Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/70fabf640709801c8d1a67c9ec3325e5204c2d87.roa
File:                     70fabf640709801c8d1a67c9ec3325e5204c2d87.roa (raw, json)
Hash identifier:          o9foKIbZgSG79csNzidHKaAA6Jor6t/Vb9vAQaawhtQ=
Subject key identifier:   92:A8:5B:2D:25:B8:27:EB:AE:B8:56:E8:4A:A7:FD:A2:C4:22:CC:B3
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       0B7E7D
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/70fabf640709801c8d1a67c9ec3325e5204c2d87.roa
Signing time:             Wed 24 Mar 2021 14:31:57 +0000
ROA not before:           Wed 24 Mar 2021 14:31:57 +0000
ROA not after:            Tue 24 Mar 2026 14:31:57 +0000
asID:                     28107
IP address blocks:        170.210.160.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753277 (0xb7e7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Mar 24 14:31:57 2021 GMT
            Not After : Mar 24 14:31:57 2026 GMT
        Subject: CN=70fabf640709801c8d1a67c9ec3325e5204c2d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:70:58:79:eb:0d:ef:6b:4d:64:a8:ac:ef:
                    2e:c1:a2:ad:34:49:de:35:b8:65:49:ca:ae:b0:80:
                    77:55:3d:54:b9:82:02:1c:ad:d2:60:93:52:13:14:
                    d5:16:30:bc:c0:36:2f:16:1e:ab:d2:1d:c1:3f:6b:
                    fd:24:9b:24:a1:ef:76:f7:54:7c:7c:8c:48:89:ee:
                    a6:41:2f:ca:88:28:a6:33:74:76:ab:38:4e:fe:40:
                    85:7b:52:69:58:8f:2d:4d:c6:10:8f:a4:5e:10:d3:
                    d9:af:86:44:41:af:3e:59:7a:69:ec:bf:8a:85:fc:
                    76:18:84:08:a2:6f:00:cc:cc:7f:ea:5f:ef:b6:45:
                    24:88:30:c7:1e:b7:e8:a5:68:4d:37:98:10:dd:e4:
                    38:4a:78:d3:ba:13:3d:0c:83:3d:da:6c:bc:9f:c5:
                    7b:9c:05:0c:54:47:d6:3e:b9:eb:d0:76:8a:b3:87:
                    34:33:3e:47:a5:0d:a4:e7:55:c9:21:37:31:99:df:
                    22:95:ad:4e:3b:a0:00:07:ee:ef:7f:e6:ff:78:a0:
                    cd:38:7e:55:3a:a4:1e:a4:d2:f7:4c:18:44:f8:45:
                    d8:79:37:2d:5c:d6:21:75:de:7b:4f:e2:b3:ce:be:
                    ce:38:de:bf:49:5f:ca:26:e6:45:fd:4a:56:91:fc:
                    4d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A8:5B:2D:25:B8:27:EB:AE:B8:56:E8:4A:A7:FD:A2:C4:22:CC:B3
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/70fabf640709801c8d1a67c9ec3325e5204c2d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a6:51:25:c8:ab:6a:ed:35:d8:a0:1f:06:57:e0:00:d8:67:42:
         96:70:32:04:7a:45:18:ea:d5:cf:4a:d3:96:22:fa:ac:f0:b3:
         e0:34:65:ea:1d:6d:27:93:e1:83:12:12:be:ff:1f:c1:57:34:
         dd:2c:3e:40:1c:eb:11:c2:99:8a:e6:1b:db:84:e3:ed:78:63:
         e9:d4:b9:55:6e:4b:63:be:b1:42:d6:d5:b7:f6:ea:f5:b9:41:
         b8:4d:32:e1:87:7a:bf:46:06:46:b3:77:22:74:c4:cc:41:64:
         c7:9d:66:79:fa:1d:dc:ef:13:aa:00:2a:35:cd:cd:aa:0c:d4:
         d6:d1:9a:61:a8:95:75:71:45:b6:73:6f:d5:39:15:06:f2:f1:
         d8:41:a4:c6:d0:3b:06:89:71:d0:97:11:05:b3:56:ee:74:f1:
         67:5c:0f:7c:d9:af:da:5d:df:23:14:e4:72:0a:de:96:a6:02:
         9a:d0:9a:35:df:75:19:dc:f9:d4:4b:fd:fb:54:1d:d3:4b:f8:
         e8:31:96:56:18:c2:70:e1:b4:b3:cf:f8:c0:2a:45:ac:c1:d4:
         2a:17:f3:96:66:cc:08:91:a0:83:3e:fa:cf:28:11:bd:e4:4f:
         83:d3:5d:df:1e:30:2e:ba:ea:c4:d6:d0:e7:e8:b5:00:97:82:
         04:16:0d:a3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC359MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl
YzkzMzQ3ODlkNGZiOTdiMGMwYWE0ODM1NjM5MDZhNWQ2OWI0YzIwHhcNMjEwMzI0
MTQzMTU3WhcNMjYwMzI0MTQzMTU3WjAzMTEwLwYDVQQDEyg3MGZhYmY2NDA3MDk4
MDFjOGQxYTY3YzllYzMzMjVlNTIwNGMyZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjPpwWHnrDe9rTWSorO8uwaKtNEneNbhlScqusIB3VT1UuYIC
HK3SYJNSExTVFjC8wDYvFh6r0h3BP2v9JJskoe9291R8fIxIie6mQS/KiCimM3R2
qzhO/kCFe1JpWI8tTcYQj6ReENPZr4ZEQa8+WXpp7L+Khfx2GIQIom8AzMx/6l/v
tkUkiDDHHrfopWhNN5gQ3eQ4SnjTuhM9DIM92my8n8V7nAUMVEfWPrnr0HaKs4c0
Mz5HpQ2k51XJITcxmd8ila1OO6AAB+7vf+b/eKDNOH5VOqQepNL3TBhE+EXYeTct
XNYhdd57T+Kzzr7OON6/SV/KJuZF/UpWkfxN2wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJKoWy0luCfrrrhW6Eqn/aLEIsyzMB8GA1UdIwQYMBaAFAiRqsSRgrsOBnj6
2ng1jFjfNFzLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWVjOTMz
NDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjhkNWJlNGQtZTc1MS00YzcwLTk2NmItY2ZmNWVk
N2JmNWJlLzcwZmFiZjY0MDcwOTgwMWM4ZDFhNjdjOWVjMzMyNWU1MjA0YzJkODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOGQ1YmU0ZC1lNzUxLTRjNzAtOTY2Yi1jZmY1
ZWQ3YmY1YmUvZWVjOTMzNDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA6rSoDANBgkqhkiG9w0BAQsFAAOCAQEAplElyKtq7TXYoB8G
V+AA2GdClnAyBHpFGOrVz0rTliL6rPCz4DRl6h1tJ5PhgxISvv8fwVc03Sw+QBzr
EcKZiuYb24Tj7Xhj6dS5VW5LY76xQtbVt/bq9blBuE0y4Yd6v0YGRrN3InTEzEFk
x51mefod3O8TqgAqNc3NqgzU1tGaYaiVdXFFtnNv1TkVBvLx2EGkxtA7Bolx0JcR
BbNW7nTxZ1wPfNmv2l3fIxTkcgrelqYCmtCaNd91Gdz51Ev9+1Qd00v46DGWVhjC
cOG0s8/4wCpFrMHUKhfzlmbMCJGggz76zygRveRPg9Nd3x4wLrrqxNbQ5+i1AJeC
BBYNow==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org