Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/e8a2eb1bd8d96926da2c8c6e4002d9a3d6df983e.roa
File:                     e8a2eb1bd8d96926da2c8c6e4002d9a3d6df983e.roa (raw, json)
Hash identifier:          h2Qo56LJJgR112JMVZj0YLpRRFkpqrGn6Ml79yWIv0M=
Subject key identifier:   A3:DE:55:8C:23:71:8A:F5:76:2D:06:06:18:EB:81:EF:39:68:44:E6
Certificate issuer:       /CN=5b63dc77edcd15d60f85c19a2d4c558d2ecf4791
Certificate serial:       063684
Authority key identifier: 02:05:5F:F5:2B:76:FF:06:D0:40:8B:1C:BC:C3:30:00:78:DA:5A:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/e8a2eb1bd8d96926da2c8c6e4002d9a3d6df983e.roa
Signing time:             Thu 29 Dec 2022 17:02:47 +0000
ROA not before:           Fri 02 Dec 2022 15:28:48 +0000
ROA not after:            Thu 05 Dec 2024 15:28:48 +0000
asID:                     262589
IP address blocks:        179.49.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407172 (0x63684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b63dc77edcd15d60f85c19a2d4c558d2ecf4791
        Validity
            Not Before: Dec  2 15:28:48 2022 GMT
            Not After : Dec  5 15:28:48 2024 GMT
        Subject: CN=e8a2eb1bd8d96926da2c8c6e4002d9a3d6df983e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b6:c0:51:2e:31:28:eb:1d:87:91:2b:e6:a0:
                    aa:6c:a5:77:ea:7f:5d:39:02:d6:c3:09:38:a1:15:
                    6b:d6:f0:de:09:7b:61:4b:05:05:e1:8a:0e:f5:d6:
                    a1:ff:93:94:4b:61:15:d2:be:77:ea:23:66:e6:19:
                    c1:bd:3d:54:f2:ff:c9:51:98:67:53:94:87:cc:4b:
                    21:e7:a6:5a:bf:ed:a7:d5:c6:43:ec:1b:56:fd:ae:
                    67:fd:25:ae:1d:13:60:3e:34:73:cb:93:b6:2c:73:
                    c6:bf:19:2a:10:28:f0:c6:f8:33:c0:e6:f0:e0:38:
                    70:13:39:58:30:b4:3e:17:b1:4f:ad:d8:17:9b:f2:
                    7e:51:a0:3c:7d:9f:29:29:54:64:e6:f4:a8:14:02:
                    9b:7b:a2:f5:2d:1d:e2:4b:23:8a:5e:71:06:fd:8b:
                    b5:ac:61:3b:d6:56:54:05:a6:37:65:0c:4f:70:e2:
                    2e:74:78:ce:9d:e8:fb:c7:cc:64:eb:62:09:8b:4c:
                    f1:46:14:f9:0e:56:79:34:d0:c2:56:9b:ba:50:25:
                    72:e2:7f:24:41:87:d2:8f:dd:32:bd:bd:83:2b:34:
                    fc:30:3a:f3:8f:29:de:2d:72:3b:a3:0b:c1:7e:e2:
                    d9:a8:f3:e9:50:61:37:57:c2:d9:a1:68:bd:a9:0a:
                    db:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DE:55:8C:23:71:8A:F5:76:2D:06:06:18:EB:81:EF:39:68:44:E6
            X509v3 Authority Key Identifier:
                keyid:02:05:5F:F5:2B:76:FF:06:D0:40:8B:1C:BC:C3:30:00:78:DA:5A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/e8a2eb1bd8d96926da2c8c6e4002d9a3d6df983e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:76:7f:13:fc:32:45:46:e5:2b:2e:32:41:2b:9a:5b:63:e6:
         f5:9b:26:d1:e2:f2:19:ce:00:a8:e2:dd:0f:a1:08:c6:4e:f0:
         0a:e5:75:77:49:03:de:4f:5a:b7:03:32:b8:cc:11:a5:01:92:
         94:0a:ee:ce:25:5c:31:40:14:e4:b4:96:b5:3a:67:17:5d:cf:
         17:8e:99:44:53:85:3c:72:fb:4b:67:f7:ae:fc:bc:d1:85:d6:
         1f:b9:5d:68:53:78:ac:7c:4e:0e:5e:9e:48:45:59:28:6e:ab:
         01:20:7c:84:d7:b0:e7:bb:24:34:e5:bc:66:44:3a:21:b7:f8:
         b8:29:69:a6:a2:bb:64:1f:6f:c5:2f:54:f5:c6:af:51:79:c9:
         cf:a1:ad:17:4d:38:8c:a1:73:a1:32:5e:ba:cd:fe:f7:21:95:
         c0:73:c0:52:0d:54:6e:60:42:34:de:21:d0:c5:75:a6:db:60:
         36:07:6b:f9:92:a2:6e:16:6f:8c:f5:43:0a:69:1c:bf:ad:22:
         34:76:56:a3:54:aa:2d:a0:6c:c9:c1:63:fb:99:e4:3b:e2:90:
         4c:8f:d9:c1:28:57:3e:34:3c:d4:aa:2c:58:f8:e2:e2:fc:7d:
         2f:6a:2b:34:6c:56:c3:b6:58:ca:f2:d1:65:7a:6b:b3:6e:dc:
         19:bb:45:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:09 2023 by rpki-client on console-fra.rpki-client.org