Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6e1f083-cd72-40f5-aee0-6c1b7fafe441/66c733de594293557ace52f7cec1af541a65ba47.roa
File:                     66c733de594293557ace52f7cec1af541a65ba47.roa (raw, json)
Hash identifier:          x/h5G+DgIJnQUGAkooNSjmDL4Om2k668NCPnMb1TsGU=
Subject key identifier:   E5:36:BB:EF:00:A1:F9:66:97:BB:42:C8:FE:87:57:34:2E:D4:5E:BC
Certificate issuer:       /CN=d9a06b12727bc0ed97a16a645ac286bdc41e63dc
Certificate serial:       0366
Authority key identifier: C5:6C:A0:40:97:DB:4E:D9:37:61:A5:3F:4B:DF:23:0C:1A:E5:78:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9a06b12727bc0ed97a16a645ac286bdc41e63dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6e1f083-cd72-40f5-aee0-6c1b7fafe441/66c733de594293557ace52f7cec1af541a65ba47.roa
Signing time:             Mon 04 Oct 2021 22:48:26 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     263829
IP address blocks:        138.36.136.0/22 maxlen: 22
                          138.219.72.0/22 maxlen: 22
                          168.181.228.0/22 maxlen: 22
                          170.82.0.0/22 maxlen: 22
                          2803:8f80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870 (0x366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a06b12727bc0ed97a16a645ac286bdc41e63dc
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=66c733de594293557ace52f7cec1af541a65ba47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:94:0a:7f:92:77:eb:d5:69:c6:05:a1:7a:a6:
                    0a:ef:0f:00:1a:bd:e5:8b:b2:c2:f7:08:20:54:49:
                    fa:60:2f:af:8a:6d:6f:e7:05:b2:b3:12:ca:5f:38:
                    ea:14:3e:2d:8c:e4:83:4f:54:f4:d9:f1:61:c0:0d:
                    2a:5c:ca:c7:62:58:e2:72:49:ee:d0:40:a0:bd:91:
                    23:a6:05:52:d7:63:db:6d:4e:89:43:5a:32:6d:52:
                    5f:f1:40:08:aa:c1:f6:2a:99:a9:16:19:7b:13:3a:
                    04:82:09:de:a6:49:01:7d:ca:57:6e:80:b6:09:41:
                    ac:15:9c:ab:72:2e:8d:30:17:9e:99:bd:6b:de:61:
                    39:3e:1b:72:c0:a8:f1:40:c1:77:61:77:3a:c1:4c:
                    56:c4:23:84:bf:61:55:ac:c9:c5:9e:dc:20:b4:70:
                    ee:5c:59:07:8d:48:a7:7a:44:3d:1e:36:41:11:a8:
                    48:c4:06:63:d0:97:42:44:48:0c:0b:ec:e0:c2:74:
                    4e:26:95:7f:d9:4a:43:71:d7:3a:1a:88:ec:2f:38:
                    c0:93:94:d1:69:4d:e8:7a:92:b3:6b:3b:fd:59:94:
                    d0:0e:3c:2f:9e:e5:7e:b6:f3:34:79:e1:34:6c:f2:
                    12:98:05:85:fa:71:5c:22:31:20:61:2f:9a:54:38:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:36:BB:EF:00:A1:F9:66:97:BB:42:C8:FE:87:57:34:2E:D4:5E:BC
            X509v3 Authority Key Identifier:
                keyid:C5:6C:A0:40:97:DB:4E:D9:37:61:A5:3F:4B:DF:23:0C:1A:E5:78:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9a06b12727bc0ed97a16a645ac286bdc41e63dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1f083-cd72-40f5-aee0-6c1b7fafe441/66c733de594293557ace52f7cec1af541a65ba47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1f083-cd72-40f5-aee0-6c1b7fafe441/d9a06b12727bc0ed97a16a645ac286bdc41e63dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.136.0/22
                  138.219.72.0/22
                  168.181.228.0/22
                  170.82.0.0/22
                IPv6:
                  2803:8f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:20:aa:93:77:68:fc:17:52:04:4f:29:7e:01:f6:ed:a4:15:
         bf:d2:a2:a9:43:72:d9:49:bc:a0:91:40:1c:8c:71:3e:12:8d:
         be:ea:5a:cb:c9:0b:9a:e8:5f:88:33:5d:78:b8:24:53:5a:44:
         a9:16:e5:b2:4b:80:c7:ac:77:54:00:17:7d:61:b8:5b:1b:e5:
         84:6e:bc:f9:1f:fc:76:06:00:09:0e:09:3d:fd:9d:f8:16:1b:
         26:91:12:3c:14:7f:19:30:86:53:b9:ca:79:71:34:eb:52:93:
         49:0a:c2:61:5b:18:4b:d6:18:25:76:70:59:aa:6d:a8:fc:13:
         07:15:af:93:9c:8f:fa:58:83:6b:a2:77:ef:78:d4:dd:e4:85:
         e4:f3:2d:d3:fd:34:55:52:66:3b:71:d2:5b:df:ad:06:c6:35:
         84:c6:2e:d9:9e:8e:95:a1:e5:b9:a4:34:10:a1:07:3f:36:7f:
         e4:59:95:0b:6b:60:8d:06:75:fc:16:4d:29:89:af:91:f7:c2:
         da:b5:41:80:20:4d:05:c2:86:e7:0a:99:2d:d9:58:66:3b:0b:
         c3:0f:df:fa:d3:19:4d:9c:64:84:30:7b:33:d9:9a:de:53:70:
         a6:32:27:e9:4c:7f:54:02:b8:e4:63:32:72:3b:91:97:bc:d0:
         40:df:81:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 08:53:25 2023 by rpki-client on console-fra.rpki-client.org