Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/c2d27458f9872ee4df0e4a140e7bc79825f9c1e9.roa
File:                     c2d27458f9872ee4df0e4a140e7bc79825f9c1e9.roa (raw, json)
Hash identifier:          gKD/ZSSlEoi6AbrjBzpBBBDtEwq7rcStJ6Kjy/T35es=
Subject key identifier:   3F:83:06:AC:16:47:B2:0F:1A:93:2B:D2:50:D2:76:A8:76:EF:CE:F0
Certificate issuer:       /CN=5b63dc77edcd15d60f85c19a2d4c558d2ecf4791
Certificate serial:       035DF6
Authority key identifier: 02:05:5F:F5:2B:76:FF:06:D0:40:8B:1C:BC:C3:30:00:78:DA:5A:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/c2d27458f9872ee4df0e4a140e7bc79825f9c1e9.roa
Signing time:             Thu 08 Sep 2022 13:22:11 +0000
ROA not before:           Thu 08 Sep 2022 13:22:07 +0000
ROA not after:            Sun 08 Sep 2024 13:22:07 +0000
asID:                     262191
IP address blocks:        179.49.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220662 (0x35df6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b63dc77edcd15d60f85c19a2d4c558d2ecf4791
        Validity
            Not Before: Sep  8 13:22:07 2022 GMT
            Not After : Sep  8 13:22:07 2024 GMT
        Subject: CN=c2d27458f9872ee4df0e4a140e7bc79825f9c1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:63:dc:41:e6:48:2d:37:6b:fd:1c:8e:e3:2c:
                    70:13:77:99:9e:e4:cb:a9:bf:52:19:88:b5:62:f5:
                    2a:3f:10:dc:f2:d6:05:eb:5f:f7:09:0b:cf:aa:e1:
                    f3:46:3f:da:f9:95:a3:7d:fb:0f:e6:03:ce:65:ff:
                    6d:43:8b:fb:80:22:0f:e5:fc:b2:1b:ad:dd:07:2d:
                    6b:32:16:56:d0:b0:d7:5e:5d:58:7f:8e:89:7d:27:
                    fe:77:62:2b:71:ca:af:fd:6b:8f:06:93:36:82:c4:
                    59:ca:ce:49:f2:e0:bf:85:c4:e4:17:7d:ae:82:ef:
                    b9:18:8c:1f:f9:2d:e5:6d:cf:14:69:a7:c7:69:b8:
                    3b:3b:09:79:ff:65:6a:d6:41:98:7a:6e:45:ca:51:
                    a6:ab:3f:b6:f9:1f:3b:23:67:a7:a0:39:e5:7c:8d:
                    46:5f:c4:72:02:d4:7c:29:25:d1:df:cc:b9:64:d7:
                    64:35:b9:9f:2a:14:4c:da:6c:c1:14:7a:d1:c9:c0:
                    25:f6:b5:d5:35:ef:a2:d1:17:30:75:c2:c0:16:4a:
                    b2:8a:44:c9:50:80:62:de:ed:ef:23:6f:33:b3:8b:
                    d2:49:c0:06:42:d4:cd:62:0f:5b:21:04:89:34:45:
                    73:73:26:01:b9:65:a5:18:62:f3:24:79:6f:58:5d:
                    ce:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:83:06:AC:16:47:B2:0F:1A:93:2B:D2:50:D2:76:A8:76:EF:CE:F0
            X509v3 Authority Key Identifier:
                keyid:02:05:5F:F5:2B:76:FF:06:D0:40:8B:1C:BC:C3:30:00:78:DA:5A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/c2d27458f9872ee4df0e4a140e7bc79825f9c1e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:d3:e7:5a:4b:a5:1a:53:08:b0:44:ee:7f:ad:96:ea:aa:5f:
         83:f6:56:5b:a6:c6:73:61:d9:d2:38:2a:ca:54:ba:e2:66:a3:
         f3:a2:8c:82:ce:77:7e:37:89:ea:5b:92:d8:8e:cb:32:98:48:
         e8:7d:b8:ed:f2:d0:7c:36:6f:f6:6a:5f:27:24:1a:4f:4a:67:
         67:85:47:05:f5:83:a4:14:ef:e4:7f:05:83:32:f5:fc:b7:a1:
         d7:3a:d0:4f:15:2b:0c:20:07:48:47:5c:dc:d0:b9:79:2f:22:
         53:eb:bc:fa:ca:84:20:90:80:6c:90:47:06:d1:03:bd:55:a5:
         23:86:34:b9:18:d5:f1:e7:2e:38:2d:af:ee:4b:2c:a9:08:cf:
         4f:03:d6:cb:56:3d:fe:94:ab:8b:a4:ab:28:d7:82:5e:ed:8b:
         b9:25:c2:77:27:4c:ec:00:4e:35:12:77:b9:34:04:61:4a:21:
         5d:b0:fd:ad:e6:af:b6:ee:9b:5b:3f:30:5c:fe:19:f4:00:f7:
         6d:f2:6e:7d:d2:5a:02:d5:ea:9f:3c:8f:6c:51:74:6f:03:a7:
         52:65:74:ac:f7:7c:ed:47:be:53:f0:5b:d7:10:0a:d8:c7:e3:
         b3:d6:22:5a:02:20:e4:ab:82:47:2d:83:8a:af:20:89:30:8c:
         4f:6a:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 14:42:57 2023 by rpki-client on console-ams.rpki-client.org