Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/93829c3821eccd83b148b4e713d5bb14356e4abb.roa
File:                     93829c3821eccd83b148b4e713d5bb14356e4abb.roa (raw, json)
Hash identifier:          bHZbXZmcJDqHF7cSPu7V4AxTJHqTidvUHcz28icdESo=
Subject key identifier:   BF:38:1A:A6:20:03:75:BE:89:AC:41:90:B1:FE:20:7A:CD:79:FA:1F
Certificate issuer:       /CN=3065f6a5a133325f3e525bfe0703a202498f6a21
Certificate serial:       0638
Authority key identifier: 4E:69:B9:74:58:23:F1:B9:D6:1F:0A:FB:8D:CB:8B:86:88:70:BA:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3065f6a5a133325f3e525bfe0703a202498f6a21.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/93829c3821eccd83b148b4e713d5bb14356e4abb.roa
Signing time:             Thu 15 Apr 2021 16:44:07 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     267857
IP address blocks:        45.7.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3065f6a5a133325f3e525bfe0703a202498f6a21
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=93829c3821eccd83b148b4e713d5bb14356e4abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b2:a1:2b:f6:0e:e6:23:37:53:bc:2b:80:d2:
                    c8:74:06:40:ab:88:c2:20:cb:9d:9a:4c:cd:22:75:
                    e4:c9:c8:3d:c1:a9:48:17:57:21:a8:28:12:f9:4e:
                    44:5a:34:87:3e:b1:a0:c5:17:b3:09:3a:a9:71:3b:
                    55:85:52:0e:e6:71:71:c4:82:22:7c:1a:a3:be:01:
                    95:37:95:ca:be:74:87:83:53:21:6a:2d:20:d6:1e:
                    43:da:6c:a5:07:45:b5:30:90:59:af:67:a7:70:fc:
                    54:5f:23:a9:fc:c6:5c:6c:6a:c7:0f:8b:2f:df:a2:
                    8b:58:97:c6:6a:e2:6e:64:50:bc:fd:ce:b3:a4:86:
                    cf:74:59:6f:1d:68:bf:38:e9:51:e8:fe:df:17:0f:
                    7c:9a:0f:52:5b:b4:96:5d:85:4f:75:b8:4d:fe:9e:
                    66:f4:d8:9f:33:bf:ba:89:fb:44:87:f1:39:2a:cd:
                    4e:82:d8:0a:8e:de:dc:61:e6:7e:f2:ef:62:bf:41:
                    b6:41:25:b5:3b:b4:5d:b8:e7:0f:96:9b:97:d7:63:
                    c1:42:69:e4:17:cf:99:8a:7b:73:ed:38:91:93:9a:
                    64:9d:4e:84:ea:fc:5c:b3:4c:f0:8f:80:47:35:19:
                    be:c3:43:c2:c9:26:16:62:65:c5:ca:6e:76:6e:a5:
                    39:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:38:1A:A6:20:03:75:BE:89:AC:41:90:B1:FE:20:7A:CD:79:FA:1F
            X509v3 Authority Key Identifier:
                keyid:4E:69:B9:74:58:23:F1:B9:D6:1F:0A:FB:8D:CB:8B:86:88:70:BA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3065f6a5a133325f3e525bfe0703a202498f6a21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/93829c3821eccd83b148b4e713d5bb14356e4abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/3065f6a5a133325f3e525bfe0703a202498f6a21.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:b3:5f:c9:4e:3a:c7:d5:29:90:a0:75:7a:0f:4e:cc:34:c7:
         cc:86:82:26:c3:01:65:e4:13:22:56:a2:03:4b:d3:64:c8:1f:
         63:39:c0:83:65:6a:91:4a:22:0e:04:57:79:4d:8f:9c:9a:b0:
         bd:c7:31:2b:b5:88:f8:c0:13:90:13:44:3d:a7:76:22:ba:bf:
         8b:23:c7:a7:d4:3b:87:75:6a:94:77:9b:51:e5:e8:cf:8a:0a:
         c7:d2:6e:27:b8:af:c9:8a:82:d9:d7:5f:e9:37:97:3c:77:24:
         86:f0:49:99:fa:52:e4:99:b3:e1:ff:44:88:38:aa:ee:00:01:
         76:8b:d5:5b:6f:66:7b:54:e1:62:f9:ea:e8:22:b9:ef:7e:4f:
         46:d3:0c:f4:bb:ae:ca:1a:2f:36:09:a4:d5:b4:54:1c:8b:3c:
         d9:ae:b8:1c:8d:a9:c8:c5:88:a2:fc:14:58:a0:eb:4d:10:7a:
         25:1e:0d:95:8e:a7:e2:99:55:9e:d6:73:72:07:f0:0d:3e:f9:
         ad:75:40:0c:a2:94:39:15:cb:d7:f2:22:d4:bd:ad:26:8b:63:
         7c:22:83:85:c1:ae:ec:a9:6c:0d:82:70:9c:27:72:78:4a:e3:
         01:2d:57:6f:5e:64:1f:89:c7:50:5d:e6:5a:0d:62:5d:68:eb:
         b1:59:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:59 2023 by rpki-client on console-ams.rpki-client.org