Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/b3990189f256975612cf7a893483d33ad8118135.roa
File:                     b3990189f256975612cf7a893483d33ad8118135.roa (raw, json)
Hash identifier:          Auc0HvG1mgvMsbE/6h/dHOukqnDDEKPKFPGbAnTnquw=
Subject key identifier:   00:10:2E:33:DB:14:92:F0:E5:49:47:B1:3C:CE:99:78:88:20:F7:4E
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       080D07
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/b3990189f256975612cf7a893483d33ad8118135.roa
Signing time:             Wed 07 Sep 2022 21:32:37 +0000
ROA not before:           Tue 26 Jul 2022 03:00:00 +0000
ROA not after:            Wed 30 Apr 2025 03:00:00 +0000
asID:                     3790
IP address blocks:        181.224.74.0/24 maxlen: 24
                          2801:151:a2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527623 (0x80d07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Jul 26 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2025 GMT
        Subject: CN=b3990189f256975612cf7a893483d33ad8118135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b3:86:23:3e:c2:7b:d9:6b:2a:91:e4:dc:53:
                    52:5f:bf:9f:be:ea:b3:6f:5e:fc:85:53:a7:b2:c1:
                    df:e0:a0:80:cc:09:1e:e3:cc:14:e6:7d:e9:47:af:
                    18:33:8e:87:3e:15:10:83:c9:0e:7d:d1:b8:9a:f8:
                    04:d0:e1:c7:63:d6:ef:e0:e5:73:02:d4:ee:f8:88:
                    5e:f5:fd:c2:fe:be:44:71:59:6b:f7:d9:98:79:04:
                    30:7d:f4:4e:34:22:0b:e8:df:4d:47:63:f2:ba:34:
                    22:bf:66:1c:d1:94:7c:58:85:26:5b:aa:bb:ec:18:
                    09:e3:6d:46:58:f5:bc:87:88:af:3f:38:a6:ec:d8:
                    e0:ef:26:56:06:72:06:78:46:0e:ff:a5:b9:56:9d:
                    46:84:b5:58:e4:cc:d4:ae:21:87:27:9a:7f:4d:5b:
                    ae:b1:f7:da:d2:1b:33:9f:97:da:93:11:30:e1:6f:
                    15:99:8e:1a:65:36:c5:3e:ad:87:bb:9a:ae:eb:21:
                    5a:89:7d:c4:0f:25:c2:af:4b:96:cc:08:db:80:ce:
                    7c:7f:6a:70:86:52:06:0e:50:f0:2c:49:0b:1e:45:
                    64:64:fd:c6:d0:f2:e1:f4:2f:9e:1e:92:01:ec:ec:
                    41:38:3d:a8:e5:fe:41:ad:82:b9:d4:de:84:13:77:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:10:2E:33:DB:14:92:F0:E5:49:47:B1:3C:CE:99:78:88:20:F7:4E
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/b3990189f256975612cf7a893483d33ad8118135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.74.0/24
                IPv6:
                  2801:151:a2::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:98:3c:11:97:14:d8:05:17:a4:00:f8:d2:30:cb:1a:32:f7:
         0b:2c:d8:a0:1a:67:06:bd:e2:68:4a:86:a7:33:6e:60:c7:4d:
         2d:ce:13:7d:ff:80:2d:f2:ef:5f:ec:71:56:4b:e5:9e:1e:ec:
         9f:41:5d:f7:05:21:46:44:b8:3b:61:90:42:16:5a:c5:49:26:
         db:f3:9e:90:3f:e1:82:39:ad:22:d1:26:29:c7:6e:05:4d:09:
         c9:ac:26:41:ce:de:55:a9:9f:82:40:d7:d1:2a:fe:67:95:1f:
         ee:3d:2d:ec:f9:30:f2:60:37:cb:b9:ce:b0:31:5e:64:ca:af:
         86:10:5b:5c:e6:05:4a:68:f2:ca:b3:76:70:f0:24:f2:c6:ab:
         26:e0:c4:c1:cc:4c:5f:0a:88:01:b0:92:a4:d8:cb:4f:bd:76:
         f6:e4:19:70:a4:3b:4b:ca:45:cb:b3:94:ad:6a:ab:ac:d3:6f:
         c3:79:1e:33:de:f3:da:92:5f:73:fe:36:33:13:d8:96:6b:1d:
         41:09:29:c1:16:ea:12:1f:af:3b:d8:25:75:d2:0a:39:ef:3b:
         87:e6:b5:66:f7:a7:a4:3d:c6:e8:8e:f1:06:c8:5e:15:90:78:
         6f:aa:67:e4:26:49:e7:79:76:e1:cc:50:46:4c:24:fe:1e:e4:
         fa:bd:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----