Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e996419f-f2bb-4b9f-9855-1423154abbbe/63089eca2402abfb3158c0321d70e85a33e1cdfe.roa
File:                     63089eca2402abfb3158c0321d70e85a33e1cdfe.roa (raw, json)
Hash identifier:          vIBu5ETnB/0Iy5epHt0TfE0sAAipNetkZHSO/2t8jhw=
Subject key identifier:   45:8E:8C:9F:C8:6A:23:F0:42:88:6B:39:E8:67:58:8C:49:25:2A:F5
Certificate issuer:       /CN=39073eec304c8ab3529f304e195b5403c9a33b05
Certificate serial:       1152AB
Authority key identifier: 17:98:67:57:43:99:C5:89:E5:EF:72:DD:79:F2:CA:2F:FE:41:B7:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39073eec304c8ab3529f304e195b5403c9a33b05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e996419f-f2bb-4b9f-9855-1423154abbbe/63089eca2402abfb3158c0321d70e85a33e1cdfe.roa
Signing time:             Wed 06 Oct 2021 17:34:08 +0000
ROA not before:           Wed 06 Oct 2021 03:00:00 +0000
ROA not after:            Fri 06 Oct 2023 03:00:00 +0000
asID:                     264758
IP address blocks:        131.196.0.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135275 (0x1152ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39073eec304c8ab3529f304e195b5403c9a33b05
        Validity
            Not Before: Oct  6 03:00:00 2021 GMT
            Not After : Oct  6 03:00:00 2023 GMT
        Subject: CN=63089eca2402abfb3158c0321d70e85a33e1cdfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:25:ed:84:47:d9:4c:2b:63:7c:56:a4:c3:
                    8f:8d:b8:7c:2b:2e:ef:34:a0:39:5a:1d:5f:5b:e5:
                    06:4b:87:c0:52:65:ff:a8:6f:27:52:a4:50:57:d8:
                    77:90:39:1d:7f:e2:78:e4:65:8d:95:f4:e4:65:92:
                    e3:66:dd:3b:86:ec:4c:58:cb:fa:8a:b2:8f:b9:f8:
                    8d:fd:3b:0b:2b:d3:94:83:63:6a:c2:6f:d8:36:3b:
                    48:ff:61:af:9a:cb:9c:e4:5a:6d:02:a1:fd:eb:49:
                    cf:6b:b2:cd:c6:d2:49:ee:78:79:2d:4d:3b:32:d1:
                    2e:c2:7f:05:15:cd:89:86:b9:cc:56:f7:84:64:13:
                    60:70:d1:b6:aa:07:b4:75:da:65:de:0e:f7:c0:ac:
                    c8:0d:6d:e2:bd:33:2c:d4:f3:98:df:e0:1f:f5:c4:
                    50:1b:9c:fb:02:e1:fc:52:61:0d:72:83:94:4c:b7:
                    13:c1:7e:33:83:6d:2b:2d:77:a1:1c:b9:83:39:22:
                    b6:3f:ea:a7:24:fa:2e:18:ec:59:98:7f:fc:6c:cd:
                    72:e5:68:53:3a:3d:e5:1e:5f:ff:da:94:de:10:fc:
                    93:a2:9c:8b:47:63:39:4f:ea:f0:ee:93:bb:94:bb:
                    04:9f:81:fd:1d:38:26:75:4c:7a:ef:0f:56:c4:97:
                    5e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8E:8C:9F:C8:6A:23:F0:42:88:6B:39:E8:67:58:8C:49:25:2A:F5
            X509v3 Authority Key Identifier:
                keyid:17:98:67:57:43:99:C5:89:E5:EF:72:DD:79:F2:CA:2F:FE:41:B7:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39073eec304c8ab3529f304e195b5403c9a33b05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e996419f-f2bb-4b9f-9855-1423154abbbe/63089eca2402abfb3158c0321d70e85a33e1cdfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e996419f-f2bb-4b9f-9855-1423154abbbe/39073eec304c8ab3529f304e195b5403c9a33b05.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:ef:79:f7:64:e5:06:57:c3:21:3c:00:e9:9c:52:db:7d:9c:
         83:37:85:c2:e7:91:5f:e8:e1:8a:5c:de:ff:ef:ed:ce:ab:0b:
         95:86:a9:6d:82:77:f4:57:ba:d8:b2:58:47:a5:80:be:eb:1d:
         a4:23:60:26:cf:3f:32:fd:a9:b6:a2:30:c2:0d:1b:c1:1e:1b:
         93:fc:7b:58:b0:06:41:2b:e3:0a:7c:1b:e3:30:a2:81:b5:aa:
         b2:54:1b:b5:65:80:af:17:60:b0:da:1d:50:d2:85:cb:a6:79:
         8a:a2:b4:cb:96:01:47:bd:20:66:a9:22:98:ed:cb:35:a9:7b:
         8c:1e:82:45:74:d0:6d:a2:a9:a5:f8:80:b1:68:fa:1a:2b:3d:
         27:a9:1e:2c:eb:b8:81:73:0d:bb:03:b6:d6:1b:f7:b8:37:cb:
         34:19:09:b9:fe:b1:21:e5:c0:90:ce:41:1b:5b:68:1c:ae:68:
         21:7e:4a:ad:cc:d2:98:1d:02:f6:23:b9:fe:07:84:71:ba:cc:
         f5:6c:6b:7d:e5:03:08:37:06:b7:28:43:84:f7:51:49:38:09:
         9d:51:96:f5:26:be:0d:af:d3:06:d9:43:34:64:1a:d1:9a:6d:
         86:34:46:ce:60:94:f1:32:4e:54:41:ed:d0:de:32:2f:c7:0d:
         f0:cd:be:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:57 2023 by rpki-client on console-ams.rpki-client.org