Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f388107-b6ba-49ff-9a94-36018ea66f84/257c44a04e207b3c316cecab2e7b201692b9ef6d.roa
File:                     257c44a04e207b3c316cecab2e7b201692b9ef6d.roa (raw, json)
Hash identifier:          kg2GWXg1Tshm3hB6ErCA8o/FIG+dQIvpvIvmjhJ5PEM=
Subject key identifier:   79:4D:96:95:6A:6B:CE:B5:3C:D1:D2:60:EC:62:59:09:42:3B:38:2A
Certificate issuer:       /CN=1b8d80ea6f48dbc05e5fac488c60647f4529a76a
Certificate serial:       08E110
Authority key identifier: B4:3D:39:43:C2:84:23:C3:24:B5:1D:72:22:A4:4A:29:09:EB:6A:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b8d80ea6f48dbc05e5fac488c60647f4529a76a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f388107-b6ba-49ff-9a94-36018ea66f84/257c44a04e207b3c316cecab2e7b201692b9ef6d.roa
Signing time:             Thu 15 Sep 2022 01:26:42 +0000
ROA not before:           Wed 29 Sep 2021 03:00:00 +0000
ROA not after:            Fri 29 Sep 2023 03:00:00 +0000
asID:                     263815
IP address blocks:        167.249.192.0/22 maxlen: 22
                          167.249.192.0/24 maxlen: 24
                          167.249.193.0/24 maxlen: 24
                          167.249.194.0/24 maxlen: 24
                          167.249.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581904 (0x8e110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b8d80ea6f48dbc05e5fac488c60647f4529a76a
        Validity
            Not Before: Sep 29 03:00:00 2021 GMT
            Not After : Sep 29 03:00:00 2023 GMT
        Subject: CN=257c44a04e207b3c316cecab2e7b201692b9ef6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a5:db:a6:8e:e7:fd:63:e4:f8:9f:83:0a:be:
                    6d:cf:8e:78:6e:ae:32:a5:34:72:4c:3b:b4:f4:b7:
                    37:2b:55:21:c5:6a:48:6d:9d:40:ce:32:5e:d3:6c:
                    50:2d:ef:1c:ce:13:3a:e1:f5:31:29:f9:f7:90:8d:
                    18:51:87:49:f9:c1:df:87:6a:29:43:df:37:f4:34:
                    20:b8:e5:50:fe:51:a6:2b:3b:8f:ec:39:52:f5:78:
                    2e:71:27:ca:ee:da:fd:2c:22:7b:6c:0d:7f:7c:be:
                    cb:36:f4:48:31:9b:f3:e6:a2:74:1d:7c:cf:bf:be:
                    a9:aa:0f:5a:9b:44:49:d9:c4:0a:3b:5d:0e:6a:3f:
                    9e:21:dd:81:f9:5c:2a:39:58:d7:fd:a8:72:fa:ce:
                    32:81:52:9c:b2:9b:39:10:4b:c6:5b:a5:bd:ea:91:
                    04:77:f4:96:1f:93:3c:89:7e:7f:2e:95:8c:f8:ab:
                    6e:c9:71:bf:4f:ab:fc:fb:28:dd:c9:dc:b3:37:8d:
                    85:6a:4d:ae:1c:85:d0:92:a5:35:69:2f:84:9a:52:
                    b9:64:08:9b:5c:a7:80:ac:b1:c8:ec:f6:68:fd:61:
                    31:ea:b4:19:f2:4e:93:00:2a:aa:36:f7:99:95:cb:
                    2c:39:f7:34:38:3c:13:92:ff:7d:11:1b:6d:3e:9b:
                    0c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4D:96:95:6A:6B:CE:B5:3C:D1:D2:60:EC:62:59:09:42:3B:38:2A
            X509v3 Authority Key Identifier:
                keyid:B4:3D:39:43:C2:84:23:C3:24:B5:1D:72:22:A4:4A:29:09:EB:6A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b8d80ea6f48dbc05e5fac488c60647f4529a76a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f388107-b6ba-49ff-9a94-36018ea66f84/257c44a04e207b3c316cecab2e7b201692b9ef6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f388107-b6ba-49ff-9a94-36018ea66f84/1b8d80ea6f48dbc05e5fac488c60647f4529a76a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:33:74:05:a0:01:bb:0e:ed:54:58:6d:26:4f:57:eb:3c:3b:
         31:b2:59:27:cb:6f:8f:01:dd:6c:d8:cf:8a:60:a3:ec:d7:d4:
         8c:d6:88:18:68:0d:e5:3e:9d:e1:d8:89:99:a6:94:a5:d2:c3:
         eb:15:f7:42:ae:88:c5:04:34:90:79:4a:8a:82:47:57:d1:45:
         1b:b1:73:44:99:8a:69:ee:47:d9:81:c2:be:1d:1f:da:80:49:
         ff:8b:42:9b:ad:f3:ee:d8:0b:b4:22:3b:13:0b:d9:0f:f4:08:
         7d:01:88:ab:f3:41:b0:b2:4a:b4:c7:a6:57:95:7c:a4:2c:60:
         3c:84:e0:37:db:33:cc:32:74:ea:dd:3d:d0:79:fe:e6:ae:f7:
         a1:5c:27:cd:1c:3d:db:a8:78:8a:f5:d3:23:d0:46:2f:12:a1:
         d9:af:3b:d9:a4:48:28:a1:80:09:b0:30:bc:35:cd:88:4b:72:
         ad:5a:ce:6e:cf:b7:b6:b4:37:be:78:b2:e1:1c:8b:9d:bb:e8:
         7e:4e:cf:2b:f5:35:fe:10:f6:ac:8a:9f:d0:30:72:f2:1e:8b:
         dc:8a:25:e4:cc:51:1f:8e:11:df:ea:b7:27:8c:28:4b:f5:36:
         2c:0d:1a:ff:b4:eb:d2:e4:20:78:01:88:8a:b8:fa:f8:87:92:
         7c:7b:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 08:58:00 2023 by rpki-client on console-fra.rpki-client.org