Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/1beb35a6e761700c6a1ab8a3abb4710cd4006741.roa
File:                     1beb35a6e761700c6a1ab8a3abb4710cd4006741.roa (raw, json)
Hash identifier:          j2Ek1ynNKKWn9OyuUD2ppPQrxn/6HVvuxzLnUL+lDdA=
Subject key identifier:   F4:2D:5B:B5:37:D0:9E:0F:86:F4:FD:D1:9D:5B:E7:A6:EC:B9:8B:E8
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       1943
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/1beb35a6e761700c6a1ab8a3abb4710cd4006741.roa
Signing time:             Fri 04 Jun 2021 02:51:56 +0000
ROA not before:           Thu 03 Jun 2021 03:00:00 +0000
ROA not after:            Sat 03 Jun 2023 03:00:00 +0000
asID:                     263833
IP address blocks:        138.255.170.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6467 (0x1943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Jun  3 03:00:00 2021 GMT
            Not After : Jun  3 03:00:00 2023 GMT
        Subject: CN=1beb35a6e761700c6a1ab8a3abb4710cd4006741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:dd:d3:8d:45:f2:76:bf:c6:19:b2:4e:81:
                    a4:ac:29:0b:54:e3:2e:51:39:92:76:68:07:3b:90:
                    35:c9:ab:05:a3:d1:c2:47:6f:e8:08:96:be:3d:35:
                    3e:89:99:69:54:db:b8:e9:67:67:c2:14:c4:fe:70:
                    01:ad:d8:26:3c:dd:34:93:4d:e7:ad:ae:95:39:e5:
                    0a:d8:d3:26:69:c2:ab:2a:07:62:43:f5:f7:cf:28:
                    49:31:08:9d:55:84:8f:be:61:d6:0d:48:bb:19:18:
                    ae:45:4e:92:4b:9f:9b:67:15:ad:b5:89:12:76:e0:
                    22:a3:dd:8b:72:b6:3f:d9:83:f5:16:3b:54:b9:0e:
                    61:30:43:f8:2b:1a:95:f9:7a:6f:23:8e:4b:31:26:
                    4c:44:6b:e5:1d:cd:9c:3f:1a:89:54:c9:82:1e:b2:
                    81:ee:a3:14:96:82:47:38:d2:57:d9:84:45:26:5a:
                    41:d9:76:60:c9:49:53:12:67:1f:2b:6d:5e:65:3a:
                    6a:70:03:1e:f4:10:4d:7d:a7:c0:0e:49:3b:19:83:
                    35:6b:dd:d3:68:fd:83:72:82:0a:ff:e5:fa:8c:d4:
                    0c:76:ee:da:1d:e3:5e:cb:42:77:e7:6e:fc:53:df:
                    0c:f8:e6:68:64:12:c2:4a:ef:2b:21:86:18:46:22:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2D:5B:B5:37:D0:9E:0F:86:F4:FD:D1:9D:5B:E7:A6:EC:B9:8B:E8
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/1beb35a6e761700c6a1ab8a3abb4710cd4006741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:38:7f:b8:e2:b8:dc:98:07:6e:68:ee:bf:3d:9c:c8:c2:45:
         95:26:a8:aa:9c:6d:41:0a:23:04:94:73:e8:86:c0:b0:b5:05:
         dd:f1:90:68:08:3d:7b:f0:24:f6:31:22:c6:a9:2b:ef:bc:55:
         50:b5:9d:5e:e0:fd:ef:24:e8:a1:76:ac:8e:f2:3c:a0:ae:25:
         98:2f:35:7f:5e:78:f5:ae:9d:4d:5d:71:60:47:2c:8c:ce:c5:
         f4:e9:96:51:f3:f4:bb:9c:1c:2f:ed:90:7a:09:77:39:44:95:
         f2:35:27:01:de:42:b5:ab:6f:03:d2:7e:9a:fa:1b:41:5c:39:
         9a:73:83:d2:f5:9a:3d:7c:c7:35:ac:45:9d:fa:67:fb:52:0b:
         bf:19:06:67:83:23:ae:03:06:c8:47:1e:c3:86:38:7d:eb:cf:
         6f:df:f7:49:b1:a4:47:44:69:f6:2c:ec:1c:4f:6a:f8:cf:49:
         bd:5a:d1:6f:7b:c5:39:12:46:fb:a7:15:2f:72:c1:7a:df:26:
         51:4e:70:34:05:23:38:50:22:44:03:bd:32:98:5c:36:28:8a:
         cb:96:63:38:0b:20:3d:fb:7e:85:9a:5d:cb:3c:8d:ec:b3:e0:
         7f:b1:eb:77:84:7a:52:e9:32:c4:d4:ec:96:91:8d:34:a1:10:
         84:8d:8f:3c
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICGUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOGQ1
NWVjOTBlOGI2ZTVlY2E2YTQwNjBhOWExODUzMmZlMWYzOTFiNTAeFw0yMTA2MDMw
MzAwMDBaFw0yMzA2MDMwMzAwMDBaMDMxMTAvBgNVBAMTKDFiZWIzNWE2ZTc2MTcw
MGM2YTFhYjhhM2FiYjQ3MTBjZDQwMDY3NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC08d3TjUXydr/GGbJOgaSsKQtU4y5ROZJ2aAc7kDXJqwWj0cJH
b+gIlr49NT6JmWlU27jpZ2fCFMT+cAGt2CY83TSTTeetrpU55QrY0yZpwqsqB2JD
9ffPKEkxCJ1VhI++YdYNSLsZGK5FTpJLn5tnFa21iRJ24CKj3Ytytj/Zg/UWO1S5
DmEwQ/grGpX5em8jjksxJkxEa+UdzZw/GolUyYIesoHuoxSWgkc40lfZhEUmWkHZ
dmDJSVMSZx8rbV5lOmpwAx70EE19p8AOSTsZgzVr3dNo/YNyggr/5fqM1Ax27tod
417LQnfnbvxT3wz45mhkEsJK7yshhhhGIj8/AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQU9C1btTfQng+G9P3RnVvnpuy5i+gwHwYDVR0jBBgwFoAU2Vu3W8zWhIGCMJKv
5aeWd52JG2MwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84ZDU1ZWM5
MGU4YjZlNWVjYTZhNDA2MGE5YTE4NTMyZmUxZjM5MWI1LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9kZWJiNjFjMC02NDAwLTQ2ZDItYTQxYy03MzQ2YTgw
ZmUwNWMvMWJlYjM1YTZlNzYxNzAwYzZhMWFiOGEzYWJiNDcxMGNkNDAwNjc0MS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2RlYmI2MWMwLTY0MDAtNDZkMi1hNDFjLTczNDZh
ODBmZTA1Yy84ZDU1ZWM5MGU4YjZlNWVjYTZhNDA2MGE5YTE4NTMyZmUxZjM5MWI1
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQBiv+qMA0GCSqGSIb3DQEBCwUAA4IBAQCJOH+44rjcmAduaO6/
PZzIwkWVJqiqnG1BCiMElHPohsCwtQXd8ZBoCD178CT2MSLGqSvvvFVQtZ1e4P3v
JOihdqyO8jygriWYLzV/Xnj1rp1NXXFgRyyMzsX06ZZR8/S7nBwv7ZB6CXc5RJXy
NScB3kK1q28D0n6a+htBXDmac4PS9Zo9fMc1rEWd+mf7Ugu/GQZngyOuAwbIRx7D
hjh9689v3/dJsaRHRGn2LOwcT2r4z0m9WtFve8U5Ekb7pxUvcsF63yZRTnA0BSM4
UCJEA70ymFw2KIrLlmM4CyA9+36Fml3LPI3ss+B/set3hHpS6TLE1OyWkY00oRCE
jY88
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:41 2023 by rpki-client on console-fra.rpki-client.org