Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/3ed77110343d9bda764f5335cb6d99c6524beaa2.roa
File:                     3ed77110343d9bda764f5335cb6d99c6524beaa2.roa (raw, json)
Hash identifier:          nLcvO5VpeHctUqQYigjSMf5xkxhQ2de83b/EgSXsBRY=
Subject key identifier:   F6:10:44:C9:07:1D:43:2C:2F:D0:8C:DE:BD:23:FC:8F:E1:1C:D3:98
Certificate issuer:       /CN=ba308093e64c97bdb011354807c2065ac693e761
Certificate serial:       11B6C8
Authority key identifier: 1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/3ed77110343d9bda764f5335cb6d99c6524beaa2.roa
Signing time:             Tue 05 Oct 2021 20:14:20 +0000
ROA not before:           Tue 05 Oct 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     262589
IP address blocks:        45.167.124.0/24 maxlen: 24
                          45.167.125.0/24 maxlen: 24
                          45.167.126.0/24 maxlen: 24
                          2803:b5a0::/32 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1160904 (0x11b6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba308093e64c97bdb011354807c2065ac693e761
        Validity
            Not Before: Oct  5 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=3ed77110343d9bda764f5335cb6d99c6524beaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:85:82:a6:13:06:16:bc:e0:3f:3f:6c:65:
                    06:c8:1a:38:14:c0:14:a8:05:4b:ba:83:66:fb:81:
                    fd:11:e6:84:7a:a3:08:9e:c4:ee:30:42:5c:49:ee:
                    80:59:ae:fa:0f:de:f8:98:a1:30:c3:30:b6:5c:79:
                    0e:b7:54:8c:c4:50:22:19:42:eb:a5:c6:54:6e:21:
                    c2:58:53:0f:d0:e3:b7:f9:bf:0c:82:56:ab:77:45:
                    1c:00:10:32:dc:e7:13:52:1f:18:d2:42:fd:7a:ee:
                    c6:aa:93:2b:0f:ae:ab:00:8d:d4:bb:56:bd:23:e0:
                    e8:21:d6:40:38:0b:29:aa:ac:8f:83:3b:c3:20:66:
                    4c:5d:54:66:84:67:b0:b6:16:e4:7b:0c:21:cb:27:
                    53:94:be:53:26:07:78:3d:df:d7:70:b1:cb:91:68:
                    5d:bb:13:82:bb:84:74:f0:e2:f8:37:9e:3f:11:83:
                    07:25:1f:41:ca:44:01:dc:da:eb:38:e0:8c:f5:29:
                    67:c2:17:ce:97:ce:bd:9c:ff:d1:44:f3:95:94:74:
                    42:ad:07:09:d0:ff:8f:af:07:1c:a5:df:f5:f1:4a:
                    69:b0:44:32:1e:10:18:b1:eb:4b:73:33:23:b2:c4:
                    c0:0b:0a:da:c3:c3:0e:ed:41:f1:03:7f:bf:81:04:
                    92:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:10:44:C9:07:1D:43:2C:2F:D0:8C:DE:BD:23:FC:8F:E1:1C:D3:98
            X509v3 Authority Key Identifier:
                keyid:1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/3ed77110343d9bda764f5335cb6d99c6524beaa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/ba308093e64c97bdb011354807c2065ac693e761.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.124.0-45.167.126.255
                IPv6:
                  2803:b5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:c2:57:7d:c9:30:ca:3d:83:60:c8:f9:dc:e2:c7:bc:b5:be:
         90:33:67:be:74:a0:7b:64:a3:e7:a2:db:be:f3:44:e5:af:2e:
         ba:9b:31:55:88:92:4f:c8:0c:96:28:55:81:05:12:5a:a2:2a:
         ad:65:79:3a:77:de:4f:3f:78:04:30:8a:c4:8e:eb:38:1e:d8:
         b5:34:78:73:c7:6c:7d:4f:22:74:02:a9:9a:d7:55:f4:c9:3e:
         ba:05:fd:5d:ca:96:11:8d:a8:b3:d5:cb:f2:23:87:e1:81:73:
         00:22:6e:26:e0:73:f4:c2:45:06:bd:90:6c:b2:ab:47:fa:3f:
         7b:41:df:55:3d:93:13:47:7f:9d:5d:54:d1:79:cc:30:9f:02:
         4a:e3:1c:bf:5d:f5:16:a4:bb:75:c0:7e:86:48:01:ca:f6:3f:
         06:59:ac:40:ca:52:5c:cb:d2:09:42:53:a8:00:13:e8:74:c3:
         cb:50:84:ee:6c:f8:af:83:61:16:b8:fb:c2:23:ea:4e:c6:79:
         33:3d:4e:ef:f2:31:9b:cf:94:16:28:d5:7b:6a:da:29:3e:65:
         04:9e:01:c0:02:7f:96:50:77:89:fa:67:a3:ec:13:57:cb:17:
         0a:4d:2b:37:34:4b:f4:1a:3d:23:88:4d:c4:d3:c2:eb:22:9d:
         6d:2a:72:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org