Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/95776adbf37ec0a4ebc4eee334a43f4414a3b929.roa
File:                     95776adbf37ec0a4ebc4eee334a43f4414a3b929.roa (raw, json)
Hash identifier:          8vrb1Nkm7ZUdBXYFjl05A5Jh/mOMAUGUjSrX/rGKDD0=
Subject key identifier:   24:BD:D7:12:80:8C:03:29:F5:A9:B5:50:95:1E:82:3C:57:4F:3C:39
Certificate issuer:       /CN=a5265fc51b7f5a9f0ec142aa30846e06015ca4ff
Certificate serial:       0D74BF
Authority key identifier: 7B:81:30:97:3D:07:EE:38:1D:BC:1C:6C:C9:D0:90:B0:10:92:A6:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/95776adbf37ec0a4ebc4eee334a43f4414a3b929.roa
Signing time:             Wed 24 Mar 2021 14:30:28 +0000
ROA not before:           Wed 24 Mar 2021 14:30:28 +0000
ROA not after:            Tue 24 Mar 2026 14:30:28 +0000
asID:                     265705
IP address blocks:        186.33.204.0/24 maxlen: 24
                          2800:c30:ad00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881855 (0xd74bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5265fc51b7f5a9f0ec142aa30846e06015ca4ff
        Validity
            Not Before: Mar 24 14:30:28 2021 GMT
            Not After : Mar 24 14:30:28 2026 GMT
        Subject: CN=95776adbf37ec0a4ebc4eee334a43f4414a3b929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:a6:b9:ae:41:de:27:15:9f:dd:7b:af:e3:
                    55:b5:e2:f8:c0:7b:f9:1d:4a:79:32:3a:6d:c0:67:
                    76:25:fd:d0:ab:c3:5b:e1:43:f2:63:26:cb:41:a6:
                    ea:f9:6f:70:ad:03:75:28:fc:4d:4c:7e:18:46:e6:
                    5b:b2:af:de:85:c2:87:74:4f:02:ef:9c:42:e9:7b:
                    a2:bc:47:c3:fe:89:12:22:bd:65:bd:74:40:8c:cd:
                    70:72:fc:7d:35:24:f6:61:ca:fb:83:08:f2:66:15:
                    2e:3c:f4:45:2c:4e:10:39:fa:15:24:d7:59:06:b4:
                    26:08:e4:e9:e8:28:1c:2b:12:b8:fd:21:c8:86:3f:
                    08:9b:96:c2:b8:e8:c4:e0:74:c1:92:d1:03:d3:09:
                    d7:e3:cd:70:ce:0e:01:f4:3c:d9:f0:9e:70:04:1c:
                    b2:4f:a2:ce:b4:14:62:f5:b5:02:97:c2:ef:9f:7d:
                    36:85:f1:69:ff:be:87:8f:96:ef:b7:1b:6a:78:20:
                    b3:c1:2c:a8:b6:e0:56:a7:f0:5a:ec:23:fd:39:89:
                    94:2f:91:80:21:1b:e6:87:ff:a5:aa:60:17:da:8f:
                    ce:17:b2:dc:be:9f:3c:fe:71:38:fd:63:5d:1e:76:
                    bc:d4:32:7f:aa:3a:24:c8:e4:2e:1a:e8:77:7d:63:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BD:D7:12:80:8C:03:29:F5:A9:B5:50:95:1E:82:3C:57:4F:3C:39
            X509v3 Authority Key Identifier:
                keyid:7B:81:30:97:3D:07:EE:38:1D:BC:1C:6C:C9:D0:90:B0:10:92:A6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/95776adbf37ec0a4ebc4eee334a43f4414a3b929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.204.0/24
                IPv6:
                  2800:c30:ad00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:d2:81:4d:a3:8e:d1:b6:34:ae:18:4d:af:2e:4f:eb:02:1e:
         45:1e:4b:4f:56:65:35:05:28:6f:25:cf:b7:53:6e:e5:4d:f2:
         a1:a9:69:56:c3:11:fd:f6:84:b4:41:fe:41:c1:cc:51:c3:0a:
         03:97:67:2b:b9:4b:7c:d6:ca:6b:3b:56:8c:65:fe:f7:d8:2f:
         db:c7:a8:e2:a0:22:6f:08:86:4a:c9:b2:85:dd:4a:ba:d8:32:
         8c:56:21:b4:15:d2:99:c3:a8:c6:fa:1f:9a:9c:c7:75:6f:ac:
         97:8f:b3:34:e0:ce:45:3d:ae:de:61:c8:89:ce:db:3a:e0:ae:
         58:33:20:53:40:3f:92:bb:0a:ae:9e:b2:3c:dc:1c:96:46:64:
         50:af:1a:8e:31:cd:10:8c:e0:01:fd:df:3f:6b:71:d2:f8:c3:
         98:c9:e4:79:b2:05:88:a9:f8:5e:68:d2:1b:d6:65:41:07:31:
         d2:0b:0a:91:c3:9f:4f:04:8a:88:87:a5:fd:b8:74:52:d3:66:
         f0:9f:ed:95:0d:e6:4a:33:b7:c8:9e:1e:af:6f:66:f5:2a:53:
         e2:af:9a:2c:22:87:11:ea:cc:22:54:3d:c5:cf:3c:46:cf:1a:
         b6:de:f7:17:65:07:c3:17:9a:e6:36:b3:f4:5a:46:df:d9:59:
         3d:56:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:55 2023 by rpki-client on console-ams.rpki-client.org