Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/8909bf8e6b2675d3428743e66b35d0641a9a073d.roa
File:                     8909bf8e6b2675d3428743e66b35d0641a9a073d.roa (raw, json)
Hash identifier:          RIDUzO4SosbkO7sPtkjRGmXVaeHXzduTs4AHlUkj+UM=
Subject key identifier:   C6:1A:74:99:18:72:9C:EA:C2:E1:64:13:98:5E:D4:A1:F8:A0:61:62
Certificate issuer:       /CN=e69db0dddc072dab05b76f666b2b150d51ad28d1
Certificate serial:       0FB375
Authority key identifier: B3:E7:FA:2E:50:D1:99:E0:6D:83:A0:5F:4E:58:DE:04:B3:40:88:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e69db0dddc072dab05b76f666b2b150d51ad28d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/8909bf8e6b2675d3428743e66b35d0641a9a073d.roa
Signing time:             Thu 08 Jul 2021 06:53:33 +0000
ROA not before:           Thu 08 Jul 2021 03:00:00 +0000
ROA not after:            Sat 08 Jul 2023 03:00:00 +0000
asID:                     52468
IP address blocks:        167.249.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028981 (0xfb375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69db0dddc072dab05b76f666b2b150d51ad28d1
        Validity
            Not Before: Jul  8 03:00:00 2021 GMT
            Not After : Jul  8 03:00:00 2023 GMT
        Subject: CN=8909bf8e6b2675d3428743e66b35d0641a9a073d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a6:5a:bd:ea:75:47:0a:25:2d:27:a5:46:b0:
                    59:c3:54:c4:53:fa:bd:a6:c8:99:71:e6:e5:69:de:
                    3e:8b:e1:e6:b9:22:b4:b9:da:1d:4d:6d:dc:04:cb:
                    40:84:32:12:f2:ee:d3:57:5e:2c:f9:f7:c1:f5:0b:
                    bd:20:33:3b:89:da:71:d3:f0:92:73:6d:63:f2:d0:
                    d1:99:0e:3c:6b:51:f0:ec:7a:92:61:82:e8:97:ce:
                    0b:0c:86:56:2e:a5:8f:d6:64:29:0d:3d:2d:3e:bc:
                    56:82:78:0e:be:60:13:52:a8:cc:44:04:88:5a:7e:
                    2c:83:a9:43:aa:0f:ec:1e:03:a9:9f:ee:a1:3d:52:
                    e7:1a:c3:23:3b:1b:bd:f0:55:75:6c:3c:50:84:94:
                    36:ad:a6:16:b5:d4:f5:40:a6:a8:dd:63:6d:79:19:
                    1e:37:83:08:47:fb:9e:b7:d6:77:ac:b0:22:66:8f:
                    86:f9:f3:8f:6d:31:ce:61:85:b0:60:8d:fe:44:0a:
                    6b:ad:af:d3:b8:e2:e3:92:a5:ac:28:5d:04:72:4d:
                    f3:81:07:9a:df:04:aa:b0:c4:f3:17:77:88:0a:af:
                    d0:a3:c3:6d:0d:82:06:cf:64:68:48:ba:0c:91:78:
                    14:dc:fd:9e:65:fa:ba:d6:85:b5:7e:fa:12:dc:97:
                    08:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1A:74:99:18:72:9C:EA:C2:E1:64:13:98:5E:D4:A1:F8:A0:61:62
            X509v3 Authority Key Identifier:
                keyid:B3:E7:FA:2E:50:D1:99:E0:6D:83:A0:5F:4E:58:DE:04:B3:40:88:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e69db0dddc072dab05b76f666b2b150d51ad28d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/8909bf8e6b2675d3428743e66b35d0641a9a073d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/e69db0dddc072dab05b76f666b2b150d51ad28d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:36:dd:f5:f4:06:56:26:a8:1a:c4:89:12:da:19:31:40:38:
         d1:1f:e5:6a:d1:db:57:1c:55:44:eb:af:39:1d:90:eb:47:94:
         ad:01:6f:28:f0:38:3a:ff:51:cd:bc:6f:f5:46:87:a4:7d:ba:
         76:94:7f:76:72:22:56:ac:be:54:9c:b0:c8:ee:06:c9:3d:38:
         03:6e:7f:af:5d:e4:ea:0a:f3:4b:ab:83:9a:33:71:70:25:ee:
         50:04:8b:b7:9e:8d:3d:b0:c3:2b:15:13:db:c4:c2:41:f7:0a:
         42:24:a5:f6:ee:53:da:b4:00:81:14:72:01:48:a8:30:e7:4f:
         2a:22:ac:c4:e7:ea:63:2b:f9:ee:12:93:d0:0b:53:bc:bc:53:
         13:92:fd:d5:82:65:41:c0:a8:d6:95:c5:55:d8:98:63:12:66:
         17:8c:28:ac:93:e2:89:80:93:f2:45:7a:d3:83:e1:6c:a2:b8:
         26:07:2c:84:59:c0:f4:32:8e:93:41:c6:c6:5d:8f:06:20:17:
         80:04:17:bc:96:bd:f0:18:18:22:9d:55:e6:ec:3d:e8:69:49:
         61:65:2b:28:ed:f9:f4:b7:c9:ce:62:95:1f:2b:40:27:5d:90:
         e4:0e:b3:f4:64:f6:fe:11:0b:9c:ad:80:49:28:6b:68:d8:cf:
         10:ad:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org