Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/172febde-5972-4d5d-89a5-693550552b72/49273e4392534e1fc4397ded75751c334f3f0533.roa
File:                     49273e4392534e1fc4397ded75751c334f3f0533.roa (raw, json)
Hash identifier:          e31rACkuLoLQK/9wJwvTeL1Oim6aZSmrbyBwyEN5SXA=
Subject key identifier:   EB:22:78:83:ED:2E:14:FA:C0:E4:74:41:81:CA:EE:60:3C:A8:8D:37
Certificate issuer:       /CN=6e43f15274fe3ad631050a4eb363c381953eb269
Certificate serial:       18A7D7
Authority key identifier: A8:FA:03:5C:F3:DE:D4:06:DB:A6:B5:12:37:47:CC:B5:75:69:EA:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e43f15274fe3ad631050a4eb363c381953eb269.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/172febde-5972-4d5d-89a5-693550552b72/49273e4392534e1fc4397ded75751c334f3f0533.roa
Signing time:             Wed 03 Aug 2022 18:15:44 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267708
IP address blocks:        201.182.248.0/22 maxlen: 22
                          201.182.248.0/23 maxlen: 23
                          201.182.250.0/23 maxlen: 23
                          201.182.248.0/24 maxlen: 24
                          201.182.249.0/24 maxlen: 24
                          201.182.250.0/24 maxlen: 24
                          201.182.251.0/24 maxlen: 24
                          179.189.222.0/24 maxlen: 24
                          2803:7820::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1615831 (0x18a7d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e43f15274fe3ad631050a4eb363c381953eb269
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=49273e4392534e1fc4397ded75751c334f3f0533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:bc:1a:3c:37:ea:3f:ff:46:09:d3:26:87:
                    77:e2:7c:90:a1:e0:e0:1d:86:38:d9:02:80:ed:40:
                    0e:a1:31:5d:19:91:67:87:5c:da:27:a4:37:39:15:
                    de:74:f0:53:b7:c5:ff:55:ff:3c:7f:f1:13:e8:fe:
                    9c:be:8d:fb:28:56:ed:7d:f9:01:51:32:6b:83:55:
                    33:1f:e5:5f:ac:05:20:49:7e:ce:7a:eb:06:0f:71:
                    5b:de:0d:e3:eb:b9:c0:be:14:fe:26:82:68:42:fc:
                    31:84:a3:c6:2f:81:bb:26:41:b0:f7:93:f7:0d:17:
                    ec:62:72:a9:f2:8a:b1:cd:82:6f:6e:94:11:c5:1a:
                    9f:6d:d0:fb:73:c7:83:e2:8f:08:e3:d4:b3:ed:69:
                    60:ca:f9:f4:1b:72:aa:f5:a9:4b:f0:f9:6f:bc:00:
                    09:9f:19:2a:e7:26:aa:23:1d:71:fc:e3:08:39:7c:
                    e4:8b:8e:b7:d9:8d:ed:60:fa:0d:99:85:e4:3d:c3:
                    f1:27:40:f8:23:f8:30:d7:98:70:75:fa:6b:6b:db:
                    38:c6:23:ef:e3:8f:45:0c:ae:b4:2f:8c:39:eb:38:
                    09:69:a1:27:e1:2e:d2:98:67:86:b4:39:5c:74:20:
                    96:3d:5d:b3:06:6b:92:83:f8:7e:7f:ef:c5:8d:c6:
                    ad:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:22:78:83:ED:2E:14:FA:C0:E4:74:41:81:CA:EE:60:3C:A8:8D:37
            X509v3 Authority Key Identifier:
                keyid:A8:FA:03:5C:F3:DE:D4:06:DB:A6:B5:12:37:47:CC:B5:75:69:EA:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e43f15274fe3ad631050a4eb363c381953eb269.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/172febde-5972-4d5d-89a5-693550552b72/49273e4392534e1fc4397ded75751c334f3f0533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/172febde-5972-4d5d-89a5-693550552b72/6e43f15274fe3ad631050a4eb363c381953eb269.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.222.0/24
                  201.182.248.0/22
                IPv6:
                  2803:7820::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:01:00:2f:e2:94:9e:4b:3c:57:8e:df:96:9b:6f:1c:89:a4:
         13:48:f4:92:a9:7e:c6:5f:51:7f:a2:2c:99:17:8a:15:8d:7c:
         f8:c8:36:9e:1d:bc:b7:19:57:2f:39:ae:bc:70:9f:bc:86:7b:
         cd:c9:8d:ef:f7:ef:7a:70:1b:f8:53:aa:1f:1d:c7:ea:eb:37:
         5c:9a:ad:c7:57:d0:a5:51:4f:51:b4:8a:05:c3:e7:e9:eb:96:
         a7:1e:8c:55:22:ad:90:fa:64:c8:5a:a0:2d:5b:92:65:3d:d3:
         16:e7:b0:53:23:8d:4b:0e:d7:73:55:dc:64:92:3e:3b:98:c3:
         3f:4f:a7:16:af:59:36:56:d5:14:03:5b:be:0c:e6:41:40:2e:
         3b:fb:73:4f:1f:17:6f:94:79:4f:d8:40:e7:a5:96:ab:67:98:
         0a:dc:e2:cd:33:94:70:65:ee:4b:56:14:75:cb:c0:70:bd:22:
         59:9d:c1:a8:19:68:97:be:84:ab:53:6e:0d:6a:df:32:27:eb:
         30:49:61:e1:38:ac:17:e3:3e:46:61:dc:56:43:bc:44:48:92:
         46:ce:b9:14:ec:37:a0:d3:16:95:7b:74:86:92:de:cf:68:51:
         9d:9c:1e:9e:b5:72:3d:3d:56:b3:86:a2:b1:c8:8a:9c:9a:e8:
         13:86:be:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----