Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/056d72173efb30d067eb4367f448b746e41f4e34.roa
File:                     056d72173efb30d067eb4367f448b746e41f4e34.roa (raw, json)
Hash identifier:          dlaEkBrMwYXwCNdNQmYqjmLIm1VAoDJeYMkunwWcbr8=
Subject key identifier:   C2:8A:55:1D:3C:EE:46:92:F3:0E:FD:93:E3:21:0C:F4:56:FB:CE:DD
Certificate issuer:       /CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
Certificate serial:       0246
Authority key identifier: F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/056d72173efb30d067eb4367f448b746e41f4e34.roa
Signing time:             Mon 25 Oct 2021 21:58:10 +0000
ROA not before:           Mon 25 Oct 2021 03:00:00 +0000
ROA not after:            Wed 25 Oct 2023 03:00:00 +0000
asID:                     263170
IP address blocks:        45.182.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
        Validity
            Not Before: Oct 25 03:00:00 2021 GMT
            Not After : Oct 25 03:00:00 2023 GMT
        Subject: CN=056d72173efb30d067eb4367f448b746e41f4e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:48:f5:10:b4:fb:9f:7c:4a:41:d0:55:ff:
                    01:b2:30:91:00:87:57:7c:01:85:6d:03:85:d3:a6:
                    7f:6d:18:da:6e:93:6b:24:1b:c5:1f:69:6c:8d:bc:
                    23:90:f3:71:52:72:06:41:d8:2b:39:4d:e4:cb:63:
                    5a:a4:77:a5:c1:a0:e2:86:a0:a6:a1:8e:19:e9:26:
                    c5:48:2c:e8:6a:a8:38:6c:dd:ed:48:a9:b4:30:ed:
                    8d:45:00:0b:48:99:ae:ec:79:0a:a7:ad:1d:a5:a3:
                    a1:9b:2a:e8:ef:75:6b:68:b6:c9:b4:6e:3a:a0:47:
                    20:3a:a8:12:39:4f:08:e1:a3:4e:9c:5f:2c:84:64:
                    6a:90:aa:d7:08:5c:3f:11:b5:9b:2b:81:87:d1:fb:
                    02:93:b7:5c:8b:1d:fa:31:d3:be:25:1a:b1:8d:d4:
                    a8:09:33:3d:8f:f8:5f:e0:9f:a3:cb:31:21:78:7b:
                    b5:f4:00:f8:c7:29:f4:7e:9d:24:0c:1b:46:92:5f:
                    73:42:37:a1:62:7f:1d:16:8b:5f:e1:50:91:f3:c3:
                    2a:90:f4:c2:0e:24:cc:d6:51:0d:2f:18:07:fd:8c:
                    c4:9f:a7:d2:35:7b:e4:57:a7:f4:71:e2:98:bb:9d:
                    04:00:17:eb:2a:e5:08:d6:8a:2a:b8:14:45:ab:0a:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8A:55:1D:3C:EE:46:92:F3:0E:FD:93:E3:21:0C:F4:56:FB:CE:DD
            X509v3 Authority Key Identifier:
                keyid:F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/056d72173efb30d067eb4367f448b746e41f4e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/bf01c8b5c661e4a83900b9cf88863f17432603dd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:47:1d:60:8c:fe:70:61:bf:49:e7:0d:d7:76:3b:6c:a2:e3:
         b6:92:9f:5f:c9:8e:6d:6d:b2:8e:ec:22:2a:4f:35:ee:b2:67:
         de:59:f4:0f:94:3b:2c:f5:e6:28:76:7a:ff:7d:d3:e3:7a:d0:
         91:41:97:be:a9:c3:0d:79:28:53:31:c8:51:13:f1:4b:d8:20:
         01:29:7c:24:49:30:f6:d5:c3:5b:7d:95:7f:1b:ca:32:9b:5f:
         be:3d:38:96:b0:3d:68:e2:67:6a:8f:9e:ce:35:ba:6e:f4:cb:
         76:21:01:01:71:6f:cb:ac:a7:67:15:4b:bc:7e:37:42:07:e4:
         16:89:08:ce:9d:01:91:8b:c2:44:7e:94:14:11:24:91:cf:34:
         5d:35:23:23:78:18:c3:8e:28:a9:77:b4:b6:3c:f5:6f:87:52:
         11:07:ab:37:90:47:16:9d:a2:17:ae:67:c8:44:d5:7f:e4:39:
         b7:23:9d:5b:67:87:03:c9:b8:13:9c:b3:4a:5a:6d:31:13:68:
         91:f1:13:e1:27:bd:03:4f:c9:f3:57:63:ab:8f:44:5f:83:c9:
         c7:20:62:e6:79:66:12:26:b9:c4:05:c5:df:5d:9f:51:79:1a:
         ab:78:57:db:c8:8c:56:3d:ad:d1:f4:5f:80:a0:95:b1:94:4a:
         05:91:df:48
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYmYw
MWM4YjVjNjYxZTRhODM5MDBiOWNmODg4NjNmMTc0MzI2MDNkZDAeFw0yMTEwMjUw
MzAwMDBaFw0yMzEwMjUwMzAwMDBaMDMxMTAvBgNVBAMTKDA1NmQ3MjE3M2VmYjMw
ZDA2N2ViNDM2N2Y0NDhiNzQ2ZTQxZjRlMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzyUj1ELT7n3xKQdBV/wGyMJEAh1d8AYVtA4XTpn9tGNpuk2sk
G8UfaWyNvCOQ83FScgZB2Cs5TeTLY1qkd6XBoOKGoKahjhnpJsVILOhqqDhs3e1I
qbQw7Y1FAAtIma7seQqnrR2lo6GbKujvdWtotsm0bjqgRyA6qBI5Twjho06cXyyE
ZGqQqtcIXD8RtZsrgYfR+wKTt1yLHfox074lGrGN1KgJMz2P+F/gn6PLMSF4e7X0
APjHKfR+nSQMG0aSX3NCN6Fifx0Wi1/hUJHzwyqQ9MIOJMzWUQ0vGAf9jMSfp9I1
e+RXp/Rx4pi7nQQAF+sq5QjWiiq4FEWrCtirAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUwopVHTzuRpLzDv2T4yEM9Fb7zt0wHwYDVR0jBBgwFoAU8p6hIo865jJmbWBF
sw35bcS3AQowDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9iZjAxYzhi
NWM2NjFlNGE4MzkwMGI5Y2Y4ODg2M2YxNzQzMjYwM2RkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9lMzYxN2IxMC0zYzQ1LTQ5MjUtYmJkZi02MzcyZWFh
NDliYjQvMDU2ZDcyMTczZWZiMzBkMDY3ZWI0MzY3ZjQ0OGI3NDZlNDFmNGUzNC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2UzNjE3YjEwLTNjNDUtNDkyNS1iYmRmLTYzNzJl
YWE0OWJiNC9iZjAxYzhiNWM2NjFlNGE4MzkwMGI5Y2Y4ODg2M2YxNzQzMjYwM2Rk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQALbYUMA0GCSqGSIb3DQEBCwUAA4IBAQBxRx1gjP5wYb9J5w3X
djtsouO2kp9fyY5tbbKO7CIqTzXusmfeWfQPlDss9eYodnr/fdPjetCRQZe+qcMN
eShTMchRE/FL2CABKXwkSTD21cNbfZV/G8oym1++PTiWsD1o4mdqj57ONbpu9Mt2
IQEBcW/LrKdnFUu8fjdCB+QWiQjOnQGRi8JEfpQUESSRzzRdNSMjeBjDjiipd7S2
PPVvh1IRB6s3kEcWnaIXrmfIRNV/5Dm3I51bZ4cDybgTnLNKWm0xE2iR8RPhJ70D
T8nzV2Orj0Rfg8nHIGLmeWYSJrnEBcXfXZ9ReRqreFfbyIxWPa3R9F+AoJWxlEoF
kd9I
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org