Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/d72a1a0a27c10358a2b83870a6a8a2eec94b469d.roa
File:                     d72a1a0a27c10358a2b83870a6a8a2eec94b469d.roa (raw, json)
Hash identifier:          676O/06KKqreA3/StfUFIrMybDBPT4QMUoBwtTX1xWc=
Subject key identifier:   D6:3A:92:81:9E:C3:4F:E4:CB:D1:26:C1:B2:1C:E4:5B:C4:A1:C8:30
Certificate issuer:       /CN=8fed3a03fcdc18750a4ae5c970d165b993a49009
Certificate serial:       081E45
Authority key identifier: 7D:1C:69:1F:29:90:07:AF:FE:09:E0:67:23:68:18:03:C8:0D:CB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fed3a03fcdc18750a4ae5c970d165b993a49009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/d72a1a0a27c10358a2b83870a6a8a2eec94b469d.roa
Signing time:             Fri 25 Feb 2022 16:07:52 +0000
ROA not before:           Thu 30 Sep 2021 03:00:00 +0000
ROA not after:            Mon 17 Apr 2023 03:00:00 +0000
asID:                     271862
IP address blocks:        177.126.48.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532037 (0x81e45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fed3a03fcdc18750a4ae5c970d165b993a49009
        Validity
            Not Before: Sep 30 03:00:00 2021 GMT
            Not After : Apr 17 03:00:00 2023 GMT
        Subject: CN=d72a1a0a27c10358a2b83870a6a8a2eec94b469d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:98:13:52:b1:5e:74:af:3f:a2:ff:a3:f9:7d:
                    71:b9:16:ac:1d:50:82:59:95:1b:07:97:34:df:f3:
                    0b:c8:5c:40:9f:48:d5:f1:72:bd:89:c2:14:7b:63:
                    76:0e:b3:4c:2c:2e:d5:46:34:83:47:74:de:10:ab:
                    ff:30:4a:46:27:07:cc:6d:9d:5a:8b:59:45:f1:55:
                    43:8c:6b:cf:9a:e2:19:a4:db:9e:20:8d:50:1e:b9:
                    3f:46:1e:48:85:0c:e6:60:4f:dc:33:6b:c3:31:98:
                    cc:03:2c:ae:d3:53:8b:37:2d:54:7c:be:e0:b1:8b:
                    a1:2f:aa:c5:0a:84:83:54:f5:e8:1d:24:a9:e1:66:
                    81:ac:67:6b:5c:c7:d2:69:83:f6:ac:45:af:67:81:
                    60:08:d5:ae:58:fa:bc:12:d8:fb:c1:7f:0c:95:be:
                    d6:17:bb:55:16:56:18:30:01:a8:8a:bc:e5:d3:8d:
                    f1:f9:b6:d6:6f:c5:8a:5f:fc:59:a6:58:16:8b:34:
                    0f:b4:49:3e:19:ab:07:11:f5:f6:80:b5:47:e9:a5:
                    ce:57:4b:7f:a4:cf:b6:75:c0:18:d9:15:6c:a6:84:
                    b9:33:1d:39:7a:2a:ff:56:98:7e:f7:f7:d8:18:89:
                    a0:2a:4a:04:7b:e5:4e:3c:13:55:b8:cc:d4:e0:3e:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3A:92:81:9E:C3:4F:E4:CB:D1:26:C1:B2:1C:E4:5B:C4:A1:C8:30
            X509v3 Authority Key Identifier:
                keyid:7D:1C:69:1F:29:90:07:AF:FE:09:E0:67:23:68:18:03:C8:0D:CB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fed3a03fcdc18750a4ae5c970d165b993a49009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/d72a1a0a27c10358a2b83870a6a8a2eec94b469d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/8fed3a03fcdc18750a4ae5c970d165b993a49009.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:f9:53:0d:72:96:d1:0d:d0:49:f5:38:ab:39:a4:0d:89:d4:
         ca:f4:9e:43:ea:e2:ea:fe:c2:9f:3c:1b:ed:ce:e6:2c:e9:4a:
         66:c6:46:7a:e5:fc:7a:b3:93:22:39:cd:ae:74:73:a1:d8:ee:
         8d:b8:57:c9:c9:68:c1:85:08:81:c8:25:37:93:cd:6d:0f:15:
         13:a5:c1:78:b7:c1:1d:f9:42:74:a9:32:33:27:95:8e:8e:be:
         4b:a3:a3:10:10:f2:9e:e2:bd:38:da:40:3f:00:5c:3a:7c:4f:
         53:35:6d:91:0b:c1:82:70:d9:8e:02:5f:be:f6:34:f6:12:63:
         52:09:d7:84:62:9c:93:5a:4d:8a:c3:c2:78:83:e7:2f:76:15:
         a9:ae:db:5c:4b:b7:76:ca:55:cf:2d:c1:90:f8:3d:a1:2e:d9:
         fe:19:76:d4:c4:97:8a:d4:e4:90:12:1b:17:74:06:a2:18:fe:
         3a:8e:48:aa:74:9f:cf:ef:27:a1:4b:12:35:b9:11:64:91:1c:
         3a:7c:60:6b:ab:5b:a8:4f:ff:a4:db:61:04:e3:c4:0a:18:a9:
         0f:8a:7f:fc:e0:c8:6a:ea:4b:65:46:cd:de:d6:a1:3a:d1:85:
         e0:40:33:61:06:2b:4a:97:ef:90:f1:96:08:9f:27:72:0b:de:
         17:d6:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org