Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/fb852db0d167807b3d1e975763b4891e05d7c9c0.roa
File:                     fb852db0d167807b3d1e975763b4891e05d7c9c0.roa (raw, json)
Hash identifier:          LC6+dkzxAmOpRLZwAYL7cdx3D/y5ILnH5PEkw0QwTqI=
Subject key identifier:   F5:5A:F0:0F:53:A3:F4:77:E5:6A:AC:29:0B:19:99:E8:46:0B:EF:D3
Certificate issuer:       /CN=aaf4571e3a5915e171eb5856008590d6211ff016
Certificate serial:       0FD8
Authority key identifier: 81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/fb852db0d167807b3d1e975763b4891e05d7c9c0.roa
Signing time:             Tue 25 May 2021 16:04:12 +0000
ROA not before:           Tue 25 May 2021 03:00:00 +0000
ROA not after:            Thu 25 May 2023 03:00:00 +0000
asID:                     204300
IP address blocks:        45.4.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4056 (0xfd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf4571e3a5915e171eb5856008590d6211ff016
        Validity
            Not Before: May 25 03:00:00 2021 GMT
            Not After : May 25 03:00:00 2023 GMT
        Subject: CN=fb852db0d167807b3d1e975763b4891e05d7c9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:cc:22:93:88:ad:1b:61:84:d7:97:4b:6f:
                    04:f8:1f:46:64:1e:26:ce:27:de:04:f6:f5:43:b7:
                    b1:77:4f:bf:45:8e:81:22:07:f2:c6:75:cc:1e:8a:
                    af:4f:d2:82:d7:ef:5e:7d:7c:e3:72:90:c4:84:46:
                    9f:82:a5:0f:87:3f:43:6a:76:4e:a8:e8:c0:c2:0a:
                    78:01:d4:ad:af:f7:0e:b2:7d:b4:09:a9:cb:6e:04:
                    24:5b:ac:71:96:82:29:ef:a3:96:48:b2:9e:c9:eb:
                    de:90:08:52:f1:f1:4a:80:dc:55:1a:3c:12:38:54:
                    22:31:a7:c2:f1:84:9f:c1:e1:5d:4f:37:52:8d:a4:
                    ce:34:ea:12:8d:a0:e1:99:12:f8:05:41:67:4c:e3:
                    e8:7d:6a:84:d1:a5:f0:92:ec:f3:0a:b2:98:ed:82:
                    0a:f7:c9:60:f0:03:4a:97:81:65:44:b7:71:e8:dd:
                    2b:2a:f3:14:e8:c2:42:f9:ce:df:c1:33:8c:97:ff:
                    80:50:4d:ca:3b:1e:63:f0:02:69:b8:3b:bd:fe:0b:
                    0c:a8:5d:8b:34:dd:c5:85:10:e9:bd:d3:04:6c:93:
                    64:29:7d:da:f7:21:d3:76:3f:de:28:3f:bd:42:e5:
                    5c:af:fc:92:22:90:6a:d0:ff:71:aa:b3:12:43:b1:
                    d9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5A:F0:0F:53:A3:F4:77:E5:6A:AC:29:0B:19:99:E8:46:0B:EF:D3
            X509v3 Authority Key Identifier:
                keyid:81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/fb852db0d167807b3d1e975763b4891e05d7c9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/aaf4571e3a5915e171eb5856008590d6211ff016.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:ac:0a:34:15:da:3e:b8:2c:2d:a9:af:c2:d0:60:ce:05:a8:
         bb:d8:74:59:58:63:b7:ca:e0:bd:dc:42:ff:85:b5:ac:9a:58:
         eb:be:df:ef:a7:8a:1d:c2:47:0a:83:cb:5d:a9:2f:54:8a:4e:
         1c:fe:b5:e4:45:2f:57:04:81:92:af:ea:ca:da:ad:cb:59:dd:
         b3:f8:72:b8:76:d1:d0:95:da:fc:bf:70:26:0c:19:f8:8c:76:
         70:36:8b:82:ad:3f:90:dd:f6:36:35:fa:52:28:6a:f8:e8:41:
         43:cb:2e:64:f6:4b:0f:ae:ff:5b:d0:f1:47:a9:db:e3:b6:50:
         13:91:55:3b:b7:9e:fe:68:be:4e:22:21:24:a7:7d:79:fd:52:
         ed:e6:54:eb:8e:80:89:44:21:30:7f:6c:18:f0:50:39:20:90:
         d8:1b:c6:e9:8d:70:2e:aa:30:83:69:36:1d:a7:04:7b:b8:90:
         93:35:4c:bc:59:e6:b5:5d:05:53:39:28:7c:ec:53:15:b3:b6:
         fa:de:1c:97:b8:84:f8:c5:d1:23:99:00:ed:49:31:08:17:17:
         26:24:5c:12:90:e7:51:5d:46:b7:06:7a:ca:93:48:43:fb:d4:
         65:25:90:eb:ee:38:6b:7d:25:28:cc:9d:8a:84:6b:30:3a:e0:
         e4:79:f5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org