Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30f78253-2545-487a-8286-59bd4427086e/829d69e0544601aca8790597b3f2527739fc0c76.roa
File:                     829d69e0544601aca8790597b3f2527739fc0c76.roa (raw, json)
Hash identifier:          N7Sl8flBVjastEUuGn3Vce/HdCTUP1/C7JvRlsLxkes=
Subject key identifier:   45:CF:69:21:23:D0:26:AE:01:38:46:19:B9:56:05:C4:90:57:50:CC
Certificate issuer:       /CN=47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f
Certificate serial:       03F7
Authority key identifier: 49:EF:4B:91:69:AA:53:FD:39:08:98:AC:33:76:C6:A2:AE:3B:E8:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30f78253-2545-487a-8286-59bd4427086e/829d69e0544601aca8790597b3f2527739fc0c76.roa
Signing time:             Mon 26 Jul 2021 17:49:51 +0000
ROA not before:           Mon 26 Jul 2021 03:00:00 +0000
ROA not after:            Wed 26 Jul 2023 03:00:00 +0000
asID:                     263764
IP address blocks:        167.249.216.0/22 maxlen: 24
                          190.106.80.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f
        Validity
            Not Before: Jul 26 03:00:00 2021 GMT
            Not After : Jul 26 03:00:00 2023 GMT
        Subject: CN=829d69e0544601aca8790597b3f2527739fc0c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:ed:89:29:e9:58:46:05:2e:85:d1:01:02:
                    c5:50:9b:8e:24:36:40:a6:eb:63:be:ee:57:4d:61:
                    02:24:f9:4d:75:85:3e:22:7e:d5:95:8d:9d:81:68:
                    c3:20:29:b4:32:20:4c:21:96:c8:ea:dc:9d:bf:d7:
                    f8:0d:3e:8c:ae:90:79:4a:0c:a7:82:0a:e3:a2:54:
                    d5:7c:e5:ec:74:aa:c9:08:3c:a2:c0:5c:c7:50:0a:
                    9c:8c:21:45:77:20:43:10:a8:25:7f:de:70:8f:56:
                    e9:1b:1c:06:bc:fb:6a:3d:57:5d:8a:4d:5a:19:1b:
                    f9:c9:b7:f1:dd:05:0c:ff:8e:61:09:fb:e3:37:7e:
                    3c:5c:03:9e:13:43:67:ec:47:b8:f7:34:88:b0:a1:
                    f1:f2:cb:86:e0:62:f1:31:30:79:eb:42:5e:3f:d1:
                    60:48:48:a0:f8:67:bc:7d:1d:10:cb:ff:62:34:05:
                    2f:72:65:58:a1:00:04:d7:1b:7d:50:e4:97:42:84:
                    34:19:82:45:1b:f3:b1:1f:bd:55:da:25:75:c6:45:
                    8c:0b:03:0b:86:b1:43:bd:3b:94:03:67:f3:c8:d5:
                    0d:fa:77:a3:e7:09:81:55:da:42:37:b9:57:05:b7:
                    b4:b9:63:6b:70:52:d4:54:5d:3e:c3:c4:3f:22:e6:
                    fb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CF:69:21:23:D0:26:AE:01:38:46:19:B9:56:05:C4:90:57:50:CC
            X509v3 Authority Key Identifier:
                keyid:49:EF:4B:91:69:AA:53:FD:39:08:98:AC:33:76:C6:A2:AE:3B:E8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30f78253-2545-487a-8286-59bd4427086e/829d69e0544601aca8790597b3f2527739fc0c76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30f78253-2545-487a-8286-59bd4427086e/47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.216.0/22
                  190.106.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:d1:ea:f1:02:4c:1e:cc:ca:b8:36:bd:d4:c9:2c:52:45:02:
         52:17:fb:4e:58:e7:87:1c:5f:6f:60:93:1a:03:d9:82:8c:cf:
         52:f4:68:70:04:a4:b6:d3:92:4a:65:22:9a:63:27:ec:d8:83:
         65:11:7b:d3:3e:9b:b1:4d:ef:eb:ff:1c:57:47:35:86:0f:63:
         41:2e:1f:f8:b4:29:f4:2d:b6:f3:de:0c:36:91:84:21:52:82:
         ab:c3:3e:d1:ed:21:d1:1c:10:68:1f:dc:c8:18:51:b6:c0:41:
         6c:6a:94:13:5e:8b:21:33:f8:6a:72:70:c5:ec:0c:c0:5d:c4:
         29:8a:78:ca:4b:3c:b4:38:32:51:e6:9e:72:2d:99:c9:ef:7a:
         b2:e7:c1:1e:54:54:d0:e5:66:cf:91:cd:52:32:04:c3:9e:c8:
         e6:08:dc:c3:65:88:a0:e1:e3:38:c0:af:0b:a9:ab:e0:b0:a4:
         3f:0c:53:c8:9f:b5:af:f4:8d:ff:83:23:25:65:34:27:6c:e6:
         86:90:4c:11:93:e5:6c:14:84:ad:d2:ab:b6:c3:81:43:e4:78:
         47:78:63:3b:9b:47:e4:95:af:df:46:97:25:aa:e9:9c:d8:9d:
         40:65:79:a9:e9:2b:ca:f3:89:db:eb:72:b3:14:1d:a5:6b:18:
         7d:f7:0a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 09:05:50 2023 by rpki-client on console-fra.rpki-client.org