Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/007590cdeb35bc244ea2737c42913331988ec136.roa
File:                     007590cdeb35bc244ea2737c42913331988ec136.roa (raw, json)
Hash identifier:          pv2SiqAW7+FgC/M7eSOuxSfwwJw2mtoVTficiNtlSQw=
Subject key identifier:   8E:90:23:44:62:68:0D:83:F9:9F:54:E8:9B:F8:81:E4:EB:ED:F1:9A
Certificate issuer:       /CN=fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10
Certificate serial:       0C2911
Authority key identifier: 78:76:9D:A7:C7:99:59:9E:F4:6F:DD:79:75:96:43:C3:76:83:7E:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/007590cdeb35bc244ea2737c42913331988ec136.roa
Signing time:             Wed 24 Mar 2021 22:50:50 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     264712
IP address blocks:        170.150.10.0/24 maxlen: 24
                          170.150.11.0/24 maxlen: 24
                          170.150.8.0/24 maxlen: 24
                          170.150.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796945 (0xc2911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=007590cdeb35bc244ea2737c42913331988ec136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:9c:58:6a:37:44:83:40:5b:eb:e0:e2:a0:
                    b3:45:ae:06:69:be:a4:da:bc:0c:63:7b:95:87:b9:
                    5a:c0:80:f6:87:d3:f9:cb:07:78:d8:6e:1f:56:75:
                    bc:c1:be:0a:7e:6e:32:e4:b0:8d:fe:29:aa:38:b0:
                    92:1a:ba:4f:69:e2:4a:7f:0e:d9:7d:a4:e5:3a:c7:
                    0e:7c:8a:fb:26:66:6b:d9:56:ea:35:9c:6f:cf:39:
                    2c:cd:33:1b:c8:0f:ab:82:40:d4:ec:4f:83:e4:b5:
                    b9:11:bb:ee:17:6c:3c:cd:87:54:0a:b7:3f:b1:b3:
                    f0:f4:7b:75:3b:b2:04:60:de:bd:58:fe:2d:c6:36:
                    cd:c6:52:b0:88:39:5f:66:b3:f1:df:e7:83:58:7b:
                    06:42:20:e9:70:56:f6:f7:92:cf:1c:cf:ae:42:e4:
                    85:62:20:0a:29:59:39:8c:04:58:35:9a:c8:05:d2:
                    79:78:1b:d6:32:11:c5:48:13:1d:a4:f3:0a:00:80:
                    16:c7:e1:38:3b:af:68:de:d4:fb:a3:2c:b9:61:69:
                    5b:49:d4:ed:78:65:35:ec:3e:2c:d2:39:71:44:99:
                    c2:73:6f:bd:f1:b8:15:6b:1f:0d:77:19:8b:fd:cf:
                    10:93:f5:9a:2d:9f:e7:d3:95:63:06:40:b8:36:45:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:90:23:44:62:68:0D:83:F9:9F:54:E8:9B:F8:81:E4:EB:ED:F1:9A
            X509v3 Authority Key Identifier:
                keyid:78:76:9D:A7:C7:99:59:9E:F4:6F:DD:79:75:96:43:C3:76:83:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/007590cdeb35bc244ea2737c42913331988ec136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:c7:2a:fe:10:69:55:0f:ec:94:bb:47:80:80:7e:06:94:ec:
         bf:d0:27:5b:e9:ed:14:1e:29:e5:16:16:c4:6c:21:a1:c7:ca:
         12:78:bf:ba:ea:65:d8:f4:db:ce:52:9a:2e:36:64:d7:c4:24:
         07:ed:ac:31:bc:2b:85:55:1c:aa:02:8b:e7:30:0e:d7:12:5c:
         7d:f7:bc:f8:52:6a:a6:0d:b8:1a:74:f4:12:a4:9d:57:12:96:
         88:c3:4c:b1:d2:df:df:15:ae:73:6b:8e:8e:45:9b:9b:f9:e9:
         1b:e3:9d:ea:21:74:c7:e4:eb:7c:84:1f:63:08:0e:34:84:0d:
         2a:aa:bc:ff:6d:c4:aa:f3:3a:62:10:0d:8c:90:68:26:2d:00:
         eb:23:93:0f:cd:99:ea:17:7f:88:1f:8b:86:c5:c0:7b:51:16:
         83:8f:93:ff:68:09:29:22:02:b5:8c:b2:0a:f4:81:bd:38:33:
         85:c2:fc:ec:f2:66:ab:ee:d0:ba:a2:b3:ff:d7:9e:02:2d:e5:
         87:1d:3d:a1:4e:34:5c:27:bb:d9:86:88:57:bd:a8:fc:1b:7d:
         73:21:f7:8b:70:09:c8:51:ee:d8:5d:ca:c5:4d:8c:2c:74:be:
         dd:77:6a:eb:34:02:44:e0:4c:b2:84:74:84:1b:d4:2d:fc:4c:
         58:e4:88:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org