Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/a259c113471f8214fb76bbab5eced7310af0b730.roa
File:                     a259c113471f8214fb76bbab5eced7310af0b730.roa (raw, json)
Hash identifier:          HRz06r3eR7GGnxS0l6ZrU17hyZ7oy6yS4qz/zPS6qr8=
Subject key identifier:   56:52:73:8E:A8:46:DA:39:E2:BC:80:B0:03:4C:92:23:8B:DA:85:2A
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       0AFD43
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/a259c113471f8214fb76bbab5eced7310af0b730.roa
Signing time:             Fri 18 Nov 2022 18:47:45 +0000
ROA not before:           Wed 16 Nov 2022 18:39:43 +0000
ROA not after:            Mon 18 Nov 2024 18:39:43 +0000
asID:                     27768
IP address blocks:        201.217.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720195 (0xafd43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 16 18:39:43 2022 GMT
            Not After : Nov 18 18:39:43 2024 GMT
        Subject: CN=a259c113471f8214fb76bbab5eced7310af0b730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:30:12:e1:80:e5:b3:04:d4:31:0e:95:54:01:
                    12:9a:34:6d:93:fe:4c:69:89:d7:1f:de:23:6d:ad:
                    be:ef:df:b6:4f:1f:ae:66:bf:13:e1:51:0e:6f:25:
                    1d:20:c6:26:ce:23:d7:fb:8e:dd:d0:cb:5e:0d:48:
                    5a:88:71:cf:ce:0f:7f:74:2a:50:97:9d:2c:26:3f:
                    00:db:e3:9c:93:53:60:17:86:ca:7a:f0:1f:ef:02:
                    60:4e:19:63:1f:20:ca:3a:13:7c:f0:cf:73:02:e7:
                    2b:50:9a:fb:1d:c3:e8:30:c4:cc:17:5d:e6:ca:82:
                    fc:db:7a:b5:df:37:37:60:e7:70:37:34:a8:41:53:
                    4e:a6:dc:32:d7:67:ca:3e:10:b4:73:af:01:89:d6:
                    20:e3:4e:2d:93:58:db:8b:38:38:d4:80:8a:5f:4c:
                    47:54:9f:cc:b5:c3:f3:62:fa:06:fe:0c:21:9d:5d:
                    f7:40:96:de:17:5b:0d:98:e4:45:ca:9a:75:37:e1:
                    4c:bd:f6:13:87:f1:14:f0:a9:45:5b:fa:5e:57:30:
                    90:1e:0b:b1:a5:f9:8b:40:ed:c4:bd:7f:df:14:56:
                    3a:e0:7f:eb:12:50:75:17:2b:4e:2a:3d:65:cd:10:
                    5e:b6:cc:d3:6a:4e:77:43:53:36:27:c4:6f:61:35:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:52:73:8E:A8:46:DA:39:E2:BC:80:B0:03:4C:92:23:8B:DA:85:2A
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/a259c113471f8214fb76bbab5eced7310af0b730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ed:f5:ad:ee:13:8a:35:f9:3d:d4:39:5d:7a:67:57:e2:f0:
         03:9d:e1:75:6c:6b:2a:29:93:28:23:a3:b5:da:65:6c:e5:20:
         2b:6c:36:5d:17:bc:02:18:3a:42:7a:1e:da:24:39:27:0f:ed:
         af:01:0a:3b:b8:56:02:c2:66:e9:1f:1a:35:27:70:c5:a0:4d:
         f3:42:9e:16:9f:22:91:f7:88:c4:67:9b:b2:cc:e3:36:5b:93:
         ea:44:24:dc:7a:1f:bc:01:ab:8b:8e:17:54:ac:b7:c2:94:0a:
         91:97:77:12:a2:d5:b2:3d:37:35:0a:28:6d:c4:05:08:94:0b:
         0d:85:6f:03:48:2c:20:f0:9b:21:a0:88:c3:55:2d:44:a9:c8:
         88:43:26:74:4e:80:de:db:01:f5:dc:18:1b:99:c4:c6:e0:4d:
         fa:56:9b:5c:c7:f3:5a:e2:a7:ab:8d:4e:f7:ca:96:14:2f:e2:
         fd:40:f0:66:79:fc:42:3a:ed:41:66:48:3d:92:be:d9:a3:db:
         d4:ef:fa:61:e9:b1:42:52:ff:c6:07:da:d7:9e:e0:ea:c4:5e:
         03:10:68:1f:3c:40:94:da:fd:44:75:d5:09:6f:40:d9:49:55:
         38:be:ac:14:3f:a5:77:8c:25:30:fc:f6:8d:35:13:03:a4:64:
         d9:d1:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org