Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/fb3e057d8a93f4a083a747bfb7753b61e4870da1.roa
File:                     fb3e057d8a93f4a083a747bfb7753b61e4870da1.roa (raw, json)
Hash identifier:          kLhUfuVkXf0ZZ+rqMP6fCyZypBo31afGVjHQc50rjMU=
Subject key identifier:   E6:3E:4C:3A:CD:46:5D:DF:91:27:70:14:1C:9C:A5:0B:9F:33:FA:CF
Certificate issuer:       /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial:       0C333C
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/fb3e057d8a93f4a083a747bfb7753b61e4870da1.roa
Signing time:             Thu 05 Oct 2023 10:15:49 +0000
ROA not before:           Wed 04 Oct 2023 10:15:49 +0000
ROA not after:            Sun 05 Oct 2025 10:15:49 +0000
asID:                     272150
IP address blocks:        192.141.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799548 (0xc333c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
        Validity
            Not Before: Oct  4 10:15:49 2023 GMT
            Not After : Oct  5 10:15:49 2025 GMT
        Subject: CN=fb3e057d8a93f4a083a747bfb7753b61e4870da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:64:cd:7e:1e:31:b3:39:a2:79:9c:23:7f:f1:
                    94:41:a1:d3:88:41:3a:62:34:43:b8:00:9f:f0:c0:
                    94:b2:e8:8b:8a:74:57:6c:85:e9:b3:de:52:4d:f4:
                    97:24:64:f4:e3:65:3d:aa:05:66:d2:73:d5:25:35:
                    d2:bd:9a:fd:38:fe:83:fb:60:ac:20:97:a9:d3:2a:
                    ea:bf:cd:9e:3e:70:1b:98:98:00:64:92:27:cf:76:
                    41:52:2a:de:66:32:21:ef:6c:a1:4f:e3:d6:a2:d0:
                    bf:87:bd:97:f6:33:a9:2d:ae:21:be:28:e5:38:89:
                    b9:0e:d7:3e:3c:2f:b7:0d:c3:86:26:5a:9c:47:4d:
                    7c:83:23:0e:1f:04:ab:7f:3e:94:23:e1:10:a5:81:
                    6c:c3:43:a8:a3:16:96:a7:0d:02:c9:32:b8:f8:e0:
                    d1:11:07:d6:c2:7a:9d:9c:74:26:76:39:3a:38:d4:
                    d8:ee:58:75:43:c0:f0:90:28:b9:b0:58:1f:50:59:
                    fd:93:83:44:09:eb:61:c7:68:78:5e:81:21:34:e6:
                    08:4e:29:8c:1d:c4:1e:6b:3a:12:0a:71:71:ac:f0:
                    93:e9:f9:d0:64:ef:2c:ff:e6:09:9e:aa:e5:fd:a5:
                    fd:8e:fb:a1:5c:a6:a9:d4:b9:8c:14:b9:9f:43:24:
                    ec:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3E:4C:3A:CD:46:5D:DF:91:27:70:14:1C:9C:A5:0B:9F:33:FA:CF
            X509v3 Authority Key Identifier:
                keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/fb3e057d8a93f4a083a747bfb7753b61e4870da1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:88:68:88:a0:6d:0b:06:05:a8:54:1c:6a:74:7b:e7:d1:66:
         80:42:66:06:ab:31:8a:13:cd:df:b6:a6:36:f2:47:1a:95:7d:
         b8:bf:db:f3:37:64:53:ff:27:a4:ba:60:e9:af:80:e1:ef:f9:
         ec:24:89:78:fc:e3:88:17:02:77:98:3c:78:e6:2a:6b:7f:fa:
         d9:27:1c:09:62:83:fb:58:73:72:e6:33:6f:6f:36:fd:68:55:
         92:21:c8:53:83:85:cc:3b:5a:d5:59:e5:82:08:53:cd:80:dd:
         22:2a:1d:13:e6:8c:39:01:24:c5:76:5e:3b:3e:47:a9:70:29:
         ae:87:f9:df:9a:4c:b1:b5:5e:19:d7:ee:f7:90:cb:0a:be:00:
         6c:a0:5d:aa:29:c9:79:25:c6:5d:8a:b5:15:20:a8:f7:83:aa:
         a4:76:84:2f:e2:dd:3c:d0:ac:fe:58:9d:ee:8a:12:71:b4:51:
         54:77:7a:f6:bb:bb:fa:aa:0c:e8:0a:28:93:ef:7a:35:1a:ed:
         f2:06:bc:4c:d4:d5:25:a3:26:e2:ea:85:64:b4:20:63:b7:2d:
         1e:d8:2d:9f:16:69:22:d2:be:12:07:c2:9c:4f:46:bd:5a:95:
         33:0b:6f:c8:de:75:81:8f:7f:4e:d4:48:d6:01:98:17:7b:06:
         ca:61:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 00:01:45 2023 by rpki-client on console-fra.rpki-client.org