Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/3512a5f84ddcb66518bd33a061495ec184e5057b.roa
File:                     3512a5f84ddcb66518bd33a061495ec184e5057b.roa (raw, json)
Hash identifier:          l1D+UoAv2NQFNelCgrulg305gy88Vjow3Ipl3mojqpY=
Subject key identifier:   DB:6B:41:E8:BD:61:E9:13:46:94:DE:70:62:73:2B:3D:BF:70:14:88
Certificate issuer:       /CN=3065f6a5a133325f3e525bfe0703a202498f6a21
Certificate serial:       117EFE
Authority key identifier: 4E:69:B9:74:58:23:F1:B9:D6:1F:0A:FB:8D:CB:8B:86:88:70:BA:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3065f6a5a133325f3e525bfe0703a202498f6a21.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/3512a5f84ddcb66518bd33a061495ec184e5057b.roa
Signing time:             Fri 14 Apr 2023 08:30:12 +0000
ROA not before:           Thu 13 Apr 2023 08:30:12 +0000
ROA not after:            Sat 12 Apr 2025 08:30:12 +0000
asID:                     262186
IP address blocks:        45.7.132.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146622 (0x117efe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3065f6a5a133325f3e525bfe0703a202498f6a21
        Validity
            Not Before: Apr 13 08:30:12 2023 GMT
            Not After : Apr 12 08:30:12 2025 GMT
        Subject: CN=3512a5f84ddcb66518bd33a061495ec184e5057b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:bf:33:e4:b6:63:f8:e8:06:55:b0:4f:5e:
                    85:b3:4c:23:ba:b4:18:2d:ab:2a:8f:9a:f2:01:02:
                    33:62:90:09:09:2d:0e:42:be:28:10:1e:09:b8:72:
                    00:67:66:9d:34:98:13:a2:44:6c:f5:84:67:1c:27:
                    87:b0:be:fe:44:25:4a:e5:bd:4d:a7:85:fb:79:db:
                    66:e1:a4:a9:88:f5:d0:53:45:7a:40:ac:f6:ad:13:
                    d6:d4:d3:44:61:df:c0:86:06:43:81:03:db:19:c6:
                    12:c9:3a:1f:82:f8:db:9f:a0:74:05:a6:31:e2:a7:
                    e8:94:d4:d3:8c:12:ce:3a:51:ab:8b:12:e7:be:f6:
                    37:3e:90:50:e8:6f:09:da:08:b4:e0:72:6e:ba:ec:
                    91:33:a1:a5:27:75:58:00:21:c3:e5:f1:e6:3b:85:
                    a9:ec:bd:f1:c7:dc:ae:d2:2c:cb:b5:ed:9e:94:1b:
                    99:19:6d:19:1d:19:15:97:80:3c:2b:27:cc:f2:d5:
                    21:57:47:07:4e:4d:e9:4d:ff:4b:02:ca:38:86:15:
                    86:f3:d9:30:38:48:c1:1f:27:dd:3a:38:e7:22:bb:
                    38:94:ab:18:57:c8:3d:8d:60:b0:96:08:11:1c:d8:
                    cc:33:d3:0f:d5:3b:ea:60:89:88:bd:6c:22:b3:d5:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6B:41:E8:BD:61:E9:13:46:94:DE:70:62:73:2B:3D:BF:70:14:88
            X509v3 Authority Key Identifier:
                keyid:4E:69:B9:74:58:23:F1:B9:D6:1F:0A:FB:8D:CB:8B:86:88:70:BA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3065f6a5a133325f3e525bfe0703a202498f6a21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/3512a5f84ddcb66518bd33a061495ec184e5057b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/3065f6a5a133325f3e525bfe0703a202498f6a21.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:8a:85:a5:04:9d:f6:3a:a2:ce:97:63:bc:30:78:df:47:fb:
         30:9b:58:e9:8e:6d:bd:f9:85:55:37:53:e2:49:7f:d7:ac:b1:
         7a:97:f9:50:5b:5d:fe:6e:87:56:bf:9a:12:06:83:ee:2a:3d:
         6c:31:6f:eb:0d:d7:83:37:27:18:61:e5:a3:62:18:a9:2f:12:
         a6:ea:d2:0f:7f:ad:3e:55:c7:9e:a8:96:5a:44:e7:45:e9:33:
         40:a4:39:02:f1:3e:c2:79:8d:3d:ae:bf:b8:c4:92:d8:82:58:
         36:9b:88:04:09:55:d7:15:32:08:af:b4:6d:7e:83:92:66:4f:
         d9:e6:a3:f5:42:eb:86:8f:27:ac:06:33:f3:0f:c8:7d:18:5b:
         74:ba:2c:46:27:b0:de:7a:5c:7f:19:3f:a5:48:e8:59:02:f3:
         ff:97:a4:93:0c:d1:63:86:c8:12:38:09:77:45:63:a1:ef:d9:
         e3:b2:0c:3f:68:eb:f3:cd:fc:97:2c:c3:50:92:85:a3:f5:85:
         7c:8a:91:41:d9:3d:59:4a:41:35:e0:fa:8d:0c:36:17:71:95:
         59:4a:84:25:d9:f7:6a:03:28:84:80:0b:6a:68:70:dd:8b:9b:
         90:a0:c9:7d:54:c9:d1:70:bd:df:cc:52:eb:76:61:0e:29:10:
         b1:1a:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:12:51 2023 by rpki-client on console-ams.rpki-client.org