Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/1b7884c42cd1b1c7ef23159401282df8b38b3b2c.roa
File:                     1b7884c42cd1b1c7ef23159401282df8b38b3b2c.roa (raw, json)
Hash identifier:          xjGlfibbbLNYshnKD2mqoWNDPtHyeqjeM407024VC5Y=
Subject key identifier:   A2:5A:C4:74:99:16:79:58:23:5B:06:BE:DD:BF:CC:51:6E:9C:CF:AB
Certificate issuer:       /CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
Certificate serial:       0BC328
Authority key identifier: EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/1b7884c42cd1b1c7ef23159401282df8b38b3b2c.roa
Signing time:             Sun 02 Jul 2023 04:09:35 +0000
ROA not before:           Sat 01 Jul 2023 04:09:35 +0000
ROA not after:            Wed 02 Jul 2025 04:09:35 +0000
asID:                     270081
IP address blocks:        179.49.156.0/22 maxlen: 24
                          2803:8be0::/32 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 770856 (0xbc328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
        Validity
            Not Before: Jul  1 04:09:35 2023 GMT
            Not After : Jul  2 04:09:35 2025 GMT
        Subject: CN=1b7884c42cd1b1c7ef23159401282df8b38b3b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ef:92:6f:c7:71:72:10:aa:40:73:9a:e1:b0:
                    52:4a:00:38:21:e0:9a:63:ca:e8:9d:f5:d3:42:a2:
                    ac:77:75:5a:52:59:84:fd:1a:e6:c2:b0:c9:39:44:
                    02:ac:37:0a:39:90:57:e0:25:45:0b:e0:69:63:25:
                    3e:12:f0:74:9b:14:0e:ef:db:9b:2b:83:30:57:d9:
                    8a:8e:11:57:e0:6d:22:8d:16:7f:05:bb:f0:2d:ae:
                    1f:7c:cc:40:53:22:db:97:46:db:2b:64:c6:51:cd:
                    9b:9b:02:5e:af:9c:fc:db:22:6b:0f:4e:cc:33:b6:
                    89:b2:d7:23:b2:ea:2f:3a:bf:86:fc:5a:34:61:30:
                    61:b9:f3:cd:3e:51:c4:9d:d5:79:40:16:43:a6:7e:
                    55:62:1b:92:cb:8e:be:c6:5f:06:0c:59:70:1f:f1:
                    5b:e7:02:0b:43:4c:dd:30:58:35:5c:1f:43:63:c9:
                    a7:5d:30:4e:ee:da:55:2c:57:ef:6d:ae:d7:74:eb:
                    54:e6:f5:c9:c8:1c:dc:e0:58:78:a4:75:6f:fb:eb:
                    64:b0:20:c4:d6:31:9d:f2:85:00:4b:c5:64:15:2b:
                    4b:38:43:d2:21:c0:52:4d:04:66:f5:57:2b:91:23:
                    e0:31:05:0f:40:b8:90:ea:91:c4:de:7c:b2:2a:01:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5A:C4:74:99:16:79:58:23:5B:06:BE:DD:BF:CC:51:6E:9C:CF:AB
            X509v3 Authority Key Identifier:
                keyid:EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/1b7884c42cd1b1c7ef23159401282df8b38b3b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.156.0/22
                IPv6:
                  2803:8be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:ad:b3:02:fe:ce:03:47:e2:2c:8d:9e:b3:9d:9e:d8:6d:c1:
         a5:82:e6:6b:e0:fc:df:db:98:f7:3c:e2:a9:85:8f:03:d8:bd:
         81:30:6f:4b:ab:d6:de:1f:2a:ba:58:ae:cf:5b:ab:53:6c:7c:
         13:8f:54:70:2f:f5:53:2a:81:f1:63:4d:01:a4:9d:01:de:99:
         b9:35:19:29:ee:0e:e1:45:27:88:3a:f3:c2:21:ff:bc:29:1c:
         3f:db:1b:12:41:dd:0f:d9:ca:5e:07:fc:47:63:08:6b:95:56:
         b2:fc:d0:37:00:a6:46:f2:45:4e:0e:45:9a:3c:60:e2:4f:46:
         1e:48:e1:8b:df:e4:11:f6:98:f5:18:0d:20:37:55:2f:5d:2f:
         d1:f2:97:29:e8:f3:c1:c5:79:6c:f2:3f:e0:51:c1:2d:e4:80:
         05:b6:e9:72:13:90:6c:7f:44:0d:e9:5f:e7:03:bc:d9:2f:7b:
         e0:c4:e4:88:4a:7d:c9:98:e2:ad:d2:9e:c4:5b:61:52:20:2f:
         c1:4c:c4:d4:af:83:01:31:02:6b:57:07:e7:cb:27:59:32:6a:
         dc:49:69:cd:bb:4d:71:85:9b:67:08:56:96:c3:5f:2b:b7:8e:
         8a:7e:96:42:24:8a:29:3c:26:ec:5d:f4:1f:05:93:2d:df:6e:
         0d:74:54:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----