Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/2cdfd046d2661d6399c1a8dd5f33289d244c97be.roa
File:                     2cdfd046d2661d6399c1a8dd5f33289d244c97be.roa (raw, json)
Hash identifier:          iGjurbrKjR9CRxm0710yxlejEnub/dzZNBiTGkylOnA=
Subject key identifier:   5B:A4:50:1E:9C:78:D3:80:88:C0:CD:E1:22:EC:09:F8:E0:38:51:CD
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       14E0A4
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/2cdfd046d2661d6399c1a8dd5f33289d244c97be.roa
Signing time:             Wed 04 Jan 2023 01:08:20 +0000
ROA not before:           Tue 03 Jan 2023 01:07:37 +0000
ROA not after:            Sat 04 Jan 2025 01:07:37 +0000
asID:                     3549
IP address blocks:        45.179.200.0/23 maxlen: 24
                          45.179.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368228 (0x14e0a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: Jan  3 01:07:37 2023 GMT
            Not After : Jan  4 01:07:37 2025 GMT
        Subject: CN=2cdfd046d2661d6399c1a8dd5f33289d244c97be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:6f:18:e0:27:a0:17:ea:9e:95:12:94:d3:
                    7e:65:a9:bf:ab:fc:fa:22:45:80:e4:1e:e7:f6:8d:
                    c2:32:52:b9:a9:7c:89:ea:42:92:31:81:58:4e:a5:
                    64:a7:6d:4b:16:aa:e8:14:ea:5c:64:e8:9b:70:a8:
                    70:87:e8:2f:5b:bb:3a:ae:0a:2b:13:2d:c4:f4:c4:
                    18:ee:a7:f1:4e:43:6d:88:87:3f:0e:4b:15:bf:0c:
                    d2:1e:7e:36:24:78:b8:11:01:ec:5e:e0:d0:9a:87:
                    f9:ec:52:a5:0b:08:b2:cf:d4:c0:d6:7e:ca:a8:36:
                    90:8f:b4:39:11:32:81:12:dc:27:6e:2b:37:e8:db:
                    b2:27:ff:a9:bc:50:6e:15:74:42:89:63:60:d6:83:
                    ca:61:30:48:ac:e3:71:86:b7:52:e0:d7:45:6f:29:
                    04:6e:0e:f8:bf:24:0c:f4:b8:38:65:4b:92:29:ff:
                    11:e0:d9:51:ed:af:fe:8f:7c:53:9f:6c:7a:fc:b6:
                    16:d2:76:2d:ef:9b:f3:e1:7b:79:54:5f:cc:14:cf:
                    f3:05:d2:55:d5:04:4b:16:3e:ec:88:c9:2c:e9:fb:
                    f4:2e:6b:b2:e8:7b:86:55:ad:a8:73:96:e9:bd:74:
                    bc:29:1e:f4:b4:d3:ce:70:a1:dc:7d:ad:d5:b6:ab:
                    a1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A4:50:1E:9C:78:D3:80:88:C0:CD:E1:22:EC:09:F8:E0:38:51:CD
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/2cdfd046d2661d6399c1a8dd5f33289d244c97be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.200.0/23
                  45.179.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:a8:a9:0c:44:82:41:36:39:b0:cb:61:c2:20:19:27:da:88:
         15:09:82:a2:c2:ed:13:36:7d:4f:9d:f0:f3:e7:2c:59:50:6f:
         e4:90:02:08:a6:89:be:7c:8a:af:4b:42:d5:5f:47:51:0d:c6:
         21:46:2b:e5:85:a1:10:8d:08:d7:48:82:d1:98:17:d2:7b:24:
         1f:c4:40:20:4d:95:41:33:e4:83:e7:14:b1:8b:77:a0:20:07:
         da:f4:34:27:ae:d3:eb:0c:99:00:11:2e:eb:5c:16:e3:3a:13:
         9e:be:68:ab:be:15:09:64:d1:87:17:9f:a6:ff:6c:fb:12:a7:
         a0:5f:4c:da:bb:8e:26:df:82:2a:09:89:fa:d6:96:0a:f3:48:
         9f:0e:ed:a7:5f:c2:cc:27:44:5e:d6:fd:a4:48:a6:3a:e2:87:
         a1:b7:40:14:9f:d5:a6:23:e4:67:64:db:7b:7d:35:62:61:30:
         e2:cf:31:e5:ab:d7:92:19:de:22:64:dd:a5:90:f7:da:3e:1e:
         a8:f7:5e:5a:00:b9:d8:09:f0:0d:16:15:c1:0c:e6:ee:48:ee:
         19:44:c1:bb:48:9b:1b:ae:90:b7:7a:6a:23:77:62:76:a6:1f:
         86:b4:b7:f9:a3:33:01:60:d8:ed:23:5e:70:2c:67:5d:77:24:
         6c:51:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:08 2023 by rpki-client on console-fra.rpki-client.org