Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/023016a439f13a90fb960601dd31871cf21479b4.roa
File:                     023016a439f13a90fb960601dd31871cf21479b4.roa (raw, json)
Hash identifier:          QFrDo5iuy5g61/2M2hy1FgnB2Xdqj4ccVCXFao/yR1w=
Subject key identifier:   E0:6D:F6:23:E9:C4:34:CE:D1:F2:BA:11:83:46:3B:D1:FC:37:1E:5C
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       0E9BFD
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/023016a439f13a90fb960601dd31871cf21479b4.roa
Signing time:             Wed 28 Jul 2021 16:32:31 +0000
ROA not before:           Wed 28 Jul 2021 03:00:00 +0000
ROA not after:            Fri 28 Jul 2023 03:00:00 +0000
asID:                     270033
IP address blocks:        170.210.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 957437 (0xe9bfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Jul 28 03:00:00 2021 GMT
            Not After : Jul 28 03:00:00 2023 GMT
        Subject: CN=023016a439f13a90fb960601dd31871cf21479b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a9:f2:ae:65:3a:b0:e1:c7:36:00:62:62:0d:
                    e1:39:0d:cf:d6:76:7c:03:75:e8:b4:ce:40:dc:3f:
                    05:a1:ce:74:93:52:b6:f5:ed:b8:e6:63:a0:bb:59:
                    dc:14:14:55:52:d0:44:dc:27:ac:1d:65:8f:ff:2e:
                    6a:a7:a9:87:cc:11:8f:50:75:de:1e:4b:2f:34:49:
                    71:53:6b:28:46:4c:57:a4:57:2c:04:f9:69:70:3c:
                    4a:26:fc:d7:58:24:ee:f1:e7:6a:b9:d0:6d:f0:70:
                    f8:df:f6:9b:d9:6c:c3:b4:c3:f4:1f:d7:b3:bb:99:
                    81:14:1c:23:64:f1:9a:0e:ee:b1:2b:4c:38:07:c3:
                    31:25:a7:b0:81:bf:19:db:8b:87:f2:a8:e5:9f:df:
                    ab:c1:2b:5a:26:36:84:e2:38:2c:58:d1:db:eb:0d:
                    92:08:56:b9:b7:0f:48:af:4f:94:b4:d5:5f:5b:18:
                    5c:90:73:58:98:34:c5:09:7d:a7:e5:dd:9c:25:c4:
                    7c:c0:3b:e7:87:f3:15:9d:4e:2d:9e:02:7f:e5:86:
                    7e:5c:f0:a6:68:3b:94:34:1e:3c:ef:f9:05:01:cb:
                    ff:e3:d3:08:0a:44:48:1f:8e:b9:50:13:49:fe:2c:
                    d8:7b:c9:4e:75:ee:bb:17:2b:a5:4d:6a:43:48:7a:
                    5f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6D:F6:23:E9:C4:34:CE:D1:F2:BA:11:83:46:3B:D1:FC:37:1E:5C
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/023016a439f13a90fb960601dd31871cf21479b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:ab:fd:6f:74:b3:e7:11:6c:98:76:46:d9:6e:61:40:e2:a8:
         d7:43:39:62:04:1c:41:d3:6f:6a:f5:c5:eb:57:3a:a2:4b:aa:
         a3:67:b8:f5:3d:b2:e8:bb:03:6e:69:62:06:63:ca:ed:4a:f1:
         8c:3c:95:5c:a6:72:9e:8d:96:61:dd:db:00:18:9b:59:9b:54:
         2a:5c:c7:ce:52:1c:47:a2:eb:f3:2e:85:ee:45:d6:ca:75:3a:
         9c:79:61:8f:3d:8f:d4:9e:49:3d:8e:c2:90:4d:7c:4d:a8:64:
         eb:dc:91:26:21:10:ea:b7:ed:ee:28:da:44:07:5a:9d:ac:0a:
         73:5a:51:c6:16:da:fa:e2:95:6b:64:48:83:87:b3:d8:68:85:
         62:4a:e1:53:86:77:1a:0c:c1:51:53:f3:7a:fb:f2:9f:61:b7:
         a6:75:08:67:97:74:f9:f5:10:71:e0:4a:85:96:cf:ea:a2:ee:
         71:a4:35:ea:c8:bf:b0:86:0d:96:53:65:6c:38:25:8c:b0:6b:
         2b:9a:4e:7c:08:e9:c5:f1:74:60:fb:ba:b8:84:a6:57:94:11:
         9e:3d:51:75:6d:d8:ca:f4:26:5b:9a:6e:31:0d:90:c7:ed:9e:
         04:40:c5:e1:67:45:64:a7:fc:81:db:1f:d3:57:e8:ca:18:00:
         da:e6:c2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org