Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/52fd9cd987f4cf3140e7668f36428e5ba095f9f4.roa
File:                     52fd9cd987f4cf3140e7668f36428e5ba095f9f4.roa (raw, json)
Hash identifier:          Viw8YcuhMLMhjtrMY+wsPlZq5q2fkIMVQkFwQtC++Ps=
Subject key identifier:   8F:00:07:99:E0:A4:6C:4F:C6:A6:46:45:D8:22:31:DE:A2:37:D7:80
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       161324
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/52fd9cd987f4cf3140e7668f36428e5ba095f9f4.roa
Signing time:             Fri 28 Jan 2022 20:51:31 +0000
ROA not before:           Fri 28 Jan 2022 03:00:00 +0000
ROA not after:            Sun 28 Jan 2024 03:00:00 +0000
asID:                     28075
IP address blocks:        198.12.61.0/24 maxlen: 24
                          198.12.62.0/24 maxlen: 24
                          198.12.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1446692 (0x161324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Jan 28 03:00:00 2022 GMT
            Not After : Jan 28 03:00:00 2024 GMT
        Subject: CN=52fd9cd987f4cf3140e7668f36428e5ba095f9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0f:e1:ae:8a:00:1b:ba:29:ba:b4:fc:d1:90:
                    c7:21:a3:05:d8:47:26:1c:70:62:78:bb:76:90:f3:
                    f0:a9:6d:25:ad:68:24:6d:e0:61:65:c5:66:56:bd:
                    bc:4d:63:a6:ca:90:00:0f:3b:6a:f1:a0:65:0b:98:
                    3a:e6:bd:2f:ad:62:14:f6:e9:bf:71:25:83:0e:b4:
                    86:26:59:99:09:54:91:8c:d4:84:49:ff:29:9c:85:
                    6c:28:62:41:15:4b:ec:a7:9c:23:d1:1d:36:22:c0:
                    3f:ca:4c:fd:de:ea:9e:85:d3:9e:85:a9:6c:a9:af:
                    fd:11:1c:9d:b6:33:24:0f:6c:2f:9e:6b:f3:c5:f5:
                    d9:b2:62:96:cb:bf:72:f3:57:ba:ea:de:b2:58:4f:
                    fb:b2:54:56:05:9f:db:12:81:6f:0a:c8:8e:6f:c7:
                    86:9f:97:30:fb:97:b6:d8:94:38:84:37:4e:b1:03:
                    b8:f8:2e:0e:62:21:f8:6c:45:a5:9a:44:85:95:fc:
                    65:d1:06:62:0f:31:96:92:4a:6c:a9:3a:5e:fe:34:
                    b4:85:3a:83:33:9e:95:c5:41:a4:9c:87:cf:31:b3:
                    e8:95:4d:9a:89:16:99:40:e2:00:48:5f:4d:71:92:
                    77:61:05:a7:ce:af:ad:3e:7a:aa:34:64:88:ed:b3:
                    2d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:00:07:99:E0:A4:6C:4F:C6:A6:46:45:D8:22:31:DE:A2:37:D7:80
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/52fd9cd987f4cf3140e7668f36428e5ba095f9f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.61.0-198.12.63.255

    Signature Algorithm: sha256WithRSAEncryption
         14:19:66:af:b3:df:20:32:73:4d:6b:34:38:8f:a3:ef:d8:02:
         e0:61:76:aa:d2:35:12:48:5c:f8:6f:e7:69:7b:02:44:b3:36:
         93:96:5d:c0:d5:4b:8f:fa:6d:ad:ac:8d:15:7e:e5:2e:17:76:
         9b:d3:16:35:dd:0b:e0:dd:6c:56:84:66:c0:a1:a9:f3:f3:fd:
         e5:b7:39:23:e9:35:c1:e2:f2:58:42:ee:bc:81:15:e7:3e:94:
         04:55:9e:b4:70:9b:65:e9:ed:89:f1:e8:0f:58:d8:10:5c:bc:
         71:bc:05:21:41:76:28:30:89:22:28:62:ff:70:dc:84:8b:df:
         60:30:30:f5:40:fa:d6:79:62:65:b6:bb:4f:22:c0:11:e1:5f:
         8c:2e:82:29:00:fc:f0:c3:0e:29:d6:02:87:68:a8:a1:5c:79:
         9e:50:0f:93:44:93:c0:ca:33:d2:e9:4b:3e:af:a2:24:51:55:
         8c:ef:1f:04:7d:bb:76:67:24:8e:5f:fd:6e:5d:d7:1c:3b:b7:
         75:47:a2:c3:f2:71:9c:b6:be:f2:74:e6:4b:f3:b7:1c:89:c0:
         d2:27:03:29:78:63:7a:d8:46:92:00:19:06:69:ff:01:76:bc:
         f1:4f:3d:fb:c1:5a:4c:5d:ba:69:f5:84:7f:75:d6:ef:6d:1c:
         fc:9b:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org