Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/9aeff1b34f45a34fded1b72056a37019768fc080.roa
File:                     9aeff1b34f45a34fded1b72056a37019768fc080.roa (raw, json)
Hash identifier:          839UFUsTj3O9u1ob/KIidGa78WwQK04MyQIhX2VwBCM=
Subject key identifier:   15:AB:0C:09:3E:73:6C:F9:C6:FC:17:DE:E8:0B:2A:2E:6C:14:AD:3A
Certificate issuer:       /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial:       1D4FF4
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/9aeff1b34f45a34fded1b72056a37019768fc080.roa
Signing time:             Mon 19 Dec 2022 11:04:55 +0000
ROA not before:           Sun 18 Dec 2022 11:03:45 +0000
ROA not after:            Thu 19 Dec 2024 11:03:45 +0000
asID:                     64124
IP address blocks:        148.222.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1921012 (0x1d4ff4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
        Validity
            Not Before: Dec 18 11:03:45 2022 GMT
            Not After : Dec 19 11:03:45 2024 GMT
        Subject: CN=9aeff1b34f45a34fded1b72056a37019768fc080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:68:cb:ea:67:0c:f1:33:9e:7a:42:35:66:
                    9c:83:69:91:13:76:3e:15:a1:64:ff:42:65:dd:d7:
                    80:0b:d0:42:b6:a5:43:3c:93:e4:5d:74:55:c5:c7:
                    98:2a:80:6d:69:25:c5:88:2b:ec:1b:a7:6a:bb:55:
                    9a:01:56:31:ca:10:32:73:12:bb:e0:33:cd:81:4d:
                    49:aa:c2:71:48:18:e6:7f:f6:1d:88:41:df:09:7c:
                    99:46:cc:f7:cf:09:b8:52:36:2b:bb:6e:ef:07:c7:
                    5c:6f:aa:51:91:9c:26:7b:b5:df:26:50:7d:e8:2c:
                    66:08:64:d2:f2:42:0f:26:cb:30:55:38:b7:6d:9d:
                    cc:1b:a3:3c:2b:09:e1:11:75:20:1c:d3:b9:72:01:
                    95:37:08:0c:d7:96:29:b8:ec:b5:59:25:44:bf:b4:
                    33:89:44:5f:96:88:97:4f:13:4b:f1:84:7b:10:c2:
                    ff:04:38:14:a2:c7:43:c6:0d:87:22:e5:ff:d7:dd:
                    e9:fc:c3:ad:58:a3:71:e7:cc:81:7c:f4:53:a2:e1:
                    f4:dd:28:af:30:f9:1d:53:b3:d6:a8:88:f9:27:82:
                    53:80:3f:9c:be:37:95:e8:76:a1:27:57:f5:45:27:
                    84:bf:8c:d7:f3:23:5e:be:3f:b6:76:fd:db:0d:c7:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AB:0C:09:3E:73:6C:F9:C6:FC:17:DE:E8:0B:2A:2E:6C:14:AD:3A
            X509v3 Authority Key Identifier:
                keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/9aeff1b34f45a34fded1b72056a37019768fc080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ac:12:37:3d:a7:32:03:19:21:24:d6:41:21:f3:a1:93:06:
         ed:07:61:d1:e8:06:4b:9e:a3:db:19:a7:9f:35:e8:bc:49:01:
         0e:23:a9:03:b9:a4:81:64:74:fc:de:e9:4e:31:c5:f8:42:a0:
         23:d4:42:0e:cd:a5:07:10:30:28:24:24:66:6d:7a:e8:20:5b:
         07:94:c1:7d:8f:0a:74:62:4c:53:0a:e4:7c:29:b6:20:d9:67:
         17:86:f8:9e:d8:68:8b:83:2f:db:d4:fc:6b:d8:e1:97:43:28:
         c6:df:0d:f6:5f:6b:cd:7d:7b:10:63:2b:0a:94:78:c0:ba:1b:
         6d:a6:76:cf:a9:d0:51:62:02:8a:11:ea:92:28:dd:df:f2:da:
         b0:22:c2:da:ff:fd:11:74:75:1b:98:65:c0:bf:c0:92:ce:de:
         3d:1e:cb:4a:64:60:50:fc:a6:82:15:1f:71:8d:59:f5:89:3f:
         07:ed:29:78:c6:55:a8:18:cf:c8:ad:59:77:65:15:33:cf:dc:
         1a:31:49:fb:58:03:60:7d:a9:70:aa:9b:43:30:bd:b9:cc:c8:
         07:49:ce:d6:45:6b:03:61:c2:66:02:b3:e7:86:16:19:43:ca:
         ca:e6:72:81:19:07:f3:2a:30:ec:72:07:a6:be:7d:db:76:6e:
         22:df:b3:75
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHU/0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY5
N2ViOWIyNTNmYTU0NmY4N2IzZjc2MTY3ZjI4M2JjYzM3MDAzNjEwHhcNMjIxMjE4
MTEwMzQ1WhcNMjQxMjE5MTEwMzQ1WjAzMTEwLwYDVQQDEyg5YWVmZjFiMzRmNDVh
MzRmZGVkMWI3MjA1NmEzNzAxOTc2OGZjMDgwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo0doy+pnDPEznnpCNWacg2mRE3Y+FaFk/0Jl3deAC9BCtqVD
PJPkXXRVxceYKoBtaSXFiCvsG6dqu1WaAVYxyhAycxK74DPNgU1JqsJxSBjmf/Yd
iEHfCXyZRsz3zwm4UjYru27vB8dcb6pRkZwme7XfJlB96CxmCGTS8kIPJsswVTi3
bZ3MG6M8KwnhEXUgHNO5cgGVNwgM15YpuOy1WSVEv7QziURfloiXTxNL8YR7EML/
BDgUosdDxg2HIuX/193p/MOtWKNx58yBfPRTouH03SivMPkdU7PWqIj5J4JTgD+c
vjeV6HahJ1f1RSeEv4zX8yNevj+2dv3bDcdBiwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBWrDAk+c2z5xvwX3ugLKi5sFK06MB8GA1UdIwQYMBaAFOgIY7ziIgGTR4SY
RE4X0EUNX1AXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjk3ZWI5
YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTdmNWNkMTQtYWRkNy00YjcwLTljM2EtNDM3MTYz
M2Y1NWRhLzlhZWZmMWIzNGY0NWEzNGZkZWQxYjcyMDU2YTM3MDE5NzY4ZmMwODAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lN2Y1Y2QxNC1hZGQ3LTRiNzAtOWMzYS00Mzcx
NjMzZjU1ZGEvZjk3ZWI5YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJTe7zANBgkqhkiG9w0BAQsFAAOCAQEAgawSNz2nMgMZISTW
QSHzoZMG7Qdh0egGS56j2xmnnzXovEkBDiOpA7mkgWR0/N7pTjHF+EKgI9RCDs2l
BxAwKCQkZm166CBbB5TBfY8KdGJMUwrkfCm2INlnF4b4nthoi4Mv29T8a9jhl0Mo
xt8N9l9rzX17EGMrCpR4wLobbaZ2z6nQUWICihHqkijd3/LasCLC2v/9EXR1G5hl
wL/Aks7ePR7LSmRgUPymghUfcY1Z9Yk/B+0peMZVqBjPyK1Zd2UVM8/cGjFJ+1gD
YH2pcKqbQzC9uczIB0nO1kVrA2HCZgKz54YWGUPKyuZygRkH8yow7HIHpr5923Zu
It+zdQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:57 2023 by rpki-client on console-ams.rpki-client.org