Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/e8488eb4341069e24eda2885cb88c21ff8311a11.roa
File:                     e8488eb4341069e24eda2885cb88c21ff8311a11.roa (raw, json)
Hash identifier:          TwricbBTV2vW6+1c0g4J1b66AK8FLomrTW0/owuAe+s=
Subject key identifier:   84:E9:71:F2:F7:7F:03:FC:45:99:C3:08:DA:4F:8D:23:F2:65:C4:A0
Certificate issuer:       /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial:       0BFDBD
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/e8488eb4341069e24eda2885cb88c21ff8311a11.roa
Signing time:             Tue 03 Oct 2023 17:13:14 +0000
ROA not before:           Mon 02 Oct 2023 17:13:14 +0000
ROA not after:            Fri 03 Oct 2025 18:13:14 +0000
asID:                     272150
IP address blocks:        192.141.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785853 (0xbfdbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
        Validity
            Not Before: Oct  2 17:13:14 2023 GMT
            Not After : Oct  3 18:13:14 2025 GMT
        Subject: CN=e8488eb4341069e24eda2885cb88c21ff8311a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:90:1c:8c:67:e8:3b:66:47:9f:97:9f:82:7a:
                    5d:dd:f7:21:af:dc:b6:28:54:5e:5f:08:4b:0b:b7:
                    39:ed:a9:12:6a:9f:09:af:cc:2a:ac:6a:dd:ef:93:
                    05:e5:f4:d3:bf:0a:c6:62:3a:6c:62:ea:ce:1d:c6:
                    dd:7d:23:d9:1b:ed:dc:47:32:0e:cd:c4:60:c1:bc:
                    1f:80:dd:b4:f7:e6:c1:7b:e4:d7:42:a8:e9:09:cd:
                    57:da:fa:32:a3:2c:9f:74:a2:83:e2:9c:95:7a:36:
                    8c:96:38:85:86:ab:a1:d2:d5:53:a3:ad:14:6a:0c:
                    a0:c7:a5:72:81:a1:be:c4:7e:6d:4a:d8:0c:bb:9c:
                    87:73:f8:e8:17:ec:c5:e1:30:d4:5a:27:c6:b6:3e:
                    8e:1a:91:44:d9:f2:59:89:be:30:24:b3:3c:13:d6:
                    c5:ff:11:a3:3b:4f:8c:a4:43:fe:33:65:f0:b1:ad:
                    56:b0:fc:bf:a5:f2:e5:37:c6:f6:29:b4:03:5b:9d:
                    0b:ed:a1:63:ca:18:e6:e9:3b:5e:16:a0:4f:3e:64:
                    1f:03:88:64:08:5e:bd:9e:53:fb:c4:85:40:9d:ab:
                    05:f8:95:d6:37:de:19:bd:4b:2a:5f:1b:0a:c6:42:
                    fa:e5:5c:b3:b7:55:de:9e:07:1a:ad:64:3b:de:bc:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E9:71:F2:F7:7F:03:FC:45:99:C3:08:DA:4F:8D:23:F2:65:C4:A0
            X509v3 Authority Key Identifier:
                keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/e8488eb4341069e24eda2885cb88c21ff8311a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:8b:e0:31:27:aa:0e:d1:fc:1b:47:91:c5:e5:e9:b6:85:e1:
         86:76:36:ad:bf:28:f7:99:15:9c:e5:19:c0:0b:e4:5c:19:80:
         a1:5f:07:78:b9:03:a4:37:6d:12:9b:ef:eb:95:ca:65:6c:c4:
         9f:47:9d:ac:89:01:5f:cc:d2:0f:d7:b8:38:c0:b8:5f:ec:42:
         99:60:00:99:80:74:6c:c7:43:af:95:6c:c7:d5:95:7b:04:6f:
         75:b0:a5:2d:81:9c:72:a1:07:bf:a8:60:c4:88:09:37:d7:0b:
         8d:2f:7c:50:e0:8f:1c:23:66:ee:32:27:b6:9f:49:4a:b6:db:
         d1:30:d2:b3:80:ad:d6:fb:ba:61:c0:5f:32:0a:de:fb:4d:0e:
         1c:50:44:09:96:ac:f4:53:3c:ad:94:ce:ce:00:ce:68:6d:24:
         32:55:3f:e3:ef:87:4f:29:b8:ed:ca:26:1f:24:1b:a4:20:e1:
         dd:f0:4e:18:73:9d:43:ee:c2:f7:dd:80:ad:1d:47:7f:be:5b:
         0c:83:7c:b8:26:a2:5a:d5:83:77:17:74:61:6f:25:82:31:f4:
         44:0c:59:54:35:d6:76:2f:35:6d:32:fd:88:21:40:61:3c:f0:
         80:5c:ae:40:29:ca:cf:4c:14:95:0e:af:b3:3a:00:86:95:d6:
         37:c5:51:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 10:39:07 2023 by rpki-client on console-fra.rpki-client.org