Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/aee1bcd51910cf679f9534ea8337cf109977c7b7.roa
File:                     aee1bcd51910cf679f9534ea8337cf109977c7b7.roa (raw, json)
Hash identifier:          eV5ODZ/Y6ets+/ukRmbUP1Ad8yOQMVY1N01XfyWuu94=
Subject key identifier:   48:2A:45:62:93:3A:AC:02:E0:8A:EE:91:9A:09:65:CC:FC:45:4B:E8
Certificate issuer:       /CN=98a80d301d847e6c050c408da1b0efe36548fad8
Certificate serial:       1585BC
Authority key identifier: 44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/aee1bcd51910cf679f9534ea8337cf109977c7b7.roa
Signing time:             Wed 02 Mar 2022 16:15:06 +0000
ROA not before:           Wed 02 Mar 2022 03:00:00 +0000
ROA not after:            Sat 02 Mar 2024 03:00:00 +0000
asID:                     264659
IP address blocks:        179.43.108.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1410492 (0x1585bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a80d301d847e6c050c408da1b0efe36548fad8
        Validity
            Not Before: Mar  2 03:00:00 2022 GMT
            Not After : Mar  2 03:00:00 2024 GMT
        Subject: CN=aee1bcd51910cf679f9534ea8337cf109977c7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:95:de:8d:c8:d5:e3:93:b5:53:b5:50:7f:89:
                    d1:fe:55:d7:9e:1e:49:66:b7:61:98:18:a6:7e:9a:
                    23:db:bd:3a:6c:d0:7e:94:c9:a0:b4:fd:f1:56:7d:
                    df:84:76:6c:ff:ed:ef:d5:d7:b6:37:56:2b:cf:e1:
                    8d:a3:41:84:d0:3f:8b:49:98:a4:c5:f2:d5:fb:81:
                    ae:98:b1:c4:57:df:74:ea:39:cf:2d:9d:3f:19:1a:
                    2d:e5:d3:9f:71:16:bd:c8:f6:75:3b:5c:6c:49:7d:
                    4c:20:54:47:b7:b9:a5:71:a5:ac:22:61:ba:9a:52:
                    ea:05:bc:51:ae:5e:f7:a5:b0:e9:ce:c6:2c:43:67:
                    bd:95:f3:a4:d8:c3:22:01:b1:a6:5f:e6:e5:33:ed:
                    90:92:d8:f3:ed:54:68:0e:23:4b:a3:31:a9:8f:99:
                    34:be:49:24:73:cf:53:10:2a:eb:51:a7:cb:44:a8:
                    d4:05:db:ce:97:ba:9e:09:2c:96:88:e2:f5:af:b4:
                    3b:23:71:3f:b1:52:af:a6:d2:6c:ce:a5:91:c2:4c:
                    c7:e5:b3:b7:7a:18:53:5d:fe:1e:51:71:f3:37:22:
                    31:cd:b6:87:e1:4d:ba:11:c7:2d:51:ab:2d:e1:9e:
                    ff:c1:fa:69:cb:d8:76:45:78:0c:33:b7:9c:56:60:
                    f7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2A:45:62:93:3A:AC:02:E0:8A:EE:91:9A:09:65:CC:FC:45:4B:E8
            X509v3 Authority Key Identifier:
                keyid:44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/aee1bcd51910cf679f9534ea8337cf109977c7b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/98a80d301d847e6c050c408da1b0efe36548fad8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:51:54:7f:b3:60:12:55:ff:22:65:8c:b6:8f:58:be:9a:0f:
         13:90:f3:63:a7:bd:88:1b:13:79:fe:96:53:46:1d:ad:d8:f2:
         1c:e8:22:87:dc:18:ae:64:2a:83:d9:c0:ac:a7:2c:06:8f:3e:
         a3:7e:08:f7:82:bf:0a:37:88:28:8b:0e:65:27:34:3d:96:26:
         47:cb:38:ef:d9:32:d5:78:32:5b:c3:9d:0b:53:2f:cb:f3:c7:
         70:36:53:4d:e7:73:6f:2b:3d:9b:79:aa:80:da:74:a0:3f:63:
         c7:e1:20:71:5f:ef:b6:35:a5:c5:0a:ad:f7:98:ac:e3:05:82:
         48:d1:fb:3f:60:27:98:36:9d:6a:17:91:f3:1b:19:e8:52:95:
         a5:3b:b1:6d:ba:f8:a4:e0:7c:a6:16:fe:c2:64:00:89:ae:bd:
         bb:9d:54:4c:90:45:9b:8c:df:e7:0a:64:57:6f:39:3a:43:d1:
         47:99:97:78:16:a0:7a:74:8a:f8:7c:12:74:6b:f8:c1:d4:59:
         1c:bc:72:9c:9c:0b:2a:9f:3f:fd:61:fe:4c:fd:53:69:5f:d0:
         4b:49:24:f1:48:25:7b:58:f8:49:71:95:2c:5a:f7:96:3c:5e:
         6b:39:37:03:86:17:e2:21:38:d3:5a:14:6b:85:e3:c0:eb:8c:
         03:ff:64:0c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFYW8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk4
YTgwZDMwMWQ4NDdlNmMwNTBjNDA4ZGExYjBlZmUzNjU0OGZhZDgwHhcNMjIwMzAy
MDMwMDAwWhcNMjQwMzAyMDMwMDAwWjAzMTEwLwYDVQQDEyhhZWUxYmNkNTE5MTBj
ZjY3OWY5NTM0ZWE4MzM3Y2YxMDk5NzdjN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgJXejcjV45O1U7VQf4nR/lXXnh5JZrdhmBimfpoj2706bNB+
lMmgtP3xVn3fhHZs/+3v1de2N1Yrz+GNo0GE0D+LSZikxfLV+4GumLHEV9906jnP
LZ0/GRot5dOfcRa9yPZ1O1xsSX1MIFRHt7mlcaWsImG6mlLqBbxRrl73pbDpzsYs
Q2e9lfOk2MMiAbGmX+blM+2Qktjz7VRoDiNLozGpj5k0vkkkc89TECrrUafLRKjU
BdvOl7qeCSyWiOL1r7Q7I3E/sVKvptJszqWRwkzH5bO3ehhTXf4eUXHzNyIxzbaH
4U26EcctUast4Z7/wfppy9h2RXgMM7ecVmD3kQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEgqRWKTOqwC4IrukZoJZcz8RUvoMB8GA1UdIwQYMBaAFERgahiSE9wZPYYN
O2WM5bTvaHqoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOThhODBk
MzAxZDg0N2U2YzA1MGM0MDhkYTFiMGVmZTM2NTQ4ZmFkOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGMyNjhiMmQtNzQ1Yi00NDQ4LTllNjYtYzA4NmM0
ZjM2OTAwL2FlZTFiY2Q1MTkxMGNmNjc5Zjk1MzRlYTgzMzdjZjEwOTk3N2M3Yjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYzI2OGIyZC03NDViLTQ0NDgtOWU2Ni1jMDg2
YzRmMzY5MDAvOThhODBkMzAxZDg0N2U2YzA1MGM0MDhkYTFiMGVmZTM2NTQ4ZmFk
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArMrbDANBgkqhkiG9w0BAQsFAAOCAQEARlFUf7NgElX/ImWM
to9YvpoPE5DzY6e9iBsTef6WU0YdrdjyHOgih9wYrmQqg9nArKcsBo8+o34I94K/
CjeIKIsOZSc0PZYmR8s479ky1XgyW8OdC1Mvy/PHcDZTTedzbys9m3mqgNp0oD9j
x+EgcV/vtjWlxQqt95is4wWCSNH7P2AnmDadaheR8xsZ6FKVpTuxbbr4pOB8phb+
wmQAia69u51UTJBFm4zf5wpkV285OkPRR5mXeBagenSK+HwSdGv4wdRZHLxynJwL
Kp8//WH+TP1TaV/QS0kk8Ugle1j4SXGVLFr3ljxeazk3A4YX4iE401oUa4XjwOuM
A/9kDA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org