Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/169dd189a162a32a625d0d0e2383b51347dafed1.roa
File:                     169dd189a162a32a625d0d0e2383b51347dafed1.roa (raw, json)
Hash identifier:          AFbWN4agv9tdWVnhL1GP6riPEv1WX8nXwJUz8f13g7I=
Subject key identifier:   F7:81:B0:FD:90:48:7C:C4:E9:1B:D5:37:20:DC:59:9C:3A:13:9D:22
Certificate issuer:       /CN=16cac609d27670b5b41abda1b583a7f15ce48526
Certificate serial:       07F881
Authority key identifier: 5F:FE:ED:ED:D2:B0:8C:CB:53:5E:F1:A2:2A:34:3F:36:E3:88:8B:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16cac609d27670b5b41abda1b583a7f15ce48526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/169dd189a162a32a625d0d0e2383b51347dafed1.roa
Signing time:             Wed 24 Mar 2021 22:51:31 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     267680
IP address blocks:        45.163.36.0/24 maxlen: 24
                          45.163.37.0/24 maxlen: 24
                          45.163.38.0/24 maxlen: 24
                          45.163.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522369 (0x7f881)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16cac609d27670b5b41abda1b583a7f15ce48526
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=169dd189a162a32a625d0d0e2383b51347dafed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:30:d5:5b:e7:7b:75:9c:8a:c1:16:39:55:
                    8d:44:ec:39:c8:83:a2:19:64:0c:34:98:4e:f4:57:
                    a9:98:db:8c:e7:e4:2c:a5:1a:47:87:04:53:6b:d0:
                    1a:a9:e4:52:0f:04:b2:ea:e7:b4:ae:1f:85:5c:84:
                    d9:fc:44:1e:3e:29:95:8d:f5:13:d8:da:1c:f3:a8:
                    f7:12:c4:7a:5c:ed:e2:da:55:1c:46:22:73:3d:49:
                    e3:cd:af:77:01:00:24:1f:c7:82:10:8c:e4:e4:7f:
                    e1:3a:66:f5:3f:ce:7b:75:12:5e:54:8b:21:0e:05:
                    d4:b3:34:0e:83:85:4e:6c:ed:05:0b:4b:61:53:b3:
                    4b:1f:b1:ee:7a:51:af:7f:10:c4:de:44:1b:1a:74:
                    d7:ef:6e:59:c6:e2:ad:09:66:ee:74:a4:1d:f0:c8:
                    76:7e:6f:6c:2b:7d:64:03:77:b5:bb:69:aa:8f:b5:
                    64:c8:95:b9:0f:8b:de:7a:bd:1f:0c:11:ef:b0:4f:
                    e3:3b:33:2c:06:65:29:a4:4e:63:e1:0e:cc:fd:09:
                    77:6b:48:fc:61:32:b8:74:bf:a0:ae:44:b9:39:fe:
                    6b:ec:00:24:d7:fe:72:9e:ce:fb:63:aa:54:03:01:
                    2a:a7:d7:24:77:3b:04:f0:90:19:9d:06:a6:1e:c9:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:81:B0:FD:90:48:7C:C4:E9:1B:D5:37:20:DC:59:9C:3A:13:9D:22
            X509v3 Authority Key Identifier:
                keyid:5F:FE:ED:ED:D2:B0:8C:CB:53:5E:F1:A2:2A:34:3F:36:E3:88:8B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16cac609d27670b5b41abda1b583a7f15ce48526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/169dd189a162a32a625d0d0e2383b51347dafed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/16cac609d27670b5b41abda1b583a7f15ce48526.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:d8:e4:96:cf:a3:d2:56:31:46:1c:5e:78:7c:d5:40:02:2b:
         d4:91:4e:83:9e:bb:2c:63:59:08:49:53:8b:e6:38:26:36:d5:
         c7:ac:cb:20:90:ca:54:73:df:54:e3:7c:89:00:81:75:e4:40:
         db:6c:36:7c:ff:d7:f5:e8:d6:fb:62:e0:1b:10:5d:b8:d4:cb:
         9f:e7:31:1f:0f:f6:c4:6a:f7:82:ad:0c:c3:8e:ee:fd:54:74:
         db:31:9b:6a:e2:1f:fc:d4:1c:52:80:93:c4:90:dc:e2:44:8a:
         5d:be:c6:02:1b:54:30:a7:8e:60:32:16:02:a0:3e:37:73:04:
         30:67:0b:b9:91:bf:8b:e7:87:a6:a8:98:cf:fa:27:b6:f6:85:
         73:cc:6c:06:42:9b:c9:d1:bb:26:0a:14:16:a5:29:89:69:67:
         ac:a5:f4:38:94:96:7c:3c:d1:9f:03:0f:17:15:2b:76:4b:3d:
         10:67:fc:ce:42:d1:0e:01:2b:9b:22:23:8a:1a:0e:b8:82:4a:
         ba:9f:10:38:a2:bc:dc:d1:ee:0c:92:6c:10:78:af:22:d0:a2:
         c3:05:66:1e:fc:b3:e3:f2:1d:fa:06:5e:dd:ab:fe:cb:3d:53:
         a2:b5:39:6d:54:74:c5:41:4e:4b:41:14:e6:06:78:c6:1a:cc:
         02:f7:c9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:41 2023 by rpki-client on console-fra.rpki-client.org