Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/c8848b6573709473b705d29472f0c4965c1b15d1.roa
File:                     c8848b6573709473b705d29472f0c4965c1b15d1.roa (raw, json)
Hash identifier:          dUSxzW/w/YOwBS+UphA0UDUA9D/n/2PmRMq9jhSYwhU=
Subject key identifier:   56:9D:AE:FA:DF:EF:34:29:A4:58:68:B7:45:80:A9:6E:13:6E:39:77
Certificate issuer:       /CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
Certificate serial:       AC3F
Authority key identifier: 6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/c8848b6573709473b705d29472f0c4965c1b15d1.roa
Signing time:             Tue 07 Mar 2023 15:53:50 +0000
ROA not before:           Thu 09 Feb 2023 23:11:38 +0000
ROA not after:            Sat 15 Feb 2025 23:11:38 +0000
asID:                     262589
IP address blocks:        170.0.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44095 (0xac3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
        Validity
            Not Before: Feb  9 23:11:38 2023 GMT
            Not After : Feb 15 23:11:38 2025 GMT
        Subject: CN=c8848b6573709473b705d29472f0c4965c1b15d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:18:d3:de:38:37:34:dd:56:f8:c3:36:93:
                    f3:5d:3c:f0:3b:fd:88:3d:c5:b6:7a:84:9b:60:bc:
                    ca:ae:44:32:b8:73:d4:28:71:7f:16:c7:06:1d:67:
                    11:2e:68:d6:2e:c3:67:50:67:f0:b8:f8:60:3d:35:
                    31:66:8b:f1:42:ce:f8:e8:41:d4:c6:41:1d:47:e1:
                    f2:23:2b:4d:11:e9:6f:75:4d:af:c5:cb:50:58:74:
                    e0:fe:15:ac:9d:85:78:fb:08:58:2c:81:c5:38:21:
                    34:12:82:f2:2f:cc:50:90:84:7f:7d:1b:33:cc:c6:
                    a5:53:04:3f:2d:52:f1:78:23:21:ee:4b:32:d0:b6:
                    f6:45:38:94:34:06:76:72:07:5e:ca:c1:d6:b9:c3:
                    89:cf:d9:a9:0f:fb:77:94:cf:1d:4e:ba:5c:54:a3:
                    e9:3d:49:14:c1:2c:c1:59:25:c1:c2:4d:39:96:b9:
                    f6:ab:8f:46:44:81:28:e5:43:ec:90:77:20:19:13:
                    e9:6e:eb:53:25:fe:83:d7:fa:fd:ae:dd:5e:ff:15:
                    f2:b8:a9:f3:99:1d:bc:47:37:6d:a1:bf:b8:32:4e:
                    ce:35:ef:7f:9f:2b:05:19:b7:b8:59:b2:52:44:3f:
                    88:2a:47:27:6a:db:7c:c9:ae:13:68:db:41:52:b5:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9D:AE:FA:DF:EF:34:29:A4:58:68:B7:45:80:A9:6E:13:6E:39:77
            X509v3 Authority Key Identifier:
                keyid:6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/c8848b6573709473b705d29472f0c4965c1b15d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:a5:e5:79:d3:d6:6c:d6:0c:f8:c1:b6:e1:f9:4d:5c:4f:10:
         f8:3d:66:f6:b2:fb:12:7f:d4:6e:1e:44:ac:bf:bf:8e:22:c6:
         8a:bd:a5:ec:58:b8:09:b8:a6:14:6b:55:8a:e1:2c:f2:4c:fb:
         af:14:8c:cb:c8:14:46:f2:b3:99:0b:bb:a4:ce:ac:15:f9:0a:
         c7:ea:32:e1:d3:5e:a6:4a:5e:b9:c7:d5:15:fd:37:46:9f:39:
         80:a5:04:d5:2d:92:6a:45:13:ff:da:de:94:2e:e0:fd:22:51:
         e4:e2:a0:8b:58:ca:f6:99:e4:44:cb:e8:d6:9a:c0:08:40:89:
         5a:25:e4:fa:33:a2:ac:e5:80:dc:cb:a3:37:bd:e8:40:01:59:
         c0:e6:f3:04:75:cb:a2:41:40:10:37:02:a1:7d:62:2c:c0:43:
         d2:77:2e:df:de:5c:cf:7a:11:6a:bf:f8:81:94:6d:d2:53:b9:
         cd:7c:02:cb:13:ff:6e:47:01:89:4f:ab:00:4a:fe:5b:25:0c:
         89:0a:86:00:c5:b5:70:7e:46:ca:a0:22:a2:0b:bd:c4:f8:e5:
         cf:be:34:ff:9e:11:42:cf:0f:c5:1b:b6:92:81:f7:92:dc:00:
         05:c2:81:c6:6d:f9:dc:24:7b:d2:cb:36:5f:62:3d:af:3a:a2:
         47:ff:28:df
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAKw/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
YzgyOGZiZjdjNDIxMjYxOWIyNGE3ZDEyMTQyZjE1ZjBmNWZmZWEwHhcNMjMwMjA5
MjMxMTM4WhcNMjUwMjE1MjMxMTM4WjAzMTEwLwYDVQQDEyhjODg0OGI2NTczNzA5
NDczYjcwNWQyOTQ3MmYwYzQ5NjVjMWIxNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjTkY0944NzTdVvjDNpPzXTzwO/2IPcW2eoSbYLzKrkQyuHPU
KHF/FscGHWcRLmjWLsNnUGfwuPhgPTUxZovxQs746EHUxkEdR+HyIytNEelvdU2v
xctQWHTg/hWsnYV4+whYLIHFOCE0EoLyL8xQkIR/fRszzMalUwQ/LVLxeCMh7ksy
0Lb2RTiUNAZ2cgdeysHWucOJz9mpD/t3lM8dTrpcVKPpPUkUwSzBWSXBwk05lrn2
q49GRIEo5UPskHcgGRPpbutTJf6D1/r9rt1e/xXyuKnzmR28Rzdtob+4Mk7ONe9/
nysFGbe4WbJSRD+IKkcnatt8ya4TaNtBUrUFSQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFadrvrf7zQppFhot0WAqW4Tbjl3MB8GA1UdIwQYMBaAFGoVgDxLFkSabMGx
LijoLI/op2/2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODhjODI4
ZmJmN2M0MjEyNjE5YjI0YTdkMTIxNDJmMTVmMGY1ZmZlYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmIxZGY5YWEtYTliYy00ZjNjLThlNTItNzExNDZh
NjE5NmY5L2M4ODQ4YjY1NzM3MDk0NzNiNzA1ZDI5NDcyZjBjNDk2NWMxYjE1ZDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYjFkZjlhYS1hOWJjLTRmM2MtOGU1Mi03MTE0
NmE2MTk2ZjkvODhjODI4ZmJmN2M0MjEyNjE5YjI0YTdkMTIxNDJmMTVmMGY1ZmZl
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKoACDANBgkqhkiG9w0BAQsFAAOCAQEAdKXledPWbNYM+MG2
4flNXE8Q+D1m9rL7En/Ubh5ErL+/jiLGir2l7Fi4CbimFGtViuEs8kz7rxSMy8gU
RvKzmQu7pM6sFfkKx+oy4dNepkpeucfVFf03Rp85gKUE1S2SakUT/9relC7g/SJR
5OKgi1jK9pnkRMvo1prACECJWiXk+jOirOWA3MujN73oQAFZwObzBHXLokFAEDcC
oX1iLMBD0ncu395cz3oRar/4gZRt0lO5zXwCyxP/bkcBiU+rAEr+WyUMiQqGAMW1
cH5GyqAiogu9xPjlz740/54RQs8PxRu2koH3ktwABcKBxm353CR70ss2X2I9rzqi
R/8o3w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:59 2023 by rpki-client on console-ams.rpki-client.org