Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0755daa-e647-4841-be62-7e86a0945092/f2a9154a41348df0f6080491d4c861d7926f03a6.roa
File:                     f2a9154a41348df0f6080491d4c861d7926f03a6.roa (raw, json)
Hash identifier:          OIk+RZfRdZrQWtlPjwTwbYwVXJlLUpGjW/0vt/v389g=
Subject key identifier:   CB:2D:C7:94:94:B2:27:6D:10:9C:2B:BC:E1:86:E8:26:88:A0:5A:AE
Certificate issuer:       /CN=c9e9bae1f2ca5a323f613a8451a316961774ef07
Certificate serial:       06BDB3
Authority key identifier: CE:4C:85:53:B8:E2:6C:2D:97:03:B7:F7:BD:BB:84:FA:36:C6:BA:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9e9bae1f2ca5a323f613a8451a316961774ef07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0755daa-e647-4841-be62-7e86a0945092/f2a9154a41348df0f6080491d4c861d7926f03a6.roa
Signing time:             Wed 24 Mar 2021 14:32:27 +0000
ROA not before:           Wed 24 Mar 2021 14:32:27 +0000
ROA not after:            Tue 24 Mar 2026 14:32:27 +0000
asID:                     266772
IP address blocks:        45.234.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441779 (0x6bdb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e9bae1f2ca5a323f613a8451a316961774ef07
        Validity
            Not Before: Mar 24 14:32:27 2021 GMT
            Not After : Mar 24 14:32:27 2026 GMT
        Subject: CN=f2a9154a41348df0f6080491d4c861d7926f03a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:98:6e:f3:70:c9:1b:bf:ea:c6:72:b6:92:
                    14:a9:b1:cc:5d:7e:54:0a:32:a2:30:12:e4:f1:dc:
                    0e:00:d5:13:92:37:ba:7c:59:cb:32:21:14:21:1b:
                    1a:f2:7c:7d:96:87:a9:c5:cb:e4:a7:5f:30:3a:ab:
                    19:1b:af:09:ba:85:a7:03:f4:8f:45:3f:93:7f:22:
                    95:b5:f9:04:c4:ed:90:13:28:3c:26:1e:51:4b:bc:
                    81:fb:c7:e0:6c:23:a8:3f:93:2e:09:87:29:cd:49:
                    7f:6f:6f:4f:25:e2:6b:68:5d:78:3f:5b:4e:85:01:
                    6d:b1:ab:6c:b2:d8:d2:72:7f:71:11:50:c5:8a:23:
                    b5:d2:41:90:3d:7d:c6:c4:b7:91:df:15:c8:b5:01:
                    37:4a:f2:8f:27:d7:78:3f:0c:15:85:ab:be:6a:98:
                    92:9a:6e:e2:9e:70:86:e4:e8:45:4c:42:f1:aa:79:
                    2d:16:20:de:30:05:6c:f1:7e:0c:49:6a:78:9e:45:
                    85:40:ca:c7:6e:31:79:ab:c0:1c:43:a0:f4:8e:8a:
                    35:10:c9:57:4f:88:10:d4:9f:6d:b0:ca:9c:9e:6b:
                    2d:17:16:34:6a:ca:d0:03:c3:02:a4:81:51:8e:85:
                    5e:37:0b:32:0b:f1:a4:55:ca:79:c4:d5:ce:73:e2:
                    ad:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2D:C7:94:94:B2:27:6D:10:9C:2B:BC:E1:86:E8:26:88:A0:5A:AE
            X509v3 Authority Key Identifier:
                keyid:CE:4C:85:53:B8:E2:6C:2D:97:03:B7:F7:BD:BB:84:FA:36:C6:BA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9e9bae1f2ca5a323f613a8451a316961774ef07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0755daa-e647-4841-be62-7e86a0945092/f2a9154a41348df0f6080491d4c861d7926f03a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0755daa-e647-4841-be62-7e86a0945092/c9e9bae1f2ca5a323f613a8451a316961774ef07.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:2a:e7:36:a5:96:78:c2:b2:5b:f0:6c:08:1b:c1:13:f7:4c:
         4d:f4:7a:dd:fb:ac:5c:3e:ac:c5:17:8d:e3:9a:13:91:d7:33:
         dd:e9:93:f4:92:9a:c9:c4:4d:a3:e0:35:59:41:9d:8e:8e:36:
         bb:33:25:22:6c:b9:2d:f6:bd:89:08:a5:c1:35:88:ba:99:49:
         58:41:98:52:e8:97:c0:9f:6c:8c:62:cc:ad:b1:53:b6:86:81:
         3b:92:3c:54:9b:b7:cc:f9:f5:95:54:46:d7:61:4a:88:25:17:
         76:f4:3a:0b:a9:49:3e:15:16:57:77:35:52:e9:4b:14:24:0d:
         34:fe:66:bf:ea:ce:98:29:6f:0d:53:14:e1:7e:5e:24:6d:e4:
         20:19:28:8a:86:65:09:b8:98:56:fd:ed:ea:46:8c:b2:b4:14:
         5c:bc:7d:3d:e0:3f:e9:ef:44:c6:65:cb:ba:7b:21:72:96:4d:
         36:4c:f2:6d:c2:e3:66:91:65:6e:8a:2c:5d:b3:46:dd:ed:67:
         f1:b7:ac:53:08:2c:c0:a9:c5:80:d9:54:eb:dd:11:21:04:5e:
         b1:01:c3:09:20:e1:2b:78:4e:db:99:fb:48:88:52:6a:01:ab:
         63:fd:5d:e8:43:6d:4a:a4:21:58:94:fa:04:e7:24:35:44:90:
         ea:62:20:7e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBr2zMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
ZTliYWUxZjJjYTVhMzIzZjYxM2E4NDUxYTMxNjk2MTc3NGVmMDcwHhcNMjEwMzI0
MTQzMjI3WhcNMjYwMzI0MTQzMjI3WjAzMTEwLwYDVQQDEyhmMmE5MTU0YTQxMzQ4
ZGYwZjYwODA0OTFkNGM4NjFkNzkyNmYwM2E2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkjeYbvNwyRu/6sZytpIUqbHMXX5UCjKiMBLk8dwOANUTkje6
fFnLMiEUIRsa8nx9loepxcvkp18wOqsZG68JuoWnA/SPRT+TfyKVtfkExO2QEyg8
Jh5RS7yB+8fgbCOoP5MuCYcpzUl/b29PJeJraF14P1tOhQFtsatsstjScn9xEVDF
iiO10kGQPX3GxLeR3xXItQE3SvKPJ9d4PwwVhau+apiSmm7innCG5OhFTELxqnkt
FiDeMAVs8X4MSWp4nkWFQMrHbjF5q8AcQ6D0joo1EMlXT4gQ1J9tsMqcnmstFxY0
asrQA8MCpIFRjoVeNwsyC/GkVcp5xNXOc+KtvwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMstx5SUsidtEJwrvOGG6CaIoFquMB8GA1UdIwQYMBaAFM5MhVO44mwtlwO3
9727hPo2xrqjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzllOWJh
ZTFmMmNhNWEzMjNmNjEzYTg0NTFhMzE2OTYxNzc0ZWYwNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjA3NTVkYWEtZTY0Ny00ODQxLWJlNjItN2U4NmEw
OTQ1MDkyL2YyYTkxNTRhNDEzNDhkZjBmNjA4MDQ5MWQ0Yzg2MWQ3OTI2ZjAzYTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMDc1NWRhYS1lNjQ3LTQ4NDEtYmU2Mi03ZTg2
YTA5NDUwOTIvYzllOWJhZTFmMmNhNWEzMjNmNjEzYTg0NTFhMzE2OTYxNzc0ZWYw
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3qdDANBgkqhkiG9w0BAQsFAAOCAQEAlSrnNqWWeMKyW/Bs
CBvBE/dMTfR63fusXD6sxReN45oTkdcz3emT9JKaycRNo+A1WUGdjo42uzMlImy5
Lfa9iQilwTWIuplJWEGYUuiXwJ9sjGLMrbFTtoaBO5I8VJu3zPn1lVRG12FKiCUX
dvQ6C6lJPhUWV3c1UulLFCQNNP5mv+rOmClvDVMU4X5eJG3kIBkoioZlCbiYVv3t
6kaMsrQUXLx9PeA/6e9ExmXLunshcpZNNkzybcLjZpFlboosXbNG3e1n8besUwgs
wKnFgNlU690RIQResQHDCSDhK3hO25n7SIhSagGrY/1d6ENtSqQhWJT6BOckNUSQ
6mIgfg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org