Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eac9a4cb-92f6-4aa2-b8ff-49a2c6367ad8/aa9d797d37472d4994a8841856f03da8cddb23b6.roa
File:                     aa9d797d37472d4994a8841856f03da8cddb23b6.roa (raw, json)
Hash identifier:          EaaEzLn7E3paMyKJB+OUXRNQ5PPsgS41nVS6MvlEhos=
Subject key identifier:   39:38:A9:ED:0D:81:A6:A6:05:3F:84:28:30:7B:90:A5:E1:D8:32:DE
Certificate issuer:       /CN=bb0bc9a633cf9815c2e9ba979ba905b13df6519a
Certificate serial:       02DC45
Authority key identifier: FA:97:B9:E1:07:46:66:16:DD:96:B9:6C:FC:C9:D2:28:06:07:41:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb0bc9a633cf9815c2e9ba979ba905b13df6519a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eac9a4cb-92f6-4aa2-b8ff-49a2c6367ad8/aa9d797d37472d4994a8841856f03da8cddb23b6.roa
Signing time:             Wed 24 Mar 2021 14:31:47 +0000
ROA not before:           Wed 24 Mar 2021 14:31:47 +0000
ROA not after:            Tue 24 Mar 2026 14:31:47 +0000
asID:                     270106
IP address blocks:        191.241.140.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187461 (0x2dc45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0bc9a633cf9815c2e9ba979ba905b13df6519a
        Validity
            Not Before: Mar 24 14:31:47 2021 GMT
            Not After : Mar 24 14:31:47 2026 GMT
        Subject: CN=aa9d797d37472d4994a8841856f03da8cddb23b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:0b:89:7f:80:56:10:2e:e3:bf:6b:01:19:
                    a6:4c:24:6f:b6:50:f5:d9:63:a5:bd:12:75:11:a3:
                    6f:64:10:58:00:b4:f6:a1:a3:ca:1e:0d:75:1d:53:
                    cf:d3:9e:4f:1d:39:79:bd:df:e2:7e:20:e3:91:6e:
                    87:7c:87:46:37:89:8e:dc:34:db:b3:13:86:9e:bb:
                    37:ff:0e:ab:24:5e:98:56:bb:ec:99:61:c0:89:31:
                    fb:ea:4f:9c:71:88:07:4b:7a:60:cc:4f:2a:d8:c9:
                    ca:1e:d4:b2:a6:cf:e3:51:a7:50:ef:d9:a2:dd:39:
                    4c:cd:b2:b9:50:9a:21:43:67:1b:6c:01:95:ee:86:
                    9a:6b:71:ca:ca:45:02:d9:b7:e8:b2:a7:42:ae:03:
                    8c:0f:23:fc:c4:53:98:54:71:6d:8d:25:6b:ed:c9:
                    2b:d3:95:ee:bd:d5:0b:54:ed:93:5c:21:a9:d4:df:
                    92:44:0f:80:1a:fd:6d:9d:0f:05:62:e1:35:4f:9c:
                    30:15:38:c8:13:43:db:49:17:06:4d:1e:b5:19:2d:
                    75:3d:db:3e:dd:f2:18:48:58:06:04:76:10:6f:60:
                    cb:c9:50:c0:e8:c5:c2:25:78:e2:56:8a:9b:8f:f4:
                    44:07:72:f3:9f:b0:dd:2a:fd:1d:b7:4e:b9:e7:6d:
                    f5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:38:A9:ED:0D:81:A6:A6:05:3F:84:28:30:7B:90:A5:E1:D8:32:DE
            X509v3 Authority Key Identifier:
                keyid:FA:97:B9:E1:07:46:66:16:DD:96:B9:6C:FC:C9:D2:28:06:07:41:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb0bc9a633cf9815c2e9ba979ba905b13df6519a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eac9a4cb-92f6-4aa2-b8ff-49a2c6367ad8/aa9d797d37472d4994a8841856f03da8cddb23b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eac9a4cb-92f6-4aa2-b8ff-49a2c6367ad8/bb0bc9a633cf9815c2e9ba979ba905b13df6519a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:25:ea:ed:8b:a3:bd:b3:6b:24:82:3c:41:20:1b:ef:6e:71:
         f0:0d:24:54:63:7b:b2:b4:27:4c:75:8a:30:f1:51:5d:08:ce:
         d5:a8:82:a8:84:bf:66:f6:c8:b1:cb:95:f1:f7:5e:8e:cd:46:
         01:ff:59:e0:53:1f:84:66:23:b2:fb:e5:74:a5:cd:29:14:19:
         fe:71:aa:42:b0:ee:4b:37:80:ad:47:00:93:49:11:74:96:23:
         8a:06:63:f8:fa:cf:65:2a:ac:83:fc:99:73:ee:d0:ef:44:fb:
         96:e6:e0:ae:ec:6e:af:d1:83:49:c0:a7:8e:68:d5:cf:8e:19:
         60:a1:3e:cf:b0:8c:5e:8d:80:49:e7:c8:39:ba:26:b4:e0:37:
         c3:5f:53:a9:ca:df:03:3b:2b:41:1a:68:1a:ac:bf:f7:c0:fb:
         2a:de:56:9d:97:1d:f1:ce:2f:e8:2a:d0:69:57:00:71:20:b5:
         61:99:7d:d9:ac:9b:ed:72:57:54:38:c0:97:cd:11:57:d6:82:
         74:48:2f:55:b5:bd:94:71:73:91:0d:ef:7e:b3:49:c2:ce:48:
         9e:8b:d9:b9:85:ef:68:e3:15:0f:d5:49:0d:4c:b4:16:a1:f3:
         1c:92:4d:b2:90:ce:01:f5:bb:4f:3c:7c:d9:07:a1:c7:29:43:
         4b:c1:1a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 14:20:30 2023 by rpki-client on console-fra.rpki-client.org