Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/4243e8664c749eb233364a5630918c130938f928.roa
File:                     4243e8664c749eb233364a5630918c130938f928.roa (raw, json)
Hash identifier:          CpziqG3v0UpCvNZ6aBcM2PKZ939FqD+3eJlsNimXzWM=
Subject key identifier:   90:73:DB:4E:20:FD:D7:AC:B0:94:25:AF:60:16:EE:89:CF:11:43:EE
Certificate issuer:       /CN=5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae
Certificate serial:       202994
Authority key identifier: 75:77:AF:10:66:15:D9:6D:1C:24:42:60:6A:86:60:57:EE:9F:48:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/4243e8664c749eb233364a5630918c130938f928.roa
Signing time:             Tue 14 Mar 2023 14:32:20 +0000
ROA not before:           Mon 13 Mar 2023 14:29:35 +0000
ROA not after:            Fri 14 Mar 2025 14:29:35 +0000
asID:                     264701
IP address blocks:        186.0.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107796 (0x202994)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae
        Validity
            Not Before: Mar 13 14:29:35 2023 GMT
            Not After : Mar 14 14:29:35 2025 GMT
        Subject: CN=4243e8664c749eb233364a5630918c130938f928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:17:c1:14:0b:65:de:a4:5d:d4:83:e5:c4:20:
                    7f:0c:52:66:81:b7:a2:76:fa:f3:b4:9e:83:bb:73:
                    67:74:44:d8:9c:7f:f1:63:de:a6:c0:59:73:36:39:
                    fc:93:a5:c6:9e:5f:98:f2:f2:f1:11:56:c4:56:69:
                    5b:8f:29:74:95:f5:13:25:95:78:01:96:1b:20:d0:
                    7f:ca:f4:4c:a0:c9:cc:b9:9f:b3:71:36:1e:fa:97:
                    97:97:6b:72:31:cf:95:1a:02:03:21:cd:98:3d:23:
                    e8:17:dc:c2:17:57:8b:46:a6:a8:34:98:30:c7:7c:
                    18:2a:e2:8a:c2:ea:5f:2c:1d:80:e4:41:68:a8:43:
                    66:a8:39:10:41:71:cf:a0:88:70:a6:c3:1c:aa:78:
                    be:12:95:b0:a1:35:59:1e:2b:75:a6:3a:54:54:d4:
                    06:b5:21:dd:31:3f:88:36:d0:ce:aa:ab:95:46:2e:
                    8f:e6:8f:fb:8b:6c:44:61:e1:ef:f0:99:f1:b7:bd:
                    3f:1c:08:4f:4d:ba:55:f1:22:1f:c9:19:a1:f9:dd:
                    47:80:e1:b4:cb:6f:0a:3b:2b:33:1c:df:9c:5f:45:
                    59:ff:12:00:6b:1d:7f:64:9a:11:59:9e:a4:c6:a2:
                    61:be:6f:30:65:ee:75:c9:98:b3:2a:fd:c2:d3:12:
                    59:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:73:DB:4E:20:FD:D7:AC:B0:94:25:AF:60:16:EE:89:CF:11:43:EE
            X509v3 Authority Key Identifier:
                keyid:75:77:AF:10:66:15:D9:6D:1C:24:42:60:6A:86:60:57:EE:9F:48:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/4243e8664c749eb233364a5630918c130938f928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:86:d3:8d:fb:96:06:2b:05:48:49:7c:04:c1:7d:bb:13:57:
         cb:b8:f1:e2:38:86:47:fb:90:3d:c7:4e:7c:d1:fc:e2:93:59:
         d9:b8:c2:a6:c1:16:e3:16:76:36:0f:27:54:bb:4e:c5:b7:2d:
         95:11:bc:b0:ee:09:da:c9:57:2d:0b:0e:d9:ca:1a:21:69:bf:
         62:32:8d:4a:22:6e:7c:ca:54:f7:b7:c2:8a:d7:1f:89:b0:75:
         60:33:da:98:65:c9:75:29:39:51:80:2d:50:11:31:f6:7d:45:
         90:83:c4:bb:cb:af:d8:ef:44:58:79:f0:41:04:58:31:77:07:
         58:ec:37:03:df:79:3c:d8:d1:55:04:4c:9f:53:45:f7:a0:05:
         e1:1d:43:a0:27:5e:16:dc:07:ee:8e:7f:aa:24:db:e9:5a:1e:
         b0:9a:ac:4a:d3:41:3b:e9:61:b2:45:69:79:76:15:2e:ae:0a:
         89:f3:c3:97:cf:84:f1:21:9f:75:44:65:c5:7e:ed:34:5a:84:
         be:b9:53:75:72:4e:2c:d5:f0:a8:5e:c6:62:61:cf:d0:cf:89:
         27:3e:92:e6:b6:bc:48:a5:26:38:c6:bd:fc:60:4a:78:00:4c:
         20:57:13:b7:d7:ef:fe:10:60:4e:18:c9:8c:01:1b:ed:5c:ce:
         97:8a:f2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----