Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3137302e3234372e3136342e302f32322d3232203d3e20323635363432.roa
File:                     3137302e3234372e3136342e302f32322d3232203d3e20323635363432.roa (raw, json)
Hash identifier:          NOmLq3WVBZ949NvTrToBz7fvPmdpdQThT1bNAJkGLuc=
Subject key identifier:   16:4B:F3:0C:79:E7:31:92:BB:62:0E:52:6E:9C:91:0B:A7:22:39:75
Certificate issuer:       /CN=F180E837FD7EADABAAE544FD4C3108402270D287
Certificate serial:       48BBB9AA04164C5464F1C28FC6719F049DEBC1EC
Authority key identifier: F1:80:E8:37:FD:7E:AD:AB:AA:E5:44:FD:4C:31:08:40:22:70:D2:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F180E837FD7EADABAAE544FD4C3108402270D287.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3137302e3234372e3136342e302f32322d3232203d3e20323635363432.roa
Signing time:             Tue 11 Jun 2024 00:35:00 +0000
ROA not before:           Tue 11 Jun 2024 00:30:00 +0000
ROA not after:            Tue 10 Jun 2025 00:35:00 +0000
asID:                     265642
IP address blocks:        170.247.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 03:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bb:b9:aa:04:16:4c:54:64:f1:c2:8f:c6:71:9f:04:9d:eb:c1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180E837FD7EADABAAE544FD4C3108402270D287
        Validity
            Not Before: Jun 11 00:30:00 2024 GMT
            Not After : Jun 10 00:35:00 2025 GMT
        Subject: CN=164BF30C79E73192BB620E526E9C910BA7223975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:1e:7b:9a:88:4d:2f:eb:32:5f:f7:69:30:
                    b2:55:1f:95:f6:5c:1c:50:84:7b:d7:3d:c7:e2:cd:
                    2d:a6:48:1e:1c:a1:b9:16:d9:11:2a:d9:b1:74:f2:
                    25:50:cf:3f:22:96:b9:e5:26:2a:ba:4f:0d:6c:10:
                    22:2d:57:8f:03:8e:69:33:18:31:1a:89:b7:a4:f7:
                    1d:9e:1b:dc:d6:51:44:07:a2:57:5b:ab:b1:a2:77:
                    ab:57:ed:59:7d:98:be:7c:37:24:d8:cf:f2:53:79:
                    5f:43:10:59:0b:6b:59:a9:f1:38:cf:88:0e:11:a4:
                    a0:30:95:5e:8a:ca:6f:e3:30:24:ea:a0:58:75:84:
                    1b:c3:94:74:50:a5:c2:9b:cd:12:e0:f4:3e:98:53:
                    cf:dd:40:6a:d2:27:cb:0c:6f:e8:12:1b:2a:5f:07:
                    38:0c:47:a1:92:2b:44:a6:80:e2:2d:98:16:68:fa:
                    c0:e9:32:aa:6e:50:01:a0:10:c1:bf:a1:c7:e1:62:
                    cf:4d:9b:78:63:f3:ab:fd:37:10:4d:2e:fe:de:d6:
                    d9:3a:81:30:fa:98:d6:f2:3e:ac:50:50:52:66:be:
                    97:2f:c0:a8:f6:0f:a2:ec:07:1a:3e:b7:71:7a:c8:
                    1a:93:2f:7c:fd:03:88:91:61:6c:a4:a3:4a:38:9f:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4B:F3:0C:79:E7:31:92:BB:62:0E:52:6E:9C:91:0B:A7:22:39:75
            X509v3 Authority Key Identifier:
                keyid:F1:80:E8:37:FD:7E:AD:AB:AA:E5:44:FD:4C:31:08:40:22:70:D2:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/F180E837FD7EADABAAE544FD4C3108402270D287.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F180E837FD7EADABAAE544FD4C3108402270D287.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3137302e3234372e3136342e302f32322d3232203d3e20323635363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:84:e3:54:79:8c:1c:f8:4c:6e:09:97:11:6f:c8:57:88:7c:
         33:b1:58:9c:bb:a3:7a:b8:ec:ee:d3:35:4d:65:ee:5c:7a:d5:
         01:ce:f9:4f:6f:54:5c:1f:07:08:f1:e2:72:1e:3b:e5:38:3a:
         b3:a4:12:fc:c5:af:fe:32:31:e1:6a:f0:e7:17:49:3a:1c:c8:
         5a:c1:51:cf:32:a8:ab:5e:7b:a7:07:2c:07:07:d7:24:92:8f:
         57:ab:15:5c:5b:f3:a8:de:b5:2b:b5:e0:f5:37:c5:bd:bb:d6:
         ea:af:2e:1c:88:04:d5:ff:dd:bf:bf:32:a4:07:42:62:b1:a6:
         fa:d7:c4:39:28:9b:fa:5b:03:1a:c6:a8:85:ba:84:58:1b:f7:
         aa:05:c1:2c:dc:f2:bc:79:aa:74:fa:d4:31:81:c0:97:8f:c7:
         89:e0:cc:cc:04:0f:22:74:79:11:22:21:5e:fb:68:37:5a:82:
         68:1c:7a:5f:b3:7a:83:a2:af:5a:7c:87:c1:03:71:e3:08:e9:
         6b:6e:57:10:18:91:85:ba:ae:52:c3:0a:bb:a7:57:ae:d8:2f:
         f6:4a:70:b7:30:88:c2:74:9a:f2:4e:81:ea:17:3a:dd:60:59:
         b9:b8:d7:b3:b9:86:96:1c:68:ac:6a:af:17:14:21:90:72:98:
         eb:85:4b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----