Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/084458bc-7e17-4691-abed-a119bafdcca3/8c5b69dcf97ac9bd6497d0751635c0c8060cc9ca.roa
File:                     8c5b69dcf97ac9bd6497d0751635c0c8060cc9ca.roa (raw, json)
Hash identifier:          kf3RAD1e3vC0O/5qWEW4shhQlbo/Pm6i3mxOLeU/vuA=
Subject key identifier:   41:E8:15:FD:A8:EF:F3:9D:5B:BC:F1:49:4F:78:68:96:32:D6:59:A5
Certificate issuer:       /CN=2c52eb2f56a05cf45070d5c3aa85d4d1f73b2c4e
Certificate serial:       143E7D
Authority key identifier: CC:0F:5B:B3:8F:97:11:01:00:2C:63:CD:E6:8F:60:27:29:AC:61:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c52eb2f56a05cf45070d5c3aa85d4d1f73b2c4e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/084458bc-7e17-4691-abed-a119bafdcca3/8c5b69dcf97ac9bd6497d0751635c0c8060cc9ca.roa
Signing time:             Fri 23 Sep 2022 15:12:09 +0000
ROA not before:           Fri 23 Sep 2022 15:10:10 +0000
ROA not after:            Mon 23 Sep 2024 15:10:10 +0000
asID:                     270006
IP address blocks:        187.102.208.0/24 maxlen: 24
                          187.102.209.0/24 maxlen: 24
                          187.102.210.0/24 maxlen: 24
                          187.102.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326717 (0x143e7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c52eb2f56a05cf45070d5c3aa85d4d1f73b2c4e
        Validity
            Not Before: Sep 23 15:10:10 2022 GMT
            Not After : Sep 23 15:10:10 2024 GMT
        Subject: CN=8c5b69dcf97ac9bd6497d0751635c0c8060cc9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1e:de:a6:16:9d:3e:f7:bb:26:9a:ec:14:f8:
                    fb:bc:05:56:f9:20:f9:41:05:da:e9:72:0a:a1:c2:
                    ab:7e:ca:ce:7a:9c:99:b4:ec:dd:8d:51:12:d4:55:
                    19:10:a9:07:9e:cd:ff:af:0a:83:6d:02:48:0a:02:
                    2a:0a:08:74:0d:f8:45:ad:2e:85:f0:13:52:4b:60:
                    7a:51:0c:1a:b7:0a:a9:e7:9b:d5:c8:6b:0b:07:80:
                    ab:5c:5f:03:57:08:3d:dd:b8:c6:f9:cf:7d:77:5a:
                    26:f7:e7:f4:96:f5:3f:96:ca:0d:35:6e:c3:a1:ee:
                    9b:4a:53:03:fd:84:b8:72:a2:ad:26:f6:ef:b6:cd:
                    c8:40:5d:a7:9d:eb:6e:79:2d:d6:f9:13:5f:af:6e:
                    ae:08:98:42:96:cc:40:1d:98:f3:f1:5b:c4:a1:39:
                    b7:d4:82:10:ac:67:64:cf:b6:ac:51:31:22:8d:db:
                    c1:a4:5e:79:6b:36:79:ba:10:78:c7:45:aa:f9:bb:
                    79:57:17:d5:fd:23:7a:31:a3:bc:06:1a:e7:bd:5c:
                    27:b4:f9:dc:21:33:77:39:d4:97:c3:2d:c8:aa:73:
                    ca:a0:33:84:e9:3c:fd:f3:ed:44:04:aa:cb:fb:71:
                    5f:e6:b9:b3:90:a6:2c:c9:2c:92:a8:ba:83:02:a6:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:15:FD:A8:EF:F3:9D:5B:BC:F1:49:4F:78:68:96:32:D6:59:A5
            X509v3 Authority Key Identifier:
                keyid:CC:0F:5B:B3:8F:97:11:01:00:2C:63:CD:E6:8F:60:27:29:AC:61:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c52eb2f56a05cf45070d5c3aa85d4d1f73b2c4e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/084458bc-7e17-4691-abed-a119bafdcca3/8c5b69dcf97ac9bd6497d0751635c0c8060cc9ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/084458bc-7e17-4691-abed-a119bafdcca3/2c52eb2f56a05cf45070d5c3aa85d4d1f73b2c4e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:7b:2d:92:c2:bc:3d:6b:c3:89:b5:81:7c:02:31:4f:3d:
         4b:57:56:5b:7a:c1:c8:bd:52:7f:76:d2:70:e5:3f:03:5e:18:
         6d:0c:5e:c1:a6:65:ed:48:3c:fc:db:8b:b5:83:58:b1:98:05:
         43:86:c1:7a:66:99:5e:8b:83:79:4f:a4:35:c7:9a:bb:da:6a:
         89:42:e1:04:e3:38:c7:d1:3e:f6:10:7a:af:5f:f0:91:12:de:
         93:26:8e:44:cd:b6:76:91:db:0c:86:d9:a3:2e:2b:8a:2c:02:
         73:07:15:15:a7:74:d7:ac:87:a1:1e:5b:7a:4c:24:94:71:32:
         33:31:b9:48:59:53:f4:2f:2f:7b:f9:62:1d:b8:ac:a8:0b:6d:
         63:06:f3:10:75:e0:07:f1:ab:8f:9a:59:fb:e9:ad:a0:4d:f5:
         3b:2f:5d:c8:c6:c8:86:64:48:7e:c0:58:f5:a0:89:1e:34:4d:
         03:74:a3:6c:55:55:b3:a5:16:33:0d:43:31:e8:35:30:96:1a:
         a5:24:51:c9:80:d7:d5:2f:df:ac:67:aa:e8:15:2d:d9:4a:ac:
         3a:ee:9c:97:80:af:bc:25:c6:d3:f5:f3:13:51:4b:a8:4c:a2:
         93:a0:28:a7:ab:c4:1e:99:bd:66:d2:fd:1a:41:66:a3:2c:6a:
         75:4f:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 17:02:14 2023 by rpki-client on console-ams.rpki-client.org