Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/6d64e84beb79f77c9a381230b8a497d56363b3c9.roa
File:                     6d64e84beb79f77c9a381230b8a497d56363b3c9.roa (raw, json)
Hash identifier:          8s+IU+L5FSLYS99drJ7+ko6pwUmG1ME4z3jRqEHN8Hs=
Subject key identifier:   E4:AC:8A:49:11:45:3E:B0:FC:85:39:C1:88:90:CE:06:ED:4C:BE:E0
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       1210A4
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/6d64e84beb79f77c9a381230b8a497d56363b3c9.roa
Signing time:             Fri 02 Jun 2023 08:30:06 +0000
ROA not before:           Thu 01 Jun 2023 08:30:06 +0000
ROA not after:            Sat 31 May 2025 08:30:06 +0000
asID:                     263833
IP address blocks:        138.255.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183908 (0x1210a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Jun  1 08:30:06 2023 GMT
            Not After : May 31 08:30:06 2025 GMT
        Subject: CN=6d64e84beb79f77c9a381230b8a497d56363b3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4c:e0:15:c5:61:1a:9d:ba:8b:b6:d9:dd:c2:
                    f1:03:c0:95:53:b8:20:73:5c:4c:bd:e6:08:de:19:
                    19:d5:e9:84:4d:09:50:32:8e:ef:7c:2d:29:b8:17:
                    13:5b:96:01:4c:a1:9a:62:01:6f:17:19:42:a7:11:
                    8f:00:f6:83:a8:a0:ad:50:47:b3:cf:4d:a0:c5:8a:
                    8f:e2:79:ff:b9:1b:f5:c8:1d:8a:7f:12:3e:36:8e:
                    b4:5d:5a:55:28:73:1e:da:8b:bb:92:18:32:e7:a4:
                    bb:55:b1:9b:70:74:02:58:fe:eb:9b:f5:75:37:f2:
                    25:31:e2:54:ed:68:5b:02:4f:13:9f:78:9c:e7:5b:
                    3e:2c:a3:dd:ce:5d:ba:34:c2:2e:b5:e9:a1:65:a0:
                    2f:07:72:d1:93:67:41:4d:bd:86:69:4b:85:7f:80:
                    c4:5c:39:4e:4e:f2:fb:c2:a5:d2:4b:61:0f:27:d9:
                    bf:e6:76:1d:54:15:ba:ba:07:95:e2:b3:d7:82:23:
                    17:70:13:a5:d6:ed:fc:04:92:ed:09:b1:83:a7:c9:
                    f8:00:08:e1:e7:c8:de:3d:f5:55:42:60:79:f3:d1:
                    b0:b5:f5:8f:4c:41:90:b2:fb:6d:bb:37:83:4e:4a:
                    ec:6b:1a:9b:a9:c2:aa:6b:c2:0f:eb:96:98:bd:0f:
                    a1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AC:8A:49:11:45:3E:B0:FC:85:39:C1:88:90:CE:06:ED:4C:BE:E0
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/6d64e84beb79f77c9a381230b8a497d56363b3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:40:13:30:10:7f:64:91:c4:20:44:17:dd:db:3e:4a:80:0d:
         83:6c:db:ff:ad:4b:55:d0:9f:cb:cd:3e:bf:ea:b4:e1:76:6e:
         51:28:b6:2c:24:29:bb:4f:9e:1c:98:29:3c:c0:c2:fe:46:55:
         b1:f4:9a:4e:8a:c8:16:ac:32:ec:36:d7:ae:57:cf:34:36:40:
         a9:fe:50:9c:60:f7:53:5b:a1:1a:62:4a:41:04:b7:26:18:99:
         38:b1:bf:3b:f3:98:6e:1d:be:80:cd:23:c2:44:ba:b2:f4:78:
         51:00:9d:ac:e5:6d:6a:32:e9:42:11:3a:fd:3e:07:26:f4:7a:
         38:bb:99:15:0f:81:83:05:9d:83:16:f5:8b:59:ca:e5:64:7c:
         51:36:ed:cc:a5:b9:e3:27:d8:cc:48:90:0f:26:3e:a1:cd:fe:
         c6:91:59:2e:b5:25:5d:24:47:a1:15:71:67:31:d0:a4:08:44:
         1a:34:e1:01:66:89:a6:37:14:41:38:c1:b0:2d:cc:18:03:ba:
         7d:32:1e:a6:1d:34:2f:c6:15:82:f2:c6:e2:9e:88:b1:9d:d4:
         f6:3f:30:ff:ad:81:eb:70:83:1d:c6:8e:12:b8:63:be:2c:a1:
         7d:08:b0:f8:78:d1:5b:17:46:6e:82:a9:2b:0f:dd:67:fe:82:
         ea:b2:e9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 16 18:28:45 2023 by rpki-client on console-ams.rpki-client.org