Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/a9fa35dc1799cb03c98dfff67936b8c2610c7ae1.roa
File:                     a9fa35dc1799cb03c98dfff67936b8c2610c7ae1.roa (raw, json)
Hash identifier:          FERIFgsUhifcJv4LQsaEL7UDH/UOTTSGrT45lxy3rTQ=
Subject key identifier:   2B:65:75:01:10:4B:0E:E3:8F:43:61:34:14:0F:8A:2E:6E:FD:D8:26
Certificate issuer:       /CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
Certificate serial:       03C8
Authority key identifier: F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/a9fa35dc1799cb03c98dfff67936b8c2610c7ae1.roa
Signing time:             Wed 26 May 2021 17:12:07 +0000
ROA not before:           Wed 26 May 2021 03:00:00 +0000
ROA not after:            Fri 26 May 2023 03:00:00 +0000
asID:                     204300
IP address blocks:        45.170.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 968 (0x3c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
        Validity
            Not Before: May 26 03:00:00 2021 GMT
            Not After : May 26 03:00:00 2023 GMT
        Subject: CN=a9fa35dc1799cb03c98dfff67936b8c2610c7ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:c2:68:67:16:bf:4f:99:31:59:57:40:49:
                    4c:16:63:fa:a2:be:1b:2b:a6:d5:de:39:f2:3f:43:
                    b0:c6:fb:58:fa:97:4d:b9:bb:18:3f:cf:92:76:11:
                    74:e2:9b:85:fd:68:49:ff:a0:15:b3:cb:3c:79:9e:
                    7c:23:60:62:d7:30:ed:87:4f:61:90:3d:7f:a5:5d:
                    b9:ec:6a:68:48:85:f2:a1:81:13:42:a1:37:5e:a5:
                    c1:ac:4b:22:0a:f3:9f:59:b1:5b:09:69:70:ad:2c:
                    61:ff:36:f6:05:93:ff:f2:3c:03:3c:44:4b:ca:15:
                    52:ba:57:79:ae:bd:54:79:b4:27:3d:4f:81:e4:f4:
                    80:20:4e:5f:ae:c5:37:86:44:19:b9:35:ff:80:71:
                    0c:1f:99:72:c4:7d:6c:20:6f:e4:3f:1a:89:58:7b:
                    3f:f8:fb:99:33:43:3d:dc:db:a2:c2:cf:be:83:9a:
                    32:7c:ca:f2:94:e4:9e:30:8c:19:c6:23:80:23:60:
                    96:eb:09:2f:33:ae:74:ec:34:c3:37:63:ea:b7:59:
                    ce:dd:07:c9:c5:19:01:8f:4e:95:a8:5f:10:7a:e0:
                    eb:71:a8:15:d6:68:b6:54:cf:15:42:4e:a3:8e:52:
                    70:02:c3:93:6c:a3:47:47:a8:f4:15:1e:9c:7a:a6:
                    cf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:65:75:01:10:4B:0E:E3:8F:43:61:34:14:0F:8A:2E:6E:FD:D8:26
            X509v3 Authority Key Identifier:
                keyid:F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/a9fa35dc1799cb03c98dfff67936b8c2610c7ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:46:5d:41:92:0b:f6:61:b5:92:5e:f1:30:d1:2b:e0:c5:b5:
         56:7f:1d:03:7d:16:ec:e0:1e:e8:0c:40:2c:07:c3:69:46:24:
         57:b3:e7:b9:d7:9f:e4:13:62:be:a1:29:6a:f9:4e:54:bc:86:
         de:f9:ce:6f:82:48:c6:1b:1b:a7:a6:38:ee:08:d3:85:2a:50:
         f9:09:f2:86:cb:b5:6a:76:16:e0:3c:f2:7c:06:51:df:99:8e:
         70:05:ca:5f:e7:6c:f4:42:41:4a:3f:20:c4:b6:27:e1:51:12:
         73:55:a4:83:24:f5:c1:17:8b:57:bc:f9:06:47:7d:20:97:ef:
         4c:c6:a9:12:a9:d1:15:b9:06:7b:df:2c:62:3f:29:9e:80:b4:
         f1:c0:ab:e9:fa:08:fd:35:7b:fa:b8:e5:d2:1e:dd:ce:5c:15:
         60:97:4b:bc:20:fb:47:e3:6c:0f:30:4f:94:a8:53:1a:ef:0a:
         62:f3:63:40:45:e1:28:33:56:73:76:40:d4:d1:cd:7e:f1:72:
         9e:30:e4:87:d8:ed:77:f2:64:03:01:38:aa:55:a5:b1:36:6e:
         88:56:71:0a:d0:5a:fc:e5:5a:98:a8:b5:e6:fb:51:1a:5e:50:
         98:23:de:17:6e:01:01:bc:47:07:0e:09:f4:20:26:87:6e:24:
         6c:ea:04:49
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYjVh
Mzg3ZjRhOWFjZjgzODAwOWRkNzUxZDg0YzYwYjdlY2I1NmVjODAeFw0yMTA1MjYw
MzAwMDBaFw0yMzA1MjYwMzAwMDBaMDMxMTAvBgNVBAMTKGE5ZmEzNWRjMTc5OWNi
MDNjOThkZmZmNjc5MzZiOGMyNjEwYzdhZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdVcJoZxa/T5kxWVdASUwWY/qivhsrptXeOfI/Q7DG+1j6l025
uxg/z5J2EXTim4X9aEn/oBWzyzx5nnwjYGLXMO2HT2GQPX+lXbnsamhIhfKhgRNC
oTdepcGsSyIK859ZsVsJaXCtLGH/NvYFk//yPAM8REvKFVK6V3muvVR5tCc9T4Hk
9IAgTl+uxTeGRBm5Nf+AcQwfmXLEfWwgb+Q/GolYez/4+5kzQz3c26LCz76DmjJ8
yvKU5J4wjBnGI4AjYJbrCS8zrnTsNMM3Y+q3Wc7dB8nFGQGPTpWoXxB64OtxqBXW
aLZUzxVCTqOOUnACw5Nso0dHqPQVHpx6ps/rAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUK2V1ARBLDuOPQ2E0FA+KLm792CYwHwYDVR0jBBgwFoAU+fXIoS/iB931E8qK
1fhOZkrqi3IwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9iNWEzODdm
NGE5YWNmODM4MDA5ZGQ3NTFkODRjNjBiN2VjYjU2ZWM4LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mYjMwOWQxMy0zODhjLTQ2ODQtOGY5Yi1iMzRkZjRh
ZTg2MWUvYTlmYTM1ZGMxNzk5Y2IwM2M5OGRmZmY2NzkzNmI4YzI2MTBjN2FlMS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2ZiMzA5ZDEzLTM4OGMtNDY4NC04ZjliLWIzNGRm
NGFlODYxZS9iNWEzODdmNGE5YWNmODM4MDA5ZGQ3NTFkODRjNjBiN2VjYjU2ZWM4
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQALaoMMA0GCSqGSIb3DQEBCwUAA4IBAQAtRl1Bkgv2YbWSXvEw
0SvgxbVWfx0DfRbs4B7oDEAsB8NpRiRXs+e515/kE2K+oSlq+U5UvIbe+c5vgkjG
GxunpjjuCNOFKlD5CfKGy7VqdhbgPPJ8BlHfmY5wBcpf52z0QkFKPyDEtifhURJz
VaSDJPXBF4tXvPkGR30gl+9MxqkSqdEVuQZ73yxiPymegLTxwKvp+gj9NXv6uOXS
Ht3OXBVgl0u8IPtH42wPME+UqFMa7wpi82NAReEoM1ZzdkDU0c1+8XKeMOSH2O13
8mQDATiqVaWxNm6IVnEK0Fr85VqYqLXm+1EaXlCYI94XbgEBvEcHDgn0ICaHbiRs
6gRJ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-fra.rpki-client.org