Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/91fab88269666428f76e1e8e163c08f409bf2dd0.roa
File:                     91fab88269666428f76e1e8e163c08f409bf2dd0.roa (raw, json)
Hash identifier:          zGz66wLlnlZt1ab1EUNlw+rk8P55KuvQqQIodvagWEY=
Subject key identifier:   55:66:65:81:A8:77:4D:D3:64:E3:C7:F6:15:56:AE:A8:94:22:F8:76
Certificate issuer:       /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial:       0CD5F8
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/91fab88269666428f76e1e8e163c08f409bf2dd0.roa
Signing time:             Wed 24 Mar 2021 14:39:20 +0000
ROA not before:           Wed 24 Mar 2021 14:39:20 +0000
ROA not after:            Tue 24 Mar 2026 14:39:20 +0000
asID:                     264836
IP address blocks:        157.100.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841208 (0xcd5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
        Validity
            Not Before: Mar 24 14:39:20 2021 GMT
            Not After : Mar 24 14:39:20 2026 GMT
        Subject: CN=91fab88269666428f76e1e8e163c08f409bf2dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:eb:92:ed:6f:57:8a:13:f2:7c:28:6b:93:
                    dd:7d:df:ce:70:a1:c1:0b:82:fc:1f:2c:f0:97:3f:
                    67:7a:0e:f9:ce:16:a1:27:0b:93:fa:eb:5e:de:03:
                    5c:1e:f5:01:f0:cc:81:c8:80:3f:58:82:91:a8:cb:
                    e8:22:18:ea:9e:e1:5a:c4:85:0d:00:e3:99:23:ae:
                    09:17:fb:f5:8d:18:c3:bc:08:f7:1a:3c:5d:53:6b:
                    0c:c1:aa:6a:06:c8:a2:13:30:ff:05:ed:6e:e6:d7:
                    a2:e7:5f:92:20:33:1f:44:3b:53:56:1e:69:4c:14:
                    83:82:3b:97:fd:89:47:1d:fe:c0:e8:6c:16:be:93:
                    96:99:e0:0f:49:bc:e1:01:d4:06:87:b5:80:19:1e:
                    1d:f7:91:90:76:43:73:b6:70:14:e2:85:7e:ca:a5:
                    f7:09:83:3e:09:77:7b:e1:59:32:8f:75:96:03:54:
                    ad:62:a5:e2:ca:fa:cb:b4:0c:89:dd:a1:53:04:c7:
                    ab:e9:5d:a9:9f:b6:b7:52:ad:45:56:fa:e5:70:7b:
                    43:3f:42:f8:42:b5:d4:61:84:81:d0:25:a1:63:76:
                    d0:79:83:22:d4:61:f9:1c:bf:99:84:83:e9:b3:12:
                    be:d4:c1:c5:db:6f:34:68:2e:cb:61:88:e2:da:02:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:66:65:81:A8:77:4D:D3:64:E3:C7:F6:15:56:AE:A8:94:22:F8:76
            X509v3 Authority Key Identifier:
                keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/91fab88269666428f76e1e8e163c08f409bf2dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:43:04:e4:cf:f3:a6:3a:fb:9d:0c:a8:ff:75:8e:ee:9b:b5:
         bf:5c:86:ce:7b:44:a5:37:fe:19:55:e5:33:e3:dc:51:e5:92:
         ba:78:4b:8e:44:1e:82:93:15:45:f4:a4:b9:f0:01:cc:6d:dd:
         5a:b9:1c:e3:ef:33:b9:fe:30:f0:32:fd:35:30:36:4a:93:fe:
         32:08:ba:21:27:03:3f:d8:81:d3:c5:31:f4:61:dc:b3:9d:ca:
         c3:fc:df:61:2c:8e:e5:06:c8:cc:4b:54:a1:8c:10:17:18:08:
         dc:eb:cc:25:17:fa:e1:9f:66:4d:d5:73:9e:67:dc:26:2a:a6:
         8e:97:3a:7f:6a:c0:37:c7:70:96:2d:da:3b:f2:05:8a:60:56:
         69:15:f0:d9:a4:71:c2:55:70:90:2a:23:67:8f:8f:d8:6d:fe:
         9b:4b:69:48:df:2d:8f:46:04:44:5f:7f:60:90:a3:20:00:47:
         31:7b:8b:57:05:41:1a:14:1a:43:c1:de:06:3b:16:7c:93:32:
         24:a1:b5:93:40:2b:b1:1d:53:5a:bf:80:63:d8:30:01:34:83:
         1c:d4:39:3f:c7:e3:8e:ab:73:7c:7d:4a:db:2b:53:e0:a9:6f:
         e3:55:9b:41:a9:8c:58:c9:27:9a:00:9f:fb:94:14:f3:9c:08:
         26:6b:ed:03
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDNX4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
MWVhNWUyYWJhNGM2YzA5MjllYWJmMGExNGI4OGY0MDNhNzI2ZTIwHhcNMjEwMzI0
MTQzOTIwWhcNMjYwMzI0MTQzOTIwWjAzMTEwLwYDVQQDEyg5MWZhYjg4MjY5NjY2
NDI4Zjc2ZTFlOGUxNjNjMDhmNDA5YmYyZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmYHrku1vV4oT8nwoa5Pdfd/OcKHBC4L8Hyzwlz9neg75zhah
JwuT+ute3gNcHvUB8MyByIA/WIKRqMvoIhjqnuFaxIUNAOOZI64JF/v1jRjDvAj3
GjxdU2sMwapqBsiiEzD/Be1u5tei51+SIDMfRDtTVh5pTBSDgjuX/YlHHf7A6GwW
vpOWmeAPSbzhAdQGh7WAGR4d95GQdkNztnAU4oV+yqX3CYM+CXd74Vkyj3WWA1St
YqXiyvrLtAyJ3aFTBMer6V2pn7a3Uq1FVvrlcHtDP0L4QrXUYYSB0CWhY3bQeYMi
1GH5HL+ZhIPpsxK+1MHF2280aC7LYYji2gJrQwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFVmZYGod03TZOPH9hVWrqiUIvh2MB8GA1UdIwQYMBaAFLY/3JXBPG71vVGE
Wglkv+ALFJ6OMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzAxZWE1
ZTJhYmE0YzZjMDkyOWVhYmYwYTE0Yjg4ZjQwM2E3MjZlMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTU5NDg0MzQtNDA1Ni00Mzk0LWI3YTctNDMzZjUx
NzUxNzNhLzkxZmFiODgyNjk2NjY0MjhmNzZlMWU4ZTE2M2MwOGY0MDliZjJkZDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNTk0ODQzNC00MDU2LTQzOTQtYjdhNy00MzNm
NTE3NTE3M2EvNzAxZWE1ZTJhYmE0YzZjMDkyOWVhYmYwYTE0Yjg4ZjQwM2E3MjZl
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJ1kRjANBgkqhkiG9w0BAQsFAAOCAQEAdkME5M/zpjr7nQyo
/3WO7pu1v1yGzntEpTf+GVXlM+PcUeWSunhLjkQegpMVRfSkufABzG3dWrkc4+8z
uf4w8DL9NTA2SpP+Mgi6IScDP9iB08Ux9GHcs53Kw/zfYSyO5QbIzEtUoYwQFxgI
3OvMJRf64Z9mTdVznmfcJiqmjpc6f2rAN8dwli3aO/IFimBWaRXw2aRxwlVwkCoj
Z4+P2G3+m0tpSN8tj0YERF9/YJCjIABHMXuLVwVBGhQaQ8HeBjsWfJMyJKG1k0Ar
sR1TWr+AY9gwATSDHNQ5P8fjjqtzfH1K2ytT4Klv41WbQamMWMknmgCf+5QU85wI
JmvtAw==
-----END CERTIFICATE-----
Generated at Tue Sep 26 18:14:11 2023 by rpki-client on console-ams.rpki-client.org