Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7ab5de3fef15b089a7ee2fc5e87b0290cfad642f.roa
File:                     7ab5de3fef15b089a7ee2fc5e87b0290cfad642f.roa (raw, json)
Hash identifier:          ERDActyeSgrPUL+Q9DYNzQtLRp1/ofQzXvEA53D42Io=
Subject key identifier:   B7:75:56:E4:16:C9:33:63:11:45:CD:2E:FA:CB:2B:8D:00:9C:D5:05
Certificate issuer:       /CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
Certificate serial:       063AE8
Authority key identifier: EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7ab5de3fef15b089a7ee2fc5e87b0290cfad642f.roa
Signing time:             Wed 16 Nov 2022 17:09:02 +0000
ROA not before:           Wed 31 Aug 2022 16:59:52 +0000
ROA not after:            Wed 04 Sep 2024 16:59:52 +0000
asID:                     270081
IP address blocks:        179.49.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408296 (0x63ae8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
        Validity
            Not Before: Aug 31 16:59:52 2022 GMT
            Not After : Sep  4 16:59:52 2024 GMT
        Subject: CN=7ab5de3fef15b089a7ee2fc5e87b0290cfad642f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:cd:9b:fd:2a:32:a4:d7:5e:1b:b0:3c:8b:
                    b0:66:3e:1d:84:21:07:bc:4e:97:86:ca:2e:98:db:
                    91:f9:aa:10:a3:bb:32:ea:ae:69:a4:0b:37:fa:8a:
                    da:9a:ba:2d:b4:8a:b7:d8:05:3c:11:9f:d4:99:0d:
                    7d:c0:f4:3c:0e:c5:e4:3d:d7:ca:be:6a:49:75:5d:
                    ad:35:dd:ed:65:09:70:d6:ed:2d:22:57:26:be:8d:
                    e3:67:41:54:39:0d:cc:03:0d:15:dd:86:1f:37:8f:
                    49:69:de:8b:02:4f:03:f7:3b:f0:bc:ae:50:49:09:
                    2e:c6:73:c6:ab:53:3b:77:4e:c4:9b:c6:91:49:ed:
                    7a:6c:c5:f7:29:2b:3f:84:fa:f7:12:7e:6f:8a:16:
                    db:fb:df:f9:08:76:21:bd:c4:b7:4f:21:93:6e:93:
                    7e:be:b7:c5:f6:4c:32:17:6b:3d:c3:48:81:0a:29:
                    8b:c4:19:1a:18:c8:f6:b6:19:58:41:b8:36:b0:2c:
                    56:de:49:95:57:86:50:c4:88:8d:31:74:40:b1:5e:
                    4d:38:b3:6f:e3:43:06:6b:e9:02:5c:4a:6b:4f:9f:
                    ce:0e:ed:35:28:31:24:9f:bf:b9:4b:1b:48:fe:c3:
                    d7:58:6f:5f:bd:c2:58:76:f1:df:74:27:ec:7d:e9:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:75:56:E4:16:C9:33:63:11:45:CD:2E:FA:CB:2B:8D:00:9C:D5:05
            X509v3 Authority Key Identifier:
                keyid:EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7ab5de3fef15b089a7ee2fc5e87b0290cfad642f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:59:87:d0:ca:d8:da:d5:34:3c:78:43:54:2a:d3:20:ea:bc:
         fe:f6:3d:04:09:8b:44:dd:c2:32:ea:d3:03:ac:fe:df:f4:4a:
         c4:0e:46:60:f9:49:14:79:20:54:e2:48:6e:87:bd:b1:9e:c5:
         4d:b4:4e:b8:ab:bd:fd:b5:66:4a:cf:7e:81:9e:8d:e2:a4:aa:
         8e:cf:70:b4:0c:5f:92:a8:95:04:49:5a:0c:ea:a5:42:d5:3c:
         e4:9e:6c:3b:a0:b4:a8:33:82:0e:69:8a:e6:f9:6e:f8:94:22:
         96:db:6d:dd:31:ad:e0:21:dc:76:85:b5:bf:10:13:6d:57:24:
         dd:b3:8b:46:9e:90:21:46:9a:f6:71:55:c9:e4:a4:5d:e0:c1:
         9f:07:1d:35:88:bd:69:33:ee:f1:21:e7:af:16:49:4c:d2:ef:
         97:41:1c:cb:4c:74:13:8e:35:b7:d9:6d:b4:c4:7f:ea:ae:1d:
         c2:d7:3b:01:dd:86:d8:90:3e:b0:0d:d5:dc:b5:25:53:e5:93:
         ec:e2:c6:13:be:c0:37:28:96:6f:a4:3c:62:d9:57:06:31:bf:
         0f:1d:8a:8e:5d:2d:e5:ca:eb:b8:b1:df:dd:ad:7a:08:7b:e6:
         7a:d5:23:db:aa:22:28:44:25:26:6c:6c:a1:94:98:18:5f:26:
         ab:d9:db:1e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBjroMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
MGQzZWFmYmRhZTJlNTI2MzZlMTFhYTIwYjlkNzQ1ZmRlZjQ0ZTcwHhcNMjIwODMx
MTY1OTUyWhcNMjQwOTA0MTY1OTUyWjAzMTEwLwYDVQQDEyg3YWI1ZGUzZmVmMTVi
MDg5YTdlZTJmYzVlODdiMDI5MGNmYWQ2NDJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuafNm/0qMqTXXhuwPIuwZj4dhCEHvE6XhsoumNuR+aoQo7sy
6q5ppAs3+oramrottIq32AU8EZ/UmQ19wPQ8DsXkPdfKvmpJdV2tNd3tZQlw1u0t
Ilcmvo3jZ0FUOQ3MAw0V3YYfN49Jad6LAk8D9zvwvK5QSQkuxnPGq1M7d07Em8aR
Se16bMX3KSs/hPr3En5vihbb+9/5CHYhvcS3TyGTbpN+vrfF9kwyF2s9w0iBCimL
xBkaGMj2thlYQbg2sCxW3kmVV4ZQxIiNMXRAsV5NOLNv40MGa+kCXEprT5/ODu01
KDEkn7+5SxtI/sPXWG9fvcJYdvHfdCfsfenpOQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLd1VuQWyTNjEUXNLvrLK40AnNUFMB8GA1UdIwQYMBaAFO+taD1K6quKx+Jw
XVD9cq0bzfKIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2EwZDNl
YWZiZGFlMmU1MjYzNmUxMWFhMjBiOWQ3NDVmZGVmNDRlNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDQzYWM3NmMtOGVhYy00ZTljLTg5MjEtOWFhYjIz
YjgxZDMwLzdhYjVkZTNmZWYxNWIwODlhN2VlMmZjNWU4N2IwMjkwY2ZhZDY0MmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NDNhYzc2Yy04ZWFjLTRlOWMtODkyMS05YWFi
MjNiODFkMzAvN2EwZDNlYWZiZGFlMmU1MjYzNmUxMWFhMjBiOWQ3NDVmZGVmNDRl
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALMxnDANBgkqhkiG9w0BAQsFAAOCAQEAJVmH0MrY2tU0PHhD
VCrTIOq8/vY9BAmLRN3CMurTA6z+3/RKxA5GYPlJFHkgVOJIboe9sZ7FTbROuKu9
/bVmSs9+gZ6N4qSqjs9wtAxfkqiVBElaDOqlQtU85J5sO6C0qDOCDmmK5vlu+JQi
lttt3TGt4CHcdoW1vxATbVck3bOLRp6QIUaa9nFVyeSkXeDBnwcdNYi9aTPu8SHn
rxZJTNLvl0Ecy0x0E441t9lttMR/6q4dwtc7Ad2G2JA+sA3V3LUlU+WT7OLGE77A
NyiWb6Q8YtlXBjG/Dx2Kjl0t5crruLHf3a16CHvmetUj26oiKEQlJmxsoZSYGF8m
q9nbHg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org