Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/15f0e4c5eaa352d8c0cee0d85a4b7f5df036fc4f.roa
File:                     15f0e4c5eaa352d8c0cee0d85a4b7f5df036fc4f.roa (raw, json)
Hash identifier:          Lqn/efrh/e0Z/14SNVLoQC5z1JRc6hXEP53WzBMsJ2c=
Subject key identifier:   53:6F:C3:19:2E:5A:F7:25:95:84:65:4A:C0:A4:BB:D1:97:A4:EF:4F
Certificate issuer:       /CN=d3e258591b81b726517d993ac9db01b629da36e1
Certificate serial:       08190D
Authority key identifier: DC:D2:6F:F6:04:03:AC:E4:61:17:DE:3E:E9:9E:E7:9C:1F:53:DB:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3e258591b81b726517d993ac9db01b629da36e1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/15f0e4c5eaa352d8c0cee0d85a4b7f5df036fc4f.roa
Signing time:             Mon 31 Oct 2022 16:02:54 +0000
ROA not before:           Thu 09 Dec 2021 03:00:00 +0000
ROA not after:            Sun 10 Dec 2023 03:00:00 +0000
asID:                     265707
IP address blocks:        192.140.60.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530701 (0x8190d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e258591b81b726517d993ac9db01b629da36e1
        Validity
            Not Before: Dec  9 03:00:00 2021 GMT
            Not After : Dec 10 03:00:00 2023 GMT
        Subject: CN=15f0e4c5eaa352d8c0cee0d85a4b7f5df036fc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:54:5b:fa:e6:24:40:e2:ba:77:65:dc:81:
                    92:21:dc:4a:7b:e3:12:bd:df:39:a8:60:06:b4:4e:
                    12:e9:5e:8c:19:45:31:8a:cd:6a:e0:08:2c:a8:28:
                    7b:75:72:33:5a:b7:ba:5a:08:d5:cf:58:b0:2a:6d:
                    98:da:78:01:fd:fc:58:08:f6:ac:0b:dc:44:00:b6:
                    a1:1f:d3:cf:05:d0:8b:19:6b:5a:d2:23:40:8e:c7:
                    cb:84:c7:b8:2c:f4:8f:e0:66:d9:7b:30:ea:60:c1:
                    f7:4c:44:4a:31:be:19:ac:a6:f1:04:b3:f2:a5:2d:
                    ea:c9:01:96:30:9a:2c:e2:d3:bb:bd:5b:90:eb:9d:
                    80:0d:08:7c:31:c0:2b:7f:16:6d:ed:7d:a9:6b:d8:
                    be:78:44:1a:55:00:38:23:f4:c0:c3:77:ad:ad:ff:
                    13:96:12:08:74:0f:01:9e:86:34:a4:01:0c:fa:56:
                    c0:d7:55:37:e6:3f:ff:c4:86:9f:b2:0a:ea:1e:0a:
                    89:33:8e:a8:d1:74:8f:7d:38:55:b9:bc:9e:4a:6c:
                    5d:ae:a7:c3:df:c2:8c:de:91:d5:27:7f:34:39:4a:
                    7d:aa:60:fb:37:ea:32:28:0f:f5:5d:f8:d2:8d:9e:
                    70:e4:93:c0:77:b3:65:75:42:1f:e4:f4:a6:14:f3:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6F:C3:19:2E:5A:F7:25:95:84:65:4A:C0:A4:BB:D1:97:A4:EF:4F
            X509v3 Authority Key Identifier:
                keyid:DC:D2:6F:F6:04:03:AC:E4:61:17:DE:3E:E9:9E:E7:9C:1F:53:DB:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3e258591b81b726517d993ac9db01b629da36e1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/15f0e4c5eaa352d8c0cee0d85a4b7f5df036fc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/d3e258591b81b726517d993ac9db01b629da36e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:fc:5d:de:24:8f:2b:1e:cf:ed:3b:2c:c6:2f:b1:61:ab:90:
         bd:e0:55:3c:e4:55:a2:ba:3d:0a:c7:1b:fd:4b:22:9a:0f:0c:
         a1:67:43:9f:07:4e:57:29:db:fa:bf:06:04:84:fe:17:d4:4a:
         5d:83:2f:5c:a5:46:2b:8e:cf:2b:0c:eb:38:3d:5d:96:61:ee:
         8f:8f:97:da:65:75:fd:4d:a7:61:ca:1a:bc:61:07:a0:02:8c:
         02:23:8f:36:ab:92:6c:d4:b0:cc:f2:fe:42:1f:32:a6:2b:24:
         28:c0:22:77:0c:19:17:bb:ad:31:bc:d2:b0:ca:03:6a:c3:5e:
         39:b8:9f:30:a4:83:56:22:49:d6:ed:6b:90:7a:15:79:c3:9f:
         9b:d9:a0:28:5c:ba:ae:68:fd:ed:41:a7:a2:13:c3:ee:80:45:
         72:28:08:de:45:e0:49:d7:e5:73:5d:de:57:52:a1:74:e6:0e:
         ac:ca:f7:72:55:2f:91:87:bf:53:ad:c9:e5:31:42:8b:ab:62:
         b6:7a:e3:35:1d:08:82:72:4a:f1:72:f8:93:10:a8:4c:f4:48:
         24:a9:f6:d9:cc:82:c8:bc:10:19:63:f9:82:54:96:26:69:66:
         06:11:85:a4:1c:56:09:cd:61:dc:cb:42:60:a3:ca:96:b7:e6:
         59:09:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 9 08:23:39 2023 by rpki-client on console-ams.rpki-client.org