Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/4849cac37bfb12c5211134e90bd1c96d42475c72.roa
File:                     4849cac37bfb12c5211134e90bd1c96d42475c72.roa (raw, json)
Hash identifier:          xtSmhFnpRoDsy+nW4FfrMOLNP61zMCmT5sheyQoyMKU=
Subject key identifier:   27:0E:C5:B0:53:1B:4B:B2:AC:C4:0F:2C:53:22:BC:0C:77:39:BD:3E
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       01DD7E
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/4849cac37bfb12c5211134e90bd1c96d42475c72.roa
Signing time:             Mon 29 Nov 2021 18:12:21 +0000
ROA not before:           Mon 29 Nov 2021 03:00:00 +0000
ROA not after:            Wed 29 Nov 2023 03:00:00 +0000
asID:                     27768
IP address blocks:        201.217.8.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122238 (0x1dd7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 29 03:00:00 2021 GMT
            Not After : Nov 29 03:00:00 2023 GMT
        Subject: CN=4849cac37bfb12c5211134e90bd1c96d42475c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:54:30:b6:86:fa:58:78:70:e5:ce:f1:f3:65:
                    dd:dd:af:5a:71:d5:64:ce:b5:cf:2f:fb:5d:12:c0:
                    39:c2:df:7a:cc:ef:60:67:e1:4c:2d:ba:f8:8a:c3:
                    c5:14:88:d2:01:45:99:cf:c0:cb:ff:94:0e:d3:b3:
                    95:c6:13:35:b3:aa:3a:e2:8c:74:63:67:a0:6e:2a:
                    8a:27:51:9d:d2:7d:6a:7f:ef:97:fc:06:88:15:87:
                    bc:d9:51:ce:cb:ac:6c:1c:ed:2a:aa:77:80:85:af:
                    00:28:08:f1:e1:52:63:df:a9:3a:89:00:25:3e:aa:
                    95:b4:ca:76:29:d9:aa:2f:e7:1c:6e:b2:23:47:b2:
                    02:98:f8:5d:6c:ee:bb:9f:80:07:90:00:82:ec:4c:
                    91:d7:e7:3f:95:87:38:fe:e6:7d:a9:db:f2:95:83:
                    e8:1f:29:ee:5a:19:f5:63:08:bb:cf:9c:b1:74:8e:
                    35:9b:12:fe:00:40:65:86:4a:1e:3c:66:7a:db:c7:
                    61:fd:ad:75:34:39:09:4d:a4:2f:36:db:d5:25:43:
                    35:4f:7b:0e:80:c7:42:db:9e:0d:6b:8a:1b:b6:b7:
                    81:ef:02:ef:99:ad:f5:d8:1c:9a:87:46:55:25:fa:
                    a7:1e:ad:a6:7c:f0:17:b3:3f:9d:f9:29:c8:bd:f7:
                    93:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0E:C5:B0:53:1B:4B:B2:AC:C4:0F:2C:53:22:BC:0C:77:39:BD:3E
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/4849cac37bfb12c5211134e90bd1c96d42475c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:19:c7:bb:7a:13:65:d6:c8:e6:4f:73:52:5f:0c:56:91:cb:
         ae:7e:43:41:c0:be:4f:0f:ac:8b:d8:23:45:8a:af:db:aa:ad:
         02:92:3e:0f:d5:21:a4:0d:0c:08:52:fe:ef:b5:35:4d:d1:62:
         8e:ce:3a:08:68:b7:18:3b:5f:e4:58:1a:e7:29:28:b8:04:36:
         e2:db:31:27:13:a9:4c:c1:af:9e:bb:73:9b:14:f5:d0:f5:ba:
         3f:f6:5c:2b:6b:92:7a:b8:f7:81:35:16:fe:05:74:d7:94:cb:
         5c:80:86:83:15:79:b4:7a:d8:0f:b5:61:63:6c:ea:eb:a8:15:
         dd:1b:ec:5b:57:8d:96:ee:9a:8b:bd:b6:c6:5a:58:f5:51:25:
         33:d3:5b:8a:32:7b:d9:37:5a:69:03:79:10:14:ec:ae:7b:52:
         58:e1:fa:de:b0:f6:3f:16:7c:eb:d2:5a:94:48:4c:9e:25:fd:
         71:08:ad:15:86:38:5d:68:4e:19:97:83:0b:7a:72:8f:b1:a8:
         a7:ea:f4:77:f8:d7:b6:2d:d9:bf:10:20:14:c4:b2:bb:67:66:
         0d:d4:d7:f7:3d:61:bf:00:33:3f:8c:30:40:63:4b:bf:ec:15:
         f7:e3:b7:e8:da:82:dc:ff:5a:1b:2d:13:a5:7b:6d:8b:20:10:
         ca:6b:3f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org