Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/9196d81df9fcbbe1bd68e9d92d3fd8e618ba633f.roa
File:                     9196d81df9fcbbe1bd68e9d92d3fd8e618ba633f.roa (raw, json)
Hash identifier:          2/HxUp5bdYv0bcv9aj5lMW9zpAOAFc7gyrjMhf8/NIQ=
Subject key identifier:   BA:AB:9C:75:0A:26:D6:8D:5B:49:A5:26:BE:57:C2:45:71:AA:4F:59
Certificate issuer:       /CN=4da24f95f9e14009eadf64141dc9a803fece4656
Certificate serial:       06A6
Authority key identifier: 03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/9196d81df9fcbbe1bd68e9d92d3fd8e618ba633f.roa
Signing time:             Fri 21 May 2021 20:52:05 +0000
ROA not before:           Fri 21 May 2021 03:00:00 +0000
ROA not after:            Sun 21 May 2023 03:00:00 +0000
asID:                     265768
IP address blocks:        45.173.212.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1702 (0x6a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da24f95f9e14009eadf64141dc9a803fece4656
        Validity
            Not Before: May 21 03:00:00 2021 GMT
            Not After : May 21 03:00:00 2023 GMT
        Subject: CN=9196d81df9fcbbe1bd68e9d92d3fd8e618ba633f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:79:1e:fe:e3:a2:65:86:84:52:e5:8d:96:
                    da:5c:d3:1b:7c:64:2a:10:9c:8c:d7:27:a8:23:20:
                    eb:b3:32:7b:f1:38:eb:23:b8:cb:75:be:2a:fd:a9:
                    e7:87:af:c3:e6:7d:95:22:3f:f3:c6:c8:07:9d:c6:
                    38:0a:73:6f:13:e1:a6:ee:4e:86:45:0e:3d:b9:db:
                    fc:78:3e:53:cc:35:d2:88:4a:7e:2f:aa:21:61:97:
                    bb:25:a8:d3:9e:ce:9a:d0:cd:99:bb:52:98:09:0e:
                    d3:f4:e9:bb:af:c4:65:b7:b4:b1:df:b5:54:aa:63:
                    71:0e:68:73:57:b0:56:11:7a:48:1f:27:8d:57:78:
                    02:b4:3b:73:3a:19:47:72:69:49:7d:87:b6:14:36:
                    c6:24:db:52:01:05:0f:58:ee:70:10:cf:6a:d1:9a:
                    7b:b8:f0:08:39:72:fd:5e:ad:87:c2:64:03:ff:ca:
                    ef:7e:2a:c9:3a:0b:14:b0:18:ad:c6:7e:83:99:9a:
                    fe:f1:d7:21:68:72:38:be:33:d1:3d:57:b6:42:cd:
                    0a:ea:27:d6:43:f5:d7:fc:83:d2:05:1c:f0:e0:99:
                    3c:45:82:e8:0a:14:f3:d1:02:fb:01:d1:4d:a9:7e:
                    00:d6:3a:b0:e1:e5:91:72:e8:ad:48:c5:60:77:cd:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AB:9C:75:0A:26:D6:8D:5B:49:A5:26:BE:57:C2:45:71:AA:4F:59
            X509v3 Authority Key Identifier:
                keyid:03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/9196d81df9fcbbe1bd68e9d92d3fd8e618ba633f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/4da24f95f9e14009eadf64141dc9a803fece4656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:d1:6a:95:84:58:97:07:a0:8d:13:8d:a1:d4:d2:91:9b:35:
         4b:96:e7:69:ed:b1:f1:ef:12:ad:4f:81:31:52:79:7e:66:2c:
         b7:ae:10:35:fc:1d:22:a4:7c:0a:a3:8f:04:35:74:4b:15:fb:
         8e:d1:f7:f1:97:2c:24:c5:bc:b2:b1:2a:e4:94:e5:43:10:62:
         2d:b1:34:16:28:c0:31:0a:6c:74:80:23:f2:85:23:c0:f9:fc:
         4a:3c:46:f9:49:9f:e9:f4:a1:40:b7:07:00:a4:e9:0e:b3:99:
         8a:84:1e:63:de:f5:fc:61:39:2f:25:37:65:98:31:43:97:d9:
         fa:8e:cf:9f:1b:26:3f:b5:98:28:35:fc:bd:86:22:62:54:0f:
         77:11:b0:fb:75:f9:eb:13:f2:ff:b4:da:63:dd:2d:1d:36:dc:
         51:91:ec:57:67:86:c7:85:9f:49:fe:74:77:ee:23:fd:d7:ca:
         00:b3:ec:12:3c:70:7b:09:88:64:43:20:1c:b0:3e:88:31:0d:
         11:0d:36:19:cb:c4:23:78:63:cd:47:42:fb:5a:46:56:72:c1:
         57:e6:68:21:45:c7:22:fe:8c:cd:fa:16:ea:cd:34:cf:fa:77:
         81:0f:20:8d:11:c3:f2:e0:a5:8b:2e:00:94:46:1e:a4:84:49:
         be:9f:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-fra.rpki-client.org