Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/ff084d0a16fddde2396a053f8c46f8777aa2c7b7.roa
File:                     ff084d0a16fddde2396a053f8c46f8777aa2c7b7.roa (raw, json)
Hash identifier:          Q18rRHlbi6j3I7y4WQpMoXRyHJVl8lZbZCo/45gh7jM=
Subject key identifier:   72:F3:6C:98:CF:0F:93:68:5C:32:49:69:18:51:0B:ED:C5:30:B7:B4
Certificate issuer:       /CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
Certificate serial:       0DC97A
Authority key identifier: 6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/ff084d0a16fddde2396a053f8c46f8777aa2c7b7.roa
Signing time:             Wed 24 Mar 2021 22:49:31 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     265775
IP address blocks:        191.97.64.0/24 maxlen: 24
                          191.97.65.0/24 maxlen: 24
                          191.97.66.0/24 maxlen: 24
                          191.97.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903546 (0xdc97a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=ff084d0a16fddde2396a053f8c46f8777aa2c7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b4:70:47:06:04:c5:11:77:1b:83:a5:ac:63:
                    19:63:5e:f7:16:d1:75:ee:ca:72:2d:bd:7a:47:90:
                    7c:0d:8a:3b:4d:17:d8:a3:3e:81:f0:f5:fc:07:ac:
                    ec:7a:74:c1:2a:28:e5:0e:a5:90:06:27:0d:a1:d8:
                    38:03:a6:a0:5e:f8:b6:70:96:2d:7c:95:d4:e5:8c:
                    06:95:c1:80:3e:6b:19:b5:f8:41:58:ba:49:d9:b5:
                    95:b8:1c:f1:3f:ab:70:54:5c:ee:41:14:8e:08:07:
                    bd:cd:61:e6:15:b2:af:75:73:ff:52:77:ba:a4:d7:
                    ef:a3:47:72:96:d4:04:8c:e5:12:e6:51:bb:fe:37:
                    80:80:1f:09:12:b1:47:6d:fe:31:b9:f4:8c:1c:3c:
                    2b:c6:15:42:e6:46:f9:ef:cf:9b:93:0f:93:28:c0:
                    e7:cc:b0:af:dd:7c:5d:bf:35:21:62:de:65:0b:43:
                    5d:6c:da:64:47:c8:cd:57:2c:e2:bf:e2:df:32:c2:
                    f8:b0:20:d3:1f:4f:8a:11:9d:73:3c:fd:40:ec:d7:
                    d6:90:21:9a:15:70:b6:0d:96:d9:5e:ce:b3:7d:29:
                    25:ea:40:70:eb:30:22:f9:39:41:93:d9:ed:d9:d4:
                    d1:32:50:02:75:27:94:e5:9c:98:72:99:d6:51:57:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F3:6C:98:CF:0F:93:68:5C:32:49:69:18:51:0B:ED:C5:30:B7:B4
            X509v3 Authority Key Identifier:
                keyid:6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/ff084d0a16fddde2396a053f8c46f8777aa2c7b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/68f7a0910bc6c4f99cea989c6355a0951ef0b528.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:61:e3:6e:f8:aa:6d:fd:26:cd:7c:13:12:13:e4:ac:a2:
         18:31:ad:ff:2e:d5:a5:8d:6c:81:b8:33:4c:b7:45:8c:01:db:
         d5:6b:b3:3b:fa:aa:ac:8d:ce:be:93:98:17:06:ab:e8:63:15:
         ad:f6:2a:c9:f3:d0:78:2e:b0:a2:b3:8c:09:0b:7a:08:6b:b8:
         e3:5d:8f:b2:95:c5:27:e3:bf:00:7e:9e:7c:b2:5c:ea:04:03:
         46:fb:ba:8b:bc:cc:c7:5a:e7:76:0f:d9:f7:51:71:25:5d:34:
         54:c6:03:1f:7b:fc:94:76:a2:b0:32:85:f1:fe:3d:17:fc:46:
         ed:7e:e7:5e:2d:33:2d:62:1e:6d:2f:61:4b:24:30:de:36:70:
         50:47:29:f1:3c:8d:d6:0b:62:ef:1e:66:a6:94:99:37:a6:26:
         49:25:e0:3a:2d:ef:73:dd:c3:8a:ab:e4:8e:5c:34:54:6b:b6:
         65:31:cb:27:5b:e2:bd:81:7d:d1:f0:e0:3a:5e:fb:10:06:f9:
         38:2c:3f:36:49:ab:02:c2:60:ed:14:58:e0:e4:35:39:75:f1:
         30:0b:91:e0:ab:8b:de:a5:81:86:c8:dc:7d:7e:4c:f2:82:30:
         6d:f8:2e:34:1c:4a:68:4a:00:f1:93:12:9c:1a:bf:97:bc:3b:
         32:8b:1c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org