Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d847a777bafa93c3ad67a6c3fbe26414946d7452.roa
File:                     d847a777bafa93c3ad67a6c3fbe26414946d7452.roa (raw, json)
Hash identifier:          b32zq+MTnCV83dNMQM0/KwJt+8YZdg/iH7n5F/fYmQA=
Subject key identifier:   30:0A:F1:C9:B6:9C:CF:AC:25:7B:72:82:73:61:55:A7:27:E7:D2:B3
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       221162
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d847a777bafa93c3ad67a6c3fbe26414946d7452.roa
Signing time:             Tue 04 Jul 2023 08:30:17 +0000
ROA not before:           Mon 03 Jul 2023 08:30:17 +0000
ROA not after:            Wed 02 Jul 2025 08:30:17 +0000
asID:                     27836
IP address blocks:        191.117.64.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2232674 (0x221162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Jul  3 08:30:17 2023 GMT
            Not After : Jul  2 08:30:17 2025 GMT
        Subject: CN=d847a777bafa93c3ad67a6c3fbe26414946d7452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:00:d7:bd:72:e0:6e:f8:58:ff:a3:d0:57:48:
                    5c:de:6f:77:c2:a8:97:cf:09:b4:22:12:ba:33:14:
                    99:ad:c6:7c:17:37:07:e1:ef:4b:69:f3:ee:08:d8:
                    ac:87:b0:89:a6:ff:e3:27:b8:b0:83:aa:47:ee:aa:
                    99:8c:3a:b7:72:5f:2f:cc:eb:be:b8:a3:46:92:77:
                    94:51:87:44:34:da:19:58:94:27:a8:9b:b9:83:22:
                    36:1f:8d:46:23:b7:7a:7d:12:f1:6d:79:cb:2d:72:
                    90:3f:34:26:dd:9d:8a:03:60:94:10:51:61:76:d1:
                    35:44:ae:cd:38:8a:aa:22:91:2b:60:eb:79:64:63:
                    2e:b9:60:3a:02:91:53:33:1b:a6:46:72:46:9f:fe:
                    be:ca:45:12:87:f7:54:4b:98:2e:f3:e0:25:88:f2:
                    4d:8c:fb:0a:8a:e7:41:88:b1:08:59:eb:c8:90:79:
                    3b:38:d2:77:59:51:d6:0b:1b:6b:42:14:8a:85:63:
                    0b:cb:2f:a2:01:46:4b:01:fa:00:dd:f5:c8:31:e1:
                    55:c5:24:24:98:dc:af:04:0c:14:55:55:66:a5:38:
                    8a:64:2b:a9:d6:1b:3c:2a:af:e6:5e:f4:08:d1:9c:
                    90:e5:cc:aa:58:b4:92:3e:b7:c0:90:c7:70:82:f0:
                    2a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0A:F1:C9:B6:9C:CF:AC:25:7B:72:82:73:61:55:A7:27:E7:D2:B3
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d847a777bafa93c3ad67a6c3fbe26414946d7452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.117.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         cb:f1:63:ae:df:5a:20:4e:d8:89:b8:1a:d5:4d:ce:9d:1a:e2:
         84:e7:bb:5e:dd:58:34:14:e6:77:66:88:87:b8:04:92:34:be:
         1e:ea:80:d3:8c:83:ac:15:eb:7c:ca:6b:b8:e7:5d:a0:b5:42:
         30:40:75:9d:9c:af:66:41:f3:7d:68:8c:3c:8a:84:73:3f:d5:
         e3:12:31:c1:b7:e2:1f:83:fc:2d:1c:ad:6f:78:5e:33:8e:3c:
         ae:39:38:61:56:4a:16:d4:0a:6b:e0:70:a2:2e:97:88:3f:35:
         28:1e:90:91:2b:29:3b:dd:fd:aa:c8:e4:e1:f2:06:94:36:43:
         e9:14:62:e2:02:ec:f1:b4:99:2b:2d:df:54:ec:6b:08:b6:a0:
         58:94:10:3d:f8:99:f0:3c:d8:db:9d:5f:56:5c:5e:d3:95:0f:
         10:4d:47:fe:8d:75:75:bc:18:e6:44:55:f0:1f:77:e3:6c:58:
         2b:89:96:49:ca:7d:0c:85:2c:c8:1b:ce:df:8e:cf:fb:38:30:
         98:66:22:18:32:bf:62:51:50:8c:30:ed:6d:9c:3c:dd:aa:9a:
         0b:a1:fd:c8:b8:b0:71:1c:e3:e3:a2:4c:2e:f6:4a:e3:52:52:
         18:93:60:1d:41:ae:9b:5b:39:41:f4:10:b7:64:f6:ae:03:47:
         53:32:32:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 20:34:47 2023 by rpki-client on console-ams.rpki-client.org