b16eecfaa3870977938196003c671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.48.0/20
                  200.105.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:02:81:c7:b8:2e:2f:70:c2:4c:10:fb:b6:b2:8a:7e:e0:5e:
         66:5a:b3:68:8b:88:ea:32:90:3f:57:d5:42:e9:a6:b0:46:47:
         83:34:63:b3:38:be:ac:48:59:dc:1c:64:e6:f9:3b:4e:7a:28:
         e7:60:3e:67:7e:8f:16:e5:7b:38:29:14:a8:58:71:a0:04:5a:
         e7:14:7d:9a:8a:33:73:70:94:88:b3:d0:47:a9:81:86:4b:bc:
         db:e3:21:4a:8c:5c:4b:5d:d1:c5:fe:83:0b:c8:95:46:f8:cc:
         35:be:a0:54:d6:0d:a1:6f:3b:f9:0b:07:af:20:ce:44:de:5c:
         bb:c6:21:54:ec:00:7e:a8:05:ab:51:aa:79:15:50:24:9d:2e:
         a5:79:5e:3f:ca:de:13:04:41:5b:2b:ce:a4:c5:7e:2a:df:45:
         3f:5f:fc:bf:c0:5c:59:fc:2d:1b:5b:4c:0b:a6:d7:42:56:64:
         b2:1e:e4:a6:55:e6:4a:df:b0:03:02:d4:bb:9f:bc:bf:33:0b:
         76:80:45:14:4f:e3:ab:6a:92:56:0a:35:32:66:55:7b:9c:cf:
         e1:c0:66:b9:25:56:ce:53:44:13:a0:ca:6b:c2:c5:f7:b8:8a:
         79:fd:91:e5:76:15:98:a3:bf:b5:36:33:ac:ac:1c:9e:d9:68:
         76:73:f3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org