Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/b4ad8d6412b8f911855770e5bd26e311f75f2e4c.roa
File:                     b4ad8d6412b8f911855770e5bd26e311f75f2e4c.roa (raw, json)
Hash identifier:          UaBF3vDZeqNRHuXdhgV3MmU6lAVKqPY8TXp0oZblxnA=
Subject key identifier:   C6:E6:FB:B7:B9:19:B5:2D:AE:B1:E8:AB:7F:A0:A0:3B:A6:BF:AB:E1
Certificate issuer:       /CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Certificate serial:       0D67F7
Authority key identifier: 21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/b4ad8d6412b8f911855770e5bd26e311f75f2e4c.roa
Signing time:             Wed 24 Mar 2021 14:28:55 +0000
ROA not before:           Wed 24 Mar 2021 14:28:55 +0000
ROA not after:            Tue 24 Mar 2026 14:28:55 +0000
asID:                     22927
IP address blocks:        179.0.14.0/24 maxlen: 24
                          200.13.42.0/23 maxlen: 23
                          200.33.82.0/24 maxlen: 24
                          2801:0:440::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878583 (0xd67f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
        Validity
            Not Before: Mar 24 14:28:55 2021 GMT
            Not After : Mar 24 14:28:55 2026 GMT
        Subject: CN=b4ad8d6412b8f911855770e5bd26e311f75f2e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:13:82:4f:9f:47:88:aa:0a:48:85:23:c2:d1:
                    ad:a1:5e:be:b7:3d:a9:fe:20:9e:5d:00:e2:e5:bf:
                    3a:bf:e4:b8:25:cc:f5:46:d6:fc:37:b8:71:61:a5:
                    22:7d:78:1d:76:bb:b8:c4:ea:5f:bc:0b:8f:93:48:
                    27:6a:6a:74:df:8c:e2:bb:1c:c8:38:11:1b:c1:bc:
                    3f:04:ff:56:cf:f1:5f:3e:b3:6a:48:7f:42:c1:49:
                    92:32:a4:b9:8e:2a:4f:b3:fe:0d:4d:20:7c:5f:18:
                    d8:e9:f5:48:7f:6f:15:1e:17:26:99:e4:45:e3:ee:
                    22:32:33:4c:07:3a:3e:54:51:4e:8a:58:a4:a7:a1:
                    ce:1e:cd:24:26:8d:4e:81:25:4b:48:02:96:05:28:
                    4c:13:c7:c0:69:6a:e2:e2:67:24:a2:a7:4b:8f:f3:
                    04:a7:06:3b:ae:96:46:2d:5f:6f:03:65:58:7e:05:
                    f6:a6:45:93:6f:9b:cc:d2:1e:8a:15:a4:2b:b9:ca:
                    ff:1c:91:4a:cc:13:25:92:50:e1:6e:44:36:6b:99:
                    e9:15:e6:67:81:54:83:5a:4d:95:1e:bb:f0:bc:0f:
                    ce:73:5c:29:49:46:b4:98:de:6c:18:7a:9a:c6:cb:
                    0b:34:37:0b:db:2c:ab:6f:e8:dc:1f:72:0e:5f:2d:
                    4e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E6:FB:B7:B9:19:B5:2D:AE:B1:E8:AB:7F:A0:A0:3B:A6:BF:AB:E1
            X509v3 Authority Key Identifier:
                keyid:21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/b4ad8d6412b8f911855770e5bd26e311f75f2e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24
                  200.13.42.0/23
                  200.33.82.0/24
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:a5:9d:13:b4:f7:83:01:80:99:72:a7:54:3b:60:03:cc:c1:
         47:85:bf:91:a8:ee:18:4f:11:23:88:1c:ed:87:63:66:28:bb:
         bf:c9:03:11:a1:8e:7b:8c:b1:b0:5a:43:1f:3a:a2:8e:af:79:
         ac:ad:29:c7:db:49:98:35:aa:28:ff:15:e5:7b:fb:31:4c:73:
         d0:11:66:94:08:21:5b:ec:60:c9:08:e4:d8:46:f1:de:76:ae:
         27:ea:81:0f:82:4c:a6:f4:ef:3c:bb:40:9e:2c:2a:74:46:30:
         e8:2c:e1:9a:23:30:fd:87:6a:33:6b:ec:a9:62:59:54:0d:78:
         ab:96:ea:2f:da:1c:71:e3:2b:1c:c1:29:1f:f5:3a:78:02:f5:
         c8:c9:30:64:2f:79:89:71:1f:5d:6f:de:ff:29:e3:f3:12:93:
         c8:b3:fe:76:35:7e:9c:2a:a7:d4:2d:2b:1f:59:af:5a:40:e5:
         09:d9:c9:82:fa:50:b6:67:40:e1:b9:d1:ee:73:44:33:12:cb:
         c2:35:23:ba:de:83:1a:e5:d6:69:d6:23:c7:1f:79:75:c5:91:
         f1:d2:23:a2:34:b6:0e:66:bf:82:23:da:3c:fc:a7:1d:cc:76:
         9d:17:b8:50:04:71:54:a3:05:be:f7:c5:41:89:f9:b0:d1:ca:
         f5:be:fb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org