Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cb73caf-f783-46f5-ae28-ba41c78b6122/fc8b481541d829a92627471269442b0962fc09c1.roa
File:                     fc8b481541d829a92627471269442b0962fc09c1.roa (raw, json)
Hash identifier:          uojOFqr26WKlAGI8q49CQjwM5vvgl4fQFfzesBrh0As=
Subject key identifier:   23:91:04:E6:54:DD:40:26:64:F8:4D:4E:38:D7:CB:47:A3:02:79:F5
Certificate issuer:       /CN=577ebac624b1c2d191b7182497a47ed595997c06
Certificate serial:       02DA
Authority key identifier: 22:AD:A8:C3:3F:81:4A:9D:6C:A2:D5:06:9D:E2:5B:29:86:45:8D:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/577ebac624b1c2d191b7182497a47ed595997c06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cb73caf-f783-46f5-ae28-ba41c78b6122/fc8b481541d829a92627471269442b0962fc09c1.roa
Signing time:             Thu 06 Oct 2022 14:48:06 +0000
ROA not before:           Thu 06 Oct 2022 14:47:23 +0000
ROA not after:            Sun 06 Oct 2024 14:47:23 +0000
asID:                     271815
IP address blocks:        200.219.52.0/22 maxlen: 22
                          2803:c5e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577ebac624b1c2d191b7182497a47ed595997c06
        Validity
            Not Before: Oct  6 14:47:23 2022 GMT
            Not After : Oct  6 14:47:23 2024 GMT
        Subject: CN=fc8b481541d829a92627471269442b0962fc09c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:7c:68:6e:ec:df:6f:c3:14:0d:bd:ab:58:
                    58:e5:91:16:ad:91:91:13:f8:ce:81:dd:08:4f:15:
                    e8:54:3f:81:e0:fc:89:a6:13:cb:17:76:23:ed:3f:
                    70:c7:53:77:be:d0:40:29:c9:9e:3a:80:5f:b1:f2:
                    8b:f6:db:b3:36:5f:ac:af:44:22:21:af:0f:52:63:
                    bf:3c:30:3b:ff:0f:c2:80:1d:cb:b2:a6:eb:d3:f0:
                    9d:06:42:f2:55:44:8b:39:38:ab:c3:1e:3e:1b:35:
                    10:5a:7b:a6:f4:55:d9:49:bc:04:4e:d8:44:36:a3:
                    b0:1d:be:58:63:6e:34:27:20:00:31:cc:47:65:df:
                    3c:98:3e:73:a0:e9:7d:9b:1e:f7:8f:3c:2d:22:73:
                    87:5f:f2:35:83:49:f3:9e:a6:e9:dc:1a:6a:ac:c3:
                    5d:5c:c1:85:09:2d:98:aa:35:dd:fb:c1:b4:98:c6:
                    a1:98:cd:57:ff:03:6d:85:9f:72:e1:c8:f8:a0:48:
                    e7:43:09:00:3f:b9:27:22:0e:07:9f:bd:1d:a4:ba:
                    20:35:da:37:3a:c0:03:6f:a2:89:9b:e4:a5:48:92:
                    7c:a7:1d:78:f7:ef:53:11:ed:89:47:99:23:67:9f:
                    d1:72:0b:94:97:52:a3:74:66:af:05:d7:16:1f:d3:
                    43:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:91:04:E6:54:DD:40:26:64:F8:4D:4E:38:D7:CB:47:A3:02:79:F5
            X509v3 Authority Key Identifier:
                keyid:22:AD:A8:C3:3F:81:4A:9D:6C:A2:D5:06:9D:E2:5B:29:86:45:8D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/577ebac624b1c2d191b7182497a47ed595997c06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73caf-f783-46f5-ae28-ba41c78b6122/fc8b481541d829a92627471269442b0962fc09c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73caf-f783-46f5-ae28-ba41c78b6122/577ebac624b1c2d191b7182497a47ed595997c06.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.52.0/22
                IPv6:
                  2803:c5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:5a:1e:13:81:ee:7e:cd:c5:56:f5:8d:51:fd:07:8e:2a:7c:
         15:f0:fe:7b:80:f3:2a:fa:0e:c2:12:14:5d:5e:23:64:c6:b3:
         60:c1:2c:ff:30:7d:b9:33:2b:c8:0c:b3:d2:08:ba:13:9b:95:
         fd:0a:01:e7:08:1c:41:3e:5e:2c:ed:55:5b:00:30:9e:ed:a0:
         68:c9:e3:49:51:a6:23:04:bc:e7:c7:8f:b6:c8:f1:77:36:13:
         8a:2c:f4:20:1d:92:96:6f:71:0d:b1:a1:95:f4:28:85:94:a9:
         ca:c1:2d:34:4a:d4:ac:c5:bf:1a:1e:b8:d4:6e:b2:5f:16:0c:
         7c:12:f5:d1:2f:81:06:b0:ff:74:6c:d5:88:60:4f:16:a6:49:
         a4:19:69:b2:37:2c:62:3d:26:01:81:e8:f3:d4:69:9a:52:f0:
         a7:53:cd:6c:19:61:d1:92:c5:80:f1:80:4c:29:ad:93:0f:46:
         94:f8:e2:6a:b7:93:9c:c8:ee:60:eb:e9:65:42:66:f8:c5:e1:
         24:5a:40:f6:ad:3b:fa:20:3f:b1:b7:7b:51:0b:37:46:bd:50:
         cc:b9:36:da:0e:be:ac:e6:4d:c4:bc:b7:c8:1c:84:25:61:d3:
         d8:06:02:dd:57:73:8c:38:66:23:9f:34:fd:fc:15:1b:57:a4:
         e4:29:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org