Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/eca232c4aaa49e7c6faf3eb7a7a29e96d1a13b3b.roa
File:                     eca232c4aaa49e7c6faf3eb7a7a29e96d1a13b3b.roa (raw, json)
Hash identifier:          NfanGGCmGGRH1oWODwoXthkek7mAsGcCuw1RmgItxuU=
Subject key identifier:   89:B2:88:FD:B1:E6:7C:09:C6:71:00:62:D7:6D:4E:AB:4A:03:C8:DE
Certificate issuer:       /CN=cd16539c52bd19701a219cb7f91b852671af6b16
Certificate serial:       0362
Authority key identifier: 65:4E:F8:25:03:EE:4F:D4:39:0F:08:28:E2:35:6F:AE:59:82:D0:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd16539c52bd19701a219cb7f91b852671af6b16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/eca232c4aaa49e7c6faf3eb7a7a29e96d1a13b3b.roa
Signing time:             Fri 25 Mar 2022 19:30:07 +0000
ROA not before:           Fri 25 Mar 2022 03:00:00 +0000
ROA not after:            Mon 25 Mar 2024 03:00:00 +0000
asID:                     267729
IP address blocks:        45.167.220.0/22 maxlen: 24
                          2803:e5a0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd16539c52bd19701a219cb7f91b852671af6b16
        Validity
            Not Before: Mar 25 03:00:00 2022 GMT
            Not After : Mar 25 03:00:00 2024 GMT
        Subject: CN=eca232c4aaa49e7c6faf3eb7a7a29e96d1a13b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:18:bf:dc:02:9c:66:63:6b:d8:c1:e6:db:13:
                    27:e2:0f:6e:bb:8d:27:4b:e8:27:64:3a:7b:57:13:
                    48:1d:23:4f:be:9a:5f:d6:eb:55:79:7b:5c:fb:97:
                    02:a9:7b:71:b9:c4:4f:39:fe:77:57:70:5d:f0:a5:
                    0b:56:e6:59:b1:50:da:53:5a:b1:6f:6c:57:67:a4:
                    2d:33:88:c5:5b:51:b1:05:58:2b:5a:99:c8:b2:d4:
                    cf:35:41:84:c7:1d:48:96:d2:28:d0:8f:6e:55:22:
                    1f:9e:7f:a1:ea:0b:70:d8:9c:2e:13:c5:06:76:16:
                    31:43:b1:1c:d6:42:e5:0e:ed:58:67:b3:86:46:59:
                    ae:ce:90:e8:c4:0d:75:ce:4a:e8:bf:06:e2:20:0c:
                    03:da:02:42:2b:a1:41:45:d1:eb:01:1e:bf:e1:ab:
                    cd:20:6c:04:bf:69:30:50:f1:56:b2:8c:4a:29:9a:
                    fe:c9:64:d1:d9:88:1f:62:33:d1:df:a0:45:c5:dd:
                    fa:b5:9e:45:f0:75:b9:3d:d7:82:78:c4:33:a0:b9:
                    d9:52:a5:6f:66:be:ae:7c:99:68:ca:72:40:ee:b9:
                    82:cc:28:81:50:83:cb:a5:84:37:e2:48:03:cd:3e:
                    6c:41:ef:5c:15:67:bb:98:a1:13:c4:50:24:64:e6:
                    95:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B2:88:FD:B1:E6:7C:09:C6:71:00:62:D7:6D:4E:AB:4A:03:C8:DE
            X509v3 Authority Key Identifier:
                keyid:65:4E:F8:25:03:EE:4F:D4:39:0F:08:28:E2:35:6F:AE:59:82:D0:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd16539c52bd19701a219cb7f91b852671af6b16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/eca232c4aaa49e7c6faf3eb7a7a29e96d1a13b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/cd16539c52bd19701a219cb7f91b852671af6b16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.220.0/22
                IPv6:
                  2803:e5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:33:04:c3:01:95:ae:1e:05:3c:a0:0b:55:02:d8:dd:33:4f:
         c9:42:e0:69:b9:83:e6:82:a6:38:4b:9b:ad:7f:17:ea:e9:9f:
         67:ce:0a:ee:b8:9e:d1:32:80:95:9f:86:24:1d:9d:73:1c:dd:
         12:8f:f0:84:88:7e:0d:79:3b:8c:80:37:df:3e:eb:37:17:87:
         89:bb:94:42:33:65:8f:eb:63:c7:1d:79:16:09:8b:b8:01:ab:
         89:a7:01:27:c8:24:dc:6a:b4:51:37:f8:5d:d9:ac:3c:ec:ce:
         c5:7b:ba:c9:91:3f:f0:42:02:b9:27:10:7e:50:59:bf:d5:79:
         b5:eb:fe:63:13:67:38:d5:33:f3:8c:5a:90:6c:a9:90:76:37:
         43:f9:c1:a7:8b:e8:fe:3b:2a:df:1b:ba:9e:6b:95:2d:13:d0:
         33:b6:14:c1:de:95:60:f5:ba:ea:fb:fa:bb:21:0e:51:2e:78:
         e1:40:b6:64:a3:0f:24:5f:41:73:5f:00:7b:0c:80:4a:a6:0e:
         53:0d:fb:7e:55:6f:a9:1a:2d:e1:1c:88:36:2d:82:c2:f1:28:
         38:19:9b:27:09:2a:ce:8c:32:a3:88:53:90:28:ea:d5:f7:7a:
         f7:9d:37:9b:c8:ab:03:6c:51:ae:c7:a7:bc:d0:d5:27:97:4c:
         6f:14:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 01:09:23 2023 by rpki-client on console-fra.rpki-client.org