Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/6271e70c27a465c370933b52f035eb8fdb226c1b.roa
File:                     6271e70c27a465c370933b52f035eb8fdb226c1b.roa (raw, json)
Hash identifier:          +ywnURnBOIGvMjWSdM8ovo+aW+XeByOnwyiHv97euSA=
Subject key identifier:   26:8D:9C:FA:C6:6A:8A:3B:21:38:F7:66:77:A1:D9:B1:B4:B7:9B:37
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       02420C
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/6271e70c27a465c370933b52f035eb8fdb226c1b.roa
Signing time:             Wed 01 Sep 2021 17:37:22 +0000
ROA not before:           Wed 01 Sep 2021 03:00:00 +0000
ROA not after:            Fri 01 Sep 2023 03:00:00 +0000
asID:                     263833
IP address blocks:        138.255.170.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147980 (0x2420c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Sep  1 03:00:00 2021 GMT
            Not After : Sep  1 03:00:00 2023 GMT
        Subject: CN=6271e70c27a465c370933b52f035eb8fdb226c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:66:cd:d3:74:67:23:1f:fc:4d:10:74:34:c7:
                    79:d3:98:73:57:c7:1e:bd:d5:83:42:c3:52:b4:32:
                    b0:13:fe:1f:4f:5d:88:6d:d6:c9:c9:a9:df:a2:20:
                    40:af:2d:9a:dc:45:c9:8f:ec:91:74:93:d0:70:84:
                    5a:03:d8:8f:4d:9b:4b:92:cd:53:59:f5:be:ed:1c:
                    bb:e8:3c:15:bf:62:52:81:cd:99:40:26:45:63:2e:
                    8f:77:a5:2a:84:08:47:ba:38:98:df:10:1a:34:19:
                    d7:f4:d8:15:1a:1e:67:38:13:2a:5a:e7:d4:d2:dc:
                    50:87:40:f7:ac:e3:50:e6:41:69:44:0a:85:a0:a1:
                    69:2d:43:da:25:be:85:9b:a1:65:79:44:11:ad:a3:
                    a8:95:64:fe:de:bd:d3:a8:d6:7c:c0:5c:07:4d:f8:
                    f1:c7:a4:93:22:e3:59:d9:01:5f:a2:c5:dc:a5:93:
                    f2:57:0d:11:56:31:e5:24:8e:66:eb:b7:bc:1e:37:
                    29:ae:6f:21:d4:5d:4a:83:71:bd:6c:83:87:9e:69:
                    a2:06:ba:79:cf:f0:f7:d4:1e:8e:d5:6d:67:fc:1a:
                    49:f5:22:2d:c4:f9:e8:9d:61:7e:d0:bf:42:cf:e1:
                    f1:88:9d:75:55:02:ac:81:fc:34:a7:ed:75:0f:d2:
                    35:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8D:9C:FA:C6:6A:8A:3B:21:38:F7:66:77:A1:D9:B1:B4:B7:9B:37
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/6271e70c27a465c370933b52f035eb8fdb226c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:c5:fd:e7:ef:4a:7b:c8:1e:12:7d:40:ce:a3:cc:34:30:1e:
         73:65:29:9c:6c:36:10:ee:73:43:54:b0:08:8b:3b:a2:bb:d7:
         25:10:26:8d:da:f1:1e:c4:ec:f3:b1:2b:20:e6:04:56:87:d0:
         9c:3f:12:04:e3:63:77:a8:4f:70:bf:7d:8c:d6:b5:41:5f:09:
         d8:2c:39:c2:92:a2:cb:76:c0:07:ff:37:cc:be:1d:4d:f1:68:
         e3:77:28:bb:8f:a7:2a:06:80:a1:d9:d3:14:8c:b4:61:55:6d:
         e1:ac:a2:44:f6:ea:f2:0f:ad:81:a3:5d:80:b7:cc:47:8e:38:
         81:2a:c5:ee:1f:d9:fb:fd:c8:dc:3d:95:b4:df:a5:f0:ce:be:
         e2:88:2d:34:aa:63:fa:e8:47:3e:78:7d:28:06:b3:60:9c:9d:
         1b:fa:be:83:5b:41:ee:f5:10:7b:f4:c8:69:60:4f:11:fd:3b:
         c7:ed:b6:c4:96:9e:af:b1:76:d5:d5:c6:64:ab:4d:89:59:f1:
         63:44:28:1f:d7:83:f1:23:3b:6d:e9:86:d7:c2:5c:14:26:83:
         dc:f0:fc:6e:e7:35:f5:45:c4:58:1b:3a:cb:20:21:b4:5a:87:
         1e:18:03:bf:fa:2f:04:d8:d1:05:bb:bf:54:57:0d:1e:5d:1c:
         29:d7:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 08:49:08 2023 by rpki-client on console-fra.rpki-client.org