Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/04bb45d57cdf2ce9b9f91fb70b8282a1bce8863e.roa
File:                     04bb45d57cdf2ce9b9f91fb70b8282a1bce8863e.roa (raw, json)
Hash identifier:          fCfzZCVM1KMPOlJWyDfwrIt1s6meQAKz4/HtUR2qtj4=
Subject key identifier:   9A:F2:B5:8A:0A:BC:24:AE:46:B4:60:31:20:3A:55:91:50:79:64:7B
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       020328
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/04bb45d57cdf2ce9b9f91fb70b8282a1bce8863e.roa
Signing time:             Mon 29 Nov 2021 19:02:28 +0000
ROA not before:           Mon 29 Nov 2021 03:00:00 +0000
ROA not after:            Wed 29 Nov 2023 03:00:00 +0000
asID:                     27768
IP address blocks:        201.217.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131880 (0x20328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 29 03:00:00 2021 GMT
            Not After : Nov 29 03:00:00 2023 GMT
        Subject: CN=04bb45d57cdf2ce9b9f91fb70b8282a1bce8863e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:15:3b:5a:96:ad:f6:3f:0c:de:ec:a7:c5:
                    f7:ec:c6:53:1d:ef:9c:b3:aa:b1:0d:8c:b1:86:71:
                    eb:bc:1e:2b:9a:7d:87:d0:b1:2d:c8:07:74:7b:e4:
                    d9:8c:78:d8:24:69:53:c7:c2:72:cf:14:58:6f:67:
                    71:79:b5:29:bb:07:9d:8b:65:20:b9:79:a9:de:be:
                    41:a5:0f:60:e2:d3:c4:7c:c1:3c:a5:99:96:8d:59:
                    eb:1b:5d:69:3b:50:ea:2a:14:46:51:ce:e8:18:56:
                    c0:fa:61:7d:a7:45:9f:96:9c:bd:60:89:4b:95:d9:
                    06:02:4c:03:d3:b6:4b:42:5a:a0:0b:34:d2:2c:ba:
                    bc:cf:69:ea:48:be:30:e1:ec:df:36:99:7a:7b:75:
                    42:84:9b:c6:3b:11:1c:9e:89:10:19:aa:9f:af:d2:
                    ff:32:6f:7a:60:4d:6b:11:74:b7:26:b9:0e:00:c3:
                    fa:78:b7:b0:7a:44:aa:e3:69:80:b4:28:c3:5e:3c:
                    5f:77:19:af:41:f2:0f:c8:c8:81:15:05:1a:35:5a:
                    d5:03:68:f8:5e:00:d0:1c:0e:90:ad:f0:28:7e:ba:
                    b0:8b:3b:ef:eb:b4:5b:29:c2:6e:0a:4e:c3:9a:8b:
                    a6:1b:a9:75:a2:1f:38:84:e7:1d:07:9c:af:6a:0c:
                    01:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F2:B5:8A:0A:BC:24:AE:46:B4:60:31:20:3A:55:91:50:79:64:7B
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/04bb45d57cdf2ce9b9f91fb70b8282a1bce8863e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:36:a2:a9:70:de:5d:dd:6a:bd:34:7a:67:90:84:49:51:69:
         b4:f2:d3:14:8e:5b:ef:50:e5:b2:e9:06:29:73:f9:ac:68:46:
         6e:92:06:54:a7:9b:f8:3c:03:2c:3b:bf:39:7d:5a:b5:64:b6:
         bc:20:12:06:5f:a6:8f:e6:ef:81:14:62:a6:fc:ca:fc:4f:48:
         f5:a9:a3:50:ec:2e:f0:94:0d:cf:fe:9a:e7:36:5e:45:57:a8:
         e9:41:e8:aa:d7:6c:2b:6b:5e:7b:ac:ac:be:e5:36:35:87:e5:
         ea:1b:53:0e:9a:ab:ae:ca:35:7a:cc:03:28:0b:4e:c2:f7:6b:
         23:f2:78:43:5f:16:96:7b:92:8c:05:f3:be:2f:db:f8:ee:c4:
         dc:1a:2e:33:24:b2:f6:d3:8c:2e:f9:3a:2e:15:24:3e:d9:9a:
         64:1a:9f:7b:b9:4d:e5:e3:15:b3:28:1e:33:d2:b2:57:e5:10:
         6c:c3:69:9e:48:11:ae:18:2e:ad:44:4c:d3:c0:04:08:5e:10:
         3e:0b:b3:80:0f:4e:cc:a5:60:06:b4:5c:7a:4b:0e:dc:42:fb:
         ce:4e:20:4f:0f:54:15:ac:ae:a5:a9:b3:59:09:a0:68:c9:58:
         82:bd:ce:39:64:0e:de:19:86:56:5d:0a:4e:03:fe:3c:ca:9d:
         30:7c:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org