Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1edb487f-8854-45e9-a3da-9e6ec1c691d6/c5bb8fa2b40af8838dcc243ccf979b21e83b6cd5.roa
File:                     c5bb8fa2b40af8838dcc243ccf979b21e83b6cd5.roa (raw, json)
Hash identifier:          xszoheD9xieraYlyCndDnl4+XkNirkUj8nGfd1ivGlU=
Subject key identifier:   9D:ED:8B:9F:05:7C:27:9E:B6:B3:2E:7D:A1:5A:A5:04:1C:8D:3E:E0
Certificate issuer:       /CN=b28670de25fd7cab3c0633d8b542e72d0d27342e
Certificate serial:       0D58AA
Authority key identifier: BA:B3:40:D9:C8:1C:66:53:E5:66:88:A5:49:53:E8:4F:65:AC:82:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b28670de25fd7cab3c0633d8b542e72d0d27342e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1edb487f-8854-45e9-a3da-9e6ec1c691d6/c5bb8fa2b40af8838dcc243ccf979b21e83b6cd5.roa
Signing time:             Wed 24 Mar 2021 14:36:30 +0000
ROA not before:           Wed 24 Mar 2021 14:36:30 +0000
ROA not after:            Tue 24 Mar 2026 14:36:30 +0000
asID:                     264835
IP address blocks:        170.82.40.0/23 maxlen: 23
                          2801:144::/42 maxlen: 42

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 22:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874666 (0xd58aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b28670de25fd7cab3c0633d8b542e72d0d27342e
        Validity
            Not Before: Mar 24 14:36:30 2021 GMT
            Not After : Mar 24 14:36:30 2026 GMT
        Subject: CN=c5bb8fa2b40af8838dcc243ccf979b21e83b6cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:9f:95:89:e1:91:de:a1:f9:1b:7d:88:a2:
                    9c:0e:9a:98:e7:53:84:9b:17:78:e6:8f:53:3c:7e:
                    c7:17:1c:a7:51:a1:02:56:91:23:d9:7c:af:47:6e:
                    7b:d1:13:ad:f7:3e:5f:57:dc:6c:a4:0e:38:ca:52:
                    30:ca:5b:ed:a2:30:40:cc:85:79:99:e0:21:73:50:
                    2e:51:d1:7e:e7:f2:17:3c:d7:5e:f2:fa:cb:a4:eb:
                    88:49:e1:d5:94:81:f6:8b:06:e2:90:50:75:56:b2:
                    0e:18:7f:64:52:2c:2f:8b:7b:24:be:a3:db:dd:74:
                    48:bc:ac:02:0f:ef:61:c4:2f:15:86:9a:3a:c7:22:
                    64:cf:18:39:07:6c:ba:ad:39:50:6d:09:64:0a:33:
                    bb:a0:87:31:4a:12:27:2c:e6:78:eb:0f:68:3d:79:
                    ca:33:a9:c2:85:5e:e7:e7:3d:d3:2a:bf:87:78:7d:
                    b1:f2:03:f5:77:c5:5a:a3:42:e4:b9:be:29:38:41:
                    56:ed:1d:da:4c:41:2e:b6:bf:0f:87:01:ce:a7:b7:
                    8e:73:7b:27:7f:29:0d:f3:3a:3b:6d:dc:a8:e0:6a:
                    01:47:9e:7a:85:46:1d:ad:d8:22:6a:54:fc:76:23:
                    71:50:d7:5e:10:25:a5:f8:06:6d:31:e1:49:11:b0:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:8B:9F:05:7C:27:9E:B6:B3:2E:7D:A1:5A:A5:04:1C:8D:3E:E0
            X509v3 Authority Key Identifier:
                keyid:BA:B3:40:D9:C8:1C:66:53:E5:66:88:A5:49:53:E8:4F:65:AC:82:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b28670de25fd7cab3c0633d8b542e72d0d27342e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1edb487f-8854-45e9-a3da-9e6ec1c691d6/c5bb8fa2b40af8838dcc243ccf979b21e83b6cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1edb487f-8854-45e9-a3da-9e6ec1c691d6/b28670de25fd7cab3c0633d8b542e72d0d27342e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.40.0/23
                IPv6:
                  2801:144::/42

    Signature Algorithm: sha256WithRSAEncryption
         26:1a:90:bc:c6:b0:13:5f:60:01:59:90:fc:59:8e:32:62:6c:
         38:a6:e7:07:0c:0a:04:e5:24:d0:7c:6b:af:03:ff:8e:aa:3a:
         dd:40:69:67:64:c7:54:a4:7a:01:45:2a:82:2d:c4:89:77:2b:
         ba:f1:ab:0f:3f:c2:ad:4e:93:cc:23:c4:bb:b1:33:81:8d:43:
         59:1a:26:c3:cc:76:7b:d9:0a:71:da:fd:ff:cf:05:fa:1c:96:
         66:52:a0:83:ef:e6:a6:95:87:e7:a7:91:47:f1:00:a2:7e:1b:
         59:67:a0:a1:51:72:00:d3:6d:47:e2:a9:8c:f6:ac:0a:ce:27:
         bd:0c:c9:e4:50:c4:30:d9:bc:a4:b3:65:57:13:04:ce:00:48:
         c8:17:f9:1a:bc:22:a0:d6:89:b7:06:a0:09:18:db:45:08:ad:
         be:7e:33:b7:c1:da:9b:9b:6c:f3:48:36:47:de:9c:ad:e4:09:
         43:fc:84:4e:72:b9:13:41:7a:3e:96:bf:5f:a0:b9:e9:a1:34:
         6c:3e:74:65:5a:35:43:9b:5b:45:85:f2:9d:46:76:73:62:d0:
         c3:8c:f8:f6:04:fc:aa:0d:dd:a6:28:b7:f0:55:e3:be:9f:31:
         f3:1e:aa:e5:14:71:16:81:3f:84:b4:2a:12:e0:d1:7d:e5:10:
         02:73:d3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----