Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/16d9cc0fdf34305831e2d55d1b024578a8a6673e.roa
File:                     16d9cc0fdf34305831e2d55d1b024578a8a6673e.roa (raw, json)
Hash identifier:          NgG4G6ltO3gnPY55iRvSHqc3+FXTCe9E9ZgTxxAiaVE=
Subject key identifier:   CB:C8:1F:9C:BE:44:98:86:91:E2:E2:7C:E2:F7:12:43:4B:48:25:02
Certificate issuer:       /CN=5f126d30fa6a87627cafe0e8a0ca50fa3b12e800
Certificate serial:       011FB8
Authority key identifier: 61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/16d9cc0fdf34305831e2d55d1b024578a8a6673e.roa
Signing time:             Thu 15 Apr 2021 22:14:05 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     270076
IP address blocks:        138.186.76.0/23 maxlen: 23
                          138.186.78.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73656 (0x11fb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f126d30fa6a87627cafe0e8a0ca50fa3b12e800
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=16d9cc0fdf34305831e2d55d1b024578a8a6673e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e3:1c:00:e3:8a:8c:6a:e5:7d:cd:52:f3:5b:
                    91:c5:39:96:7c:16:2a:85:ea:09:c0:3f:1e:0d:58:
                    ba:19:d6:65:aa:44:8f:4a:b8:b2:5d:1a:8d:cd:bf:
                    5f:0b:4e:56:bc:e5:48:16:d6:8f:98:bb:a0:db:16:
                    8e:f2:6d:7f:a1:4b:87:96:88:43:ae:55:bb:47:88:
                    22:56:1c:0a:bb:25:63:df:f6:07:84:ae:c2:6c:cd:
                    ce:8e:b3:2a:83:3f:9c:a0:98:52:c5:a8:c4:a3:2f:
                    38:fa:c1:fc:a5:27:30:a1:16:60:02:34:df:02:c2:
                    68:85:08:70:ce:e2:4d:a7:e9:7b:67:9f:51:df:67:
                    26:1a:64:c6:80:25:30:04:39:5f:16:40:5c:07:c2:
                    07:c7:3a:ca:15:78:3e:0a:dd:9d:7c:0b:cb:c7:c1:
                    9d:4a:de:5c:f9:aa:52:b8:b4:01:99:ba:77:6e:70:
                    5b:5f:35:1d:ca:ad:61:78:9a:32:3a:86:06:b1:de:
                    eb:4b:d0:1d:d0:de:ee:b8:18:87:db:e9:59:80:39:
                    77:98:3d:25:b8:f6:95:52:b1:09:51:4f:39:ef:90:
                    98:1e:c0:b0:22:f4:ed:a7:21:fa:7b:27:01:2d:56:
                    3f:2c:a9:c5:6f:7e:c4:c8:24:83:2d:e7:34:ac:e0:
                    ca:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C8:1F:9C:BE:44:98:86:91:E2:E2:7C:E2:F7:12:43:4B:48:25:02
            X509v3 Authority Key Identifier:
                keyid:61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/16d9cc0fdf34305831e2d55d1b024578a8a6673e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:dd:cd:d9:a0:f0:2e:bd:66:8e:e8:1c:ea:73:7d:e2:86:41:
         02:f8:4f:87:77:f8:c9:44:8e:ea:d6:21:53:36:d4:a6:a0:b6:
         b3:be:35:34:35:cf:9b:db:62:d5:7b:1c:0f:6b:79:22:03:37:
         f3:59:4f:0b:58:7c:df:06:82:3f:34:87:29:90:ee:00:d8:e3:
         b8:64:d4:37:7c:6d:34:d3:ab:12:79:1e:ee:31:15:9e:e1:7c:
         0d:af:2c:3b:83:83:00:b2:39:6d:ce:e1:02:e8:5a:e2:37:59:
         8d:32:0b:17:08:05:9b:1b:f7:84:59:7c:b5:24:1d:ab:34:9d:
         19:81:ff:4b:53:a4:6e:a6:1c:a8:71:5f:84:51:44:0c:f2:34:
         ed:16:b9:47:69:dd:0f:3e:64:f9:a4:e9:a1:f7:6a:d8:fc:98:
         68:5a:e8:28:39:dd:22:c3:a5:55:57:1d:89:d1:67:6e:69:0e:
         c5:ef:fb:86:ad:66:0a:73:eb:80:3b:28:8a:e6:33:24:c2:0f:
         09:b3:11:b9:70:37:62:06:43:55:1b:24:c6:65:56:ef:34:06:
         06:65:b2:5a:59:d8:1f:bc:ca:2f:02:93:5a:f5:41:ab:d4:da:
         ba:cb:74:a2:21:4e:02:e0:82:e4:14:84:b1:12:de:ce:ea:52:
         38:4c:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-fra.rpki-client.org